Privacy notice

AI processing & your records

Notice v1-2026-09

Your profile, preferences, fitness history, plans and saved analysis results remain until you delete them or your account. Expiring conversations does not erase your fitness history.

When connected-history coaching is enabled, DRONA reads relevant saved records together. Recovery, preferences and actions or outcomes you report may be saved as dated athlete notes, which you can review, correct or delete in History. These saved notes remain when you clear chat. DRONA does not keep a separate permanent profile of AI-inferred causes or diagnoses.

DRONA sends relevant conversation, fitness context and submitted photos/videos/documents to Google Gemini for AI responses. When voice input is enabled, submitted WhatsApp voice recordings are also sent to Gemini for transcription; DRONA replies in text. When product-link reading is enabled, supplied product URLs are also sent to Gemini to read the page. WhatsApp messages pass through Meta. AI processing is optional: manual history, corrections and custom plans remain available without agreement.

Voice recordings are processed temporarily, including a private temporary file for format and duration checks, and are not saved for playback in DRONA. Transcribed speech is temporary chat content and follows the same 30-day expiry and chat-clearing rules. Fitness records explicitly requested through clear speech remain until you edit or delete them, just like records requested in text. Provider retention is separate.

When photo analysis is enabled, photos are processed temporarily without saving originals in DRONA. Photo observations and unconfirmed food estimates remain in temporary chat; food becomes a saved fitness record only after you confirm the displayed amount, date and consumption. Clearing chat also clears pending food estimates. Provider retention is separate.

Message/reply content and conversational copies expire after 30 days. Pending video references and interrupted uploads expire within 24 hours. When private retention is enabled, newly submitted, consented clips are saved for private playback for 30 days. You can delete a clip sooner without deleting its analysis or fitness history. Old analyses whose originals were deleted remain readable without playback.

Clearing chat invalidates conversation context and pending work immediately. Live content deletion targets 24 hours. It does not delete saved fitness records or analysis results. Contact the operator to request account deletion: access and pending work are revoked first, then live account data is erased, with retry/status checks.

Product backup expiry is 30 days; deleted content may remain in a backup for up to 31 days including the live purge window. Restored systems must apply deletion exclusions before reopening. These are product targets; production purge and backup operations still require verified operating and legal policies.

Routine usage/recovery metadata is kept for 30 days, throttle digests for 24 hours, and minimal replay/deletion markers for 90 days. Narrow security/audit events use a provisional 180-day engineering period, without chat/video content. Legal retention applicability and effective dates remain under review.

DRONA cannot delete copies held by Google, Meta or the recipient’s WhatsApp. Provider retention is separate; actual Gemini Paid Services eligibility and optional data sharing must be checked before live AI enablement.

Private video retention

Video notice video-30d-2026-09. Agreement is optional and separate from AI agreement. Record both before sending a new video for retained processing. Clips are private to your account, with no public sharing links. Withdrawing video or AI agreement immediately revokes playback and requests deletion of retained clips within 24 hours; saved analyses and fitness history remain. Copies already downloaded cannot be recalled.

Product measurement

To understand product use, DRONA keeps compact activity flags for up to 90 UTC dates: website use, received WhatsApp messages, video, plans and record corrections. They contain no messages, health values or videos. Signup, onboarding and activation dates and a broad signup source remain until account deletion. Chat clearing removes WhatsApp/video activity flags; account deletion removes personal measurement. These observations are visible only in the private founder console.

Basic website measurement counts anonymous navigation responses by day, page category and broad source (poster, referral or unknown). It stores no visitor ID, cookie, IP address, browser fingerprint or full referring address and expires after 90 UTC dates. Browser Do Not Track or Global Privacy Control excludes website observations. Reloads can count again; these totals do not identify unique visitors.