Plain English, no legalese. The three that matter: we do not sell your data, we do not train AI on it, and nothing ever acts in your name. The short version of everything else is on the trust page. This is the precise one, for the record.
When you connect an account you are granting access to the email and calendar data you authorise. Your messages, contacts, threads and events. What is taken is what your record needs to be built and kept true, and nothing beyond that. Documents you add and things you tell it directly are held the same way: encrypted, receipted, yours.
Only build and run your record: learn who and what matter to you, answer your questions with receipts, and surface what stopped or needs your word. Never for advertising. Never to train a model that anyone else’s record touches.
Only the handful of companies that make the product run, each named on the trust page, each under a data agreement, and each with only the data they need. We do not sell it. Full stop.
Everything you connect or add is indexed by our own search engine, on our own machines, and stored encrypted. It is never handed to a third-party search or embedding service. The whole pipeline that reads your data is ours end to end.
Each message is encrypted before it is stored, under a key that exists only for your account.
To read meaning out of a message, or to answer a question, the relevant text is sent to the AI that does the reading, today that is Anthropic, through our account, under an agreement that forbids training on it. That is the only place your words go, and we would rather name it than let you assume it away.
If you would rather that never touch our account at all, connect your own model credentials. Your own provider key, or your own cloud region, and every call for your data runs inside your agreement instead of ours. If those credentials ever stop working, your record stops answering. It will never quietly fall back to our account.
You can rule an address, a whole domain, or a subject-line keyword, privileged, confidential, whatever you choose, permanently out of bounds. Excluded mail is never stored, never indexed and never drawn from.
Adding a rule also deletes anything already here that matches it, because a control that only works going forward is not the control you thought you bought. Everything you allow is read, and nothing you do not.
Every touch of your data is recorded. What was read, when, and each time your text went to an AI. Settings shows you that record. It is not a promise that we are open about it; it is the list.
Google requires us to spell this out: the use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.
In plain terms. Your Gmail and Calendar data powers only the features you see here. It is never sold, never used for advertising, never used to train AI models beyond your own record’s personalisation, and no human reads it except with your explicit consent, for security, or where the law requires.
We keep your data while your account is active. Export is self-serve, both formats, straight from Settings, on any plan, any day. Deletion is self-serve too, and you can cut off any connected account straight from Google. Where GDPR or CCPA apply to you, you have their full rights; we carve nothing out.
Deletion here means something stronger than a promise to press delete. Your stored mail is encrypted under a key that exists only for your account. When you delete, we destroy that key and then delete the files. Anything encrypted under it, including any copy that might still sit in a backup, becomes unreadable to us permanently, because the key that opened it no longer exists anywhere. You get a written record of the moment it was destroyed. Within thirty days every record we derived from your mail is deleted as well, and the account ends whole.
Rennik, Inc. (Delaware). The controller of your data where that term applies. privacy@ilurennik.com
Rennik, Inc. · last updated 4 September 2026