Nora Privacy Policy
Last updated: October 4, 2026
Nora is a personal assistant provided by the Nora team at mynora.ai. This policy explains how we handle information for Google sign-in, Gmail and Google Calendar assistance, and related conversations through Nora's website and Telegram bot. For privacy questions or deletion requests, contact wei@web3mq.com.
1. Information we collect
Google account information. When you sign in with Google, we receive your account identifier, email address, and display name. Connecting Gmail and Google Calendar requires a separate authorization. Nora uses OAuth credentials to access the services you authorize; we do not receive your Google password.
Email information. When you connect Gmail, Nora accesses message text and metadata, including senders, recipients, subjects, timestamps, and labels.
Calendar information. When you connect Google Calendar, Nora accesses events on your primary calendar, including titles, descriptions, times, locations, conferencing links, organizers, attendees, and recurrence information. Meeting-time suggestions also use busy time intervals from your calendar and participant calendars your Google account is permitted to access.
Conversations and actions. Nora processes your instructions, conversations, generated responses and summaries, and records of actions performed on your behalf. These records may include information from your email or calendar.
Place and nearby information. When you allow location, the Nora iPhone app sends Nora, with each request, a place name composed on your phone, a label such as home or office if you marked the place, your motion (for example walking or driving), the time of the location fix, the state of the location permission, and your phone's time zone. When nearby places are turned on, the app also sends a short summary of places near you (their names, kinds and distances) and travel times to your next calendar event. No coordinates are sent to Nora.
2. How we use your information
We use this information to identify your account and provide the email and scheduling features you use. Nora can search, read, and summarize email; prepare drafts and replies; send messages; mark messages as read, star them, or archive them; review your schedule; create, update, or delete primary-calendar events; respond to invitations; and suggest meeting times.
Actions follow your instructions and configured permissions, including ongoing instructions. While Google remains connected, Nora may synchronize and process information in the background without a new message from you each time. This keeps information available for your assistant's responses and ongoing tasks.
3. Third-party processing and sharing
Third-party artificial intelligence and large language model services. Nora shares relevant email and calendar content, your instructions, and conversation context with these services to understand your requests, summarize information, prepare email responses, and assist with scheduling, including identifying calendar conflicts. Processing may also support background tasks and conversation summaries. Google access credentials are not included in model prompts.
Model services process and retain submitted content according to their applicable service terms and account settings. Restrictions on use for model training and fixed deletion periods have not been verified for every model service Nora uses.
Your place line and the nearby summary are part of the conversation context sent to these model services.
Apple's map service. To find nearby places and travel times, the Nora iPhone app sends your phone's location, and the location text of your next calendar event, from your phone to Apple's map service (MapKit). No other map service receives them, and Apple's terms apply to what Apple receives. For this, Nora sends your phone only that event's location text and start time.
Hosting and infrastructure. Services that host or operate Nora process information stored or handled by the application.
Google and recipients. Sending an email or calendar invitation shares its content through Google with the recipients you select or authorize through your instructions and permissions.
Telegram. If you connect the Telegram bot, Telegram processes the messages you send and the assistant responses delivered through that channel. Those responses may contain information from your email or calendar.
4. Storage and security
Nora stores synchronized email text and metadata, calendar events, conversation history, generated responses and summaries, and action history on servers. Action history may include message content, event changes, and previous values needed to track or undo an action. Records are associated with the relevant user account.
Google OAuth refresh tokens are encrypted in a dedicated token store. Short-lived Google access tokens are held in memory.
Background location. Background location is off by default and needs your phone's "Always" location permission. While it is on, Nora stores a history of place names (no coordinates) on its servers. Nora uses that history only as context for your conversations with the assistant, never to start a conversation.
5. How long we keep information and how to request deletion
Nora retains synchronized emails, calendar records, conversations, summaries, and action history to provide the assistant and maintain continuity across your requests. These records have no fixed automatic expiry period and may remain stored until a deletion request is completed.
Place history is the exception: it is deleted automatically after 30 days, and all of it is deleted at once when you turn background location off. A place that appears in a conversation is part of that conversation and is kept with it. The last place the app reported, and the latest nearby summary, are kept on your account until the app's next report replaces them.
To request deletion of your Nora account information, synchronized email and calendar data, conversation history, summaries, action records, and related copies, email wei@web3mq.com. State the account concerned and whether you want all associated data or particular information deleted. Do not send your password or access tokens.
The Nora team handles deletion requests manually through the contact address above. There is currently no self-service account deletion option or fixed completion period. The time needed depends on the scope of your request and the systems involved, including any backups or third-party copies. Contact us for information about your request. Deletion from Nora does not automatically remove content already delivered to recipients or held by independent services.
Deleting Nora's stored copies does not itself delete the original messages in Gmail or events in Google Calendar. Changing those originals requires a separate action that you authorize.
6. Your choices and Google access
You can review or revoke Nora's Google access at Google Account third-party connections. Revocation prevents further access under that authorization. Once Nora detects it, synchronization stops and the affected live email and calendar features become unavailable.
Revoking access does not automatically delete information already stored by Nora, including synchronized content, conversations, summaries, action records, and saved authorization credentials. It also does not by itself stop processing of information Nora already holds. To request deletion, contact us using the address above.
You can refuse or turn off location, background location and nearby places, each on its own. Nora's assistant then does not know where you are or what is near you.
Signing out, refreshing the connection status, or unlinking Telegram is not a request to delete your data. You may also contact us to request access to or correction of your information, or to exercise other rights available under applicable law.
7. Google user data requirements
Nora's use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including the Limited Use requirements, and the Google Workspace API User Data and Developer Policy.
These requirements limit Google user data to permitted user-facing purposes, prohibit selling it or using it for advertising, restrict transfers and human access, and prohibit using Google user data or derived content to train or improve general-purpose models. These obligations also apply when data is processed by service providers.
8. Changes and contact
We may revise this policy as Nora's features or data practices change. Revisions will appear on this page with an updated date. New uses of Google user data require updated disclosures and any consent required by Google's policies and applicable law.
For privacy questions, access or correction requests, or deletion requests, email the Nora team at wei@web3mq.com.