Privacy policy

Nanda.Ai is run by Nanda.Ai. In these pages, “we” and “us” means Nanda.Ai.

Contact us through the support page.

This policy explains what information we collect, why, who handles it, how long we keep it, and your rights.

• Account details: your name, email address, country and preferred language. If you sign in with Google, Google shares your name and email with us.
• Interview answers: such as your work, skills, interests, budget, the hours you have and where you live and sell.
• What we create for you: business ideas, market analyses, blueprints and the steps you tick off.
• Ask Nanda: the questions you ask and the answers, saved with the plan they are about.
• Support messages: your name, email and what you write to us.
• What you agreed to: that you confirmed your age, accepted the terms, and chose yes or no to marketing emails, with the date and the wording you saw.
• Payment records, once payments start: what you bought, the amount and the date. Card details go straight to our payment provider and never reach us.
• Security data: to stop abuse, we count how often an internet address tries to log in or send forms. We store a scrambled (hashed) form of the address, not the address itself.

We collect only what we need to run Nanda.Ai. We don't use analytics or advertising trackers, we don't track your location, and we don't ask for ID numbers, health details or other sensitive information. Please don't include them in your answers.

• To provide the service you asked for (our contract with you): the interview, your ideas, market analysis, blueprint and Ask Nanda answers, and your account.
• To keep Nanda.Ai safe (our legitimate interest): preventing abuse and fixing problems.
• To answer your support messages (our legitimate interest in helping you).
• To send marketing emails, only if you said yes (your consent). You can say no at any time in Settings or with the unsubscribe link in each email.
• To keep records the law requires (legal obligation): payment records and proof of consent.

We do not sell your information, and we do not use it for advertising.

To create your ideas and reports, your interview answers are sent to an AI provider, which also searches the web for market and setup information. During the beta this is Google's Gemini API, whose free service may use what it receives, including through human review, to improve Google's products. When we launch, we plan to move to Anthropic's Claude on paid terms, which do not use your content to train its models. We will update this policy when that happens.

Nanda and the reports are written by AI, which can make mistakes. Reports show their sources so you can check.

We use a small number of service providers (sub-processors), such as our database and AI providers, who process information only to provide their service to us. The full list, with what each one does and where, is on our sub-processors page. We may also share information when the law requires it.

Some providers process data outside the country you live in. Where the law requires it, for example for data from the European Union or the UK, we only use providers that sign data protection terms with us, including the European Commission's Standard Contractual Clauses (or the UK equivalent).

Data past its time is deleted automatically every day.

• Get a copy: in Settings, choose Download my data. You get one file with everything we hold about you.
• Correct it: edit your profile in Settings and your answers in your interview, or ask us.
• Delete it: see below.
• Withdraw consent: turn marketing emails off in Settings, and change cookie choices with “Cookie settings” at the bottom of the site. Saying no is as easy as saying yes.
• Object or ask us to limit how we use your information.

For anything you can't do yourself, ask through the support page and choose “My account or data”. We reply within 30 days. You can also complain to the data protection authority where you live.

• Yourself, at any time: go to Settings and choose Delete account. It deletes your account, answers, ideas, plans, Ask Nanda conversations and support messages straight away.
• If you can't log in: send a request through the support page with the email on your account. We confirm it's you by writing to that email, then delete everything.

We keep only what the law requires: payment records (no longer linked to you) and the record of what you agreed to, for the times shown above.

We send emails about your account, such as confirming your email or resetting your password. Marketing emails are separate: we only send them if you ticked the box to say yes, and every one has an unsubscribe link.

We use only essential cookies that keep you signed in, and remember your light or night mode on your device. If we ever add optional cookies, such as analytics, they stay off until you say yes. See our cookie policy.

During the beta, Nanda.Ai is only for people aged 18 and over, and we don't knowingly collect information from anyone younger. If we learn that someone under 18 has an account, we delete it. Parents can ask us to do this through the support page. We plan to welcome 13 to 17 year olds later, only with a parent's approval; we will update this policy first.

Information is encrypted on its way to us and where it is stored. Each person can only see their own data, passwords are stored as secure hashes that even we can't read, and we limit repeated login attempts.

If a data breach puts your information at risk, we will tell the data protection authority within 72 hours of finding out where the law requires it, and tell you without undue delay, explaining what happened and what to do.

If we change this policy, we will update the date above and, for important changes, tell you by email.