Skip to main content
This page is the plain-language inventory of what Donna reads and what it keeps. The full Privacy Policy and Terms of Service are in the app under /legal, and on the Donna website.

​
What Donna reads

  • Your conversations, typed or dictated. This is the main thing Donna learns from.
  • Your calendar, if you connect it.
  • Other tools you connect, only when a task needs them.
  • The page you are writing in the work view, if the “share your work surface” setting is on. It is on by default; the toggle is covered below.

​
What Donna does not do

  • Donna does not watch your screen or the apps you use.
  • Donna does not log your keystrokes.
  • Donna does not track what you’re doing between conversations.
  • Donna does not act in your calendar or your connected tools on its own. Every change is one you asked for, one you made by hand (like dragging an event), or the one automatic case described below, which is off until you turn it on.

​
Everything Donna keeps

This is the complete inventory. Memory covers how it builds up as you work; this table is the reference list of what is stored.
Donna keeps no streaks and no late flags, and it never shows you a count of what you’ve skipped or how long you were away. The behavioral signals in the table above change Donna’s approach; they are not displayed as a score anywhere in the product.

​
Correcting and erasing

If Donna has something wrong about you, say so in the conversation and it works from your correction for the rest of that conversation. When a belief turns out wrong, Donna retires it rather than erasing the record. The event history is append-only: past events are not edited or removed one at a time. The full erasure is deleting your account, described below, which removes everything in the table above.

​
Your calendar

Connecting your calendar goes through Google’s own consent screen. It grants two permissions: reading and writing calendar events, and reading your list of calendars. Donna does not request broader calendar access. Donna changes events in three cases:
  • When you ask.
  • When you drag one on the day calendar.
  • Automatically, in one case you have to turn on first. In the calendar section of settings there is a switch, off by default, for putting your tracked time on the calendar. With it on, each Action you finish or stop yourself is added as a new past event titled Tracked time, described Recorded in Donna. It says nothing about what you were doing, and it does not touch any event you were already invited to, so nobody is notified. Work you skipped, parked, or walked away from writes nothing. See Connect your calendar.
You can disconnect your calendar anytime. In settings, under connections, the calendar section has a “disconnect” button. Disconnecting revokes Donna’s access at Google and clears the calendar events Donna had synced. See connections and calendar for how connecting works.

​
How your data is processed and stored

Typed conversations and work run through OpenAI’s API. OpenAI does not use API data to train its models, and retains it at most 30 days for abuse monitoring. Donna’s database is hosted on Supabase, which encrypts all data at rest (AES-256) and in transit (TLS). Sign-in tokens for connected tools are encrypted again at the application layer.

​
Other connected tools

Connecting a tool like Gmail or Notion signs you in through that tool’s own consent screen. The sign-in tokens are stored encrypted, and Donna reaches a connected tool only when a task needs it. You can disconnect any tool yourself in settings, under integrations. See connecting other tools.

​
The work you’re writing

In settings, under personalization, there’s a “share your work surface” toggle, on by default. The setting’s own words cover both states: “lets Donna read your focus-mode page so nudges fit the work. off: Donna knows you’re working, not what’s on it.” The toggle controls reading, not storage: notes you have typed are still saved with your work either way. If you want to show finished work to someone else, that’s a separate, deliberate act: a share link you create and can revoke. See sharing your work for how that works.

​
Deleting your account

You can delete your account yourself, anytime, in settings, in the account section. The button reads “delete account”. It’s a two-step confirm: Donna asks “delete your account and all of its data?” and you confirm with “yes, delete”, or back out with “keep my account”. The button’s own hint says what goes: “deletes your account, history, and everything Donna learned. can’t be undone.” Connected tools are disconnected as part of the same action. For how Donna builds understanding over time, see Memory. If disconnecting or deleting doesn’t go through, see troubleshooting.