What We Collect
Account Information
- Email address -- used for login, account recovery, and important notifications
- Password -- hashed with PBKDF2 before storage. We never store or have access to your plain-text password.
Content You Create
- Notes -- the text, markdown, and embedded content you write in MinervaAI
- Chat history -- conversations between you and the AI assistant
- AI memories -- facts and preferences you ask the AI to remember across sessions
- File uploads -- documents, images, PDFs, and other files you import into your workspace
- Tasks, bookmarks, and tags -- organisational metadata attached to your notes
Usage Data
We collect basic analytics such as page views and feature usage to improve the product. We do not use tracking pixels, fingerprinting, or ad networks. We do not sell or share usage data with advertisers.
Google Calendar and Gmail
MinervaAI offers optional integrations with Google Calendar and Gmail. These require your explicit consent via Google's OAuth flow.
- Google Calendar: We request read and write access to display your events, create new events, and delete events on your behalf. Calendar data is fetched in real time and is not permanently stored on our servers.
- Gmail: We request read-only access to display your direct personal emails. Marketing, promotional, and bulk emails are automatically filtered out. We never store the full body of your emails -- only the sender, subject, date, and a short snippet for display purposes.
- OAuth tokens are stored encrypted on our servers and can be revoked at any time by disconnecting Google in your Settings.
- We do not share your Google data with any third party.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
AI Processing
- Your note content and chat messages are sent to Anthropic's Claude API to power AI features including chat, analysis, auto-tagging, daily briefings, and search.
- Anthropic does not use your data to train their models. See Anthropic's privacy policy for details.
- If you use your own API key (BYOK mode), your data is sent directly to Anthropic under your own account terms. MinervaAI does not proxy or store your requests in BYOK mode beyond what is needed for the application to function.
- AI-generated memories are stored in your account and can be viewed, edited, or deleted at any time in Settings.
Data Storage and Security
- Cloud accounts: Data is stored on Railway.app servers (US West region) in a SQLite database with encrypted connections.
- Desktop app: Data is stored locally on your machine as standard Markdown (.md) files. No data leaves your device unless you enable cloud sync.
- Sync: If you enable sync between desktop and cloud, your notes are transmitted over HTTPS and stored on both your local device and our cloud servers.
- Passwords are hashed using PBKDF2 with unique salts per account.
- Sessions are managed with secure, random tokens.
Third-Party Services
MinervaAI uses the following third-party services to operate:
- Anthropic (Claude API) -- AI processing for chat, analysis, and content generation
- Google (Calendar, Gmail) -- optional integrations for calendar and email access
- Stripe -- payment processing for subscriptions. We never see or store your card number, CVV, or billing details. All payment data is handled by Stripe.
- Railway -- cloud hosting infrastructure
- Brave Search -- web search feature within the AI assistant
Your Rights
You have full control over your data:
- Export: Download all your notes as Markdown (.md) files at any time from within the app.
- Delete: Request complete account deletion by emailing andrew@award-financial.co.uk. All your data will be permanently removed.
- Disconnect: Revoke Google Calendar and Gmail access at any time in Settings.
- BYOK: Bring your own Anthropic API key to send AI requests directly from your account, bypassing our servers for AI processing.
- Portability: Your notes are standard Markdown files. Export and use them in any compatible application.
Data Retention
- Active accounts: Your data is retained for as long as your account remains active.
- Deleted accounts: All data is permanently deleted within 30 days of an account deletion request.
- Chat history: Retained indefinitely unless you manually clear it from within the app.
- Backups: Database backups may retain deleted data for up to 30 days before being purged.
Children
MinervaAI is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
Changes to This Policy
We may update this privacy policy from time to time. When we make material changes, we will notify registered users via email. Continued use of MinervaAI after changes take effect constitutes acceptance of the revised policy.
Last updated: June 2026
Contact
For privacy questions, data requests, or concerns: