English (EN)
1. Who we are
Anuo ("we", "us") provides a personal calendar and task assistant service delivered via LINE. The service is operated by the Anuo team in Taiwan.
2. What data we collect
When you use Anuo, we collect only the following explicitly enumerated data:
- LINE user ID — used to identify your LINE account so we can reply to your messages.
- LINE display name — used for greetings and display.
- Google Calendar event metadata — only from Google accounts you have explicitly connected, and limited to the following fields: start time, end time, title, attendees, location. The OAuth scope is strictly bounded by
calendar.events.readonly(see ADR-0009). - Message transcripts — your LINE conversations with Anuo. Retained 90 days by default for model inference and service improvement.
3. What we do NOT collect
We explicitly state that Anuo will not collect the following:
- Email contents — we do not read your Gmail or any other email inbox.
- Contacts — we do not access your address book or contacts list.
- Files — we do not access files in your Google Drive.
- Calendars from accounts not explicitly connected — we never read calendar data from any Google account that you have not explicitly authorized within Anuo.
4. Why we collect this data
We collect the above data solely for the purpose of providing the personal calendar and task assistant service. We explicitly commit that we will:
- Not use your data for marketing or third-party advertising.
- Not resell your data to any third party.
- Not use your data to train our own or any third party's foundation models.
5. How long we retain data
- Message transcripts: retained 90 days by default; automatically deleted after that. You may request an extended retention window via our support email.
- Calendar event snapshots: held only as long as needed to complete the current task; discarded immediately afterwards.
- Account basics (LINE user ID + display name): retained for the duration of your use of the service; deleted within 30 days of account deactivation.
6. Third-party processors
To provide the service, we work with the trusted third parties below. Each is governed by its own privacy policy and data processing agreement:
- Anthropic — provides Claude Sonnet 4.6 and Haiku 4.5 LLM inference. Per Anthropic's Commercial Terms, API data is retained for up to 30 days for abuse-detection purposes. Anthropic does not train models on your data. See https://www.anthropic.com/legal/commercial-terms.
- Google — provides the Google Calendar API for reading calendars you have connected. Scope:
calendar.events.readonly(read-only event access). - LINE — our message delivery transport. LINE handles message transit per its platform policies.
- Supabase — our backend database and authentication provider. Data is stored in a Supabase-hosted PostgreSQL database with Row-Level Security enabled to isolate users.
7. Your rights under Taiwan's Personal Data Protection Act (PDPA)
Under the Republic of China's Personal Data Protection Act (PDPA), you have the following rights regarding the personal data we hold about you:
- Right of access — request a copy of your data.
- Right to a duplicate — request a JSON export of your data.
- Right to correct or supplement — request correction of inaccurate data.
- Right to halt collection, processing, or use — request that we stop processing your data at any time.
- Right to deletion — request that we delete all of your personal data.
- Right to refuse provision — refuse to provide data; this may limit service availability.
To exercise these rights, please contact us at the address below. We will respond within 7 business days.
8. How we protect your data
- All OAuth tokens for third parties (such as Google Calendar) are stored encrypted at rest using AES-GCM (see ADR-0001).
- The database uses Row-Level Security to enforce strict per-user data isolation (see ADR-0017).
- All data in transit is protected with HTTPS/TLS.
9. Changes to this policy
This is a v1 beta-scope policy. It will be revised following formal legal review before the paid-tier launch. We will notify you of material changes via LINE message or via this page.
10. Contact
For any questions about this policy, or to exercise your rights, contact us at:
Email: privacy@anuo.app Mailing address (interim): Taipei, Taiwan (full address to be published with the production release)