Taana-Baana

Privacy Policy

Last updated September 30, 2026

1. Introduction

Taana-Baana (“we”, “our”, or “the App”) is a private, invite-only shared-life planner for two-person pods. It is designed to help individuals and couples organize their daily routines, sleep, and physical activities alongside their shared schedules.

We take your privacy seriously. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use Taana-Baana and our integrations with third-party services, including Google.

2. Information We Collect

A. Account Information & Google Sign-In

When you create an account or sign in to Taana-Baana, we collect basic profile details:

  • Your name and email address.
  • Authentication tokens and credentials required to securely maintain your session.

Google Sign-In disclosure: when you sign in with Google, Google provides your name, email address, and profile identity to Taana-Baana. This information is used strictly for authentication and for verifying your invite-only pod membership. It is never used for advertising, profiling, or any other purpose.

B. Manually Created Calendar & Planner Data

  • Calendar time blocks, dump/scratchpad items, rituals, notes, and task completion records.
  • Partner sharing preferences and visibility toggles.

C. Google Health & Activity Data (When Connected)

If you explicitly choose to connect your Google account, Taana-Baana requests the following read-only OAuth scopes and uses them only for the purposes described:

  • openid, email, profile — to identify you when you sign in with Google and to maintain your secure session.
  • https://www.googleapis.com/auth/googlehealth.sleep.readonly — to read your sleep sessions and sleep stage intervals (wake, light, deep, REM) and display them as sleep blocks on your calendar.
  • https://www.googleapis.com/auth/googlehealth.activity_and_fitness.readonly — to read your exercise sessions (such as walking and cycling), including times, duration, and distance, and display them as activity blocks on your calendar.

All Google Health scopes are read-only. Taana-Baana cannot write, modify, or delete any data in your Google account.

D. AI Assistant Access (When You Authorize It)

Your calendar entries, rituals, and activity summaries may be accessed by your own connected AI assistant (for example, Claude, via Taana-Baana’s MCP server) — but only when you explicitly authorize that connection and actively prompt the assistant to read or act on your data. Access is limited to your own pod and the privacy rules of the app apply identically: the assistant can only see what you can see. You can revoke the assistant’s access at any time.

3. How We Use Your Information

We use the data collected strictly to provide core planning features:

  • Displaying your sleep and workout intervals as visual time blocks on your daily and weekly calendar views.
  • Calculating daily and weekly planned time allocations and productivity statistics.
  • Enabling partner activity sharing strictly when you explicitly enable the shared partner toggle.
  • Allowing you to add personal notes and enrichments to your synced activity records.
  • Sending push notification reminders you have configured, via Firebase Cloud Messaging.

We do not use your health data for advertising, marketing, profiling, credit assessment, or any secondary commercial purposes.

4. Google API Services User Data Policy Compliance (Limited Use)

Taana-Baana’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • No Third-Party Transfers: We do not sell, rent, or transfer your Google health and activity data to data brokers, advertising networks, or third-party analytics services.
  • No Human Access: No human reads or reviews your Google health data unless you explicitly give permission for technical support, it is required for security investigations, or it is required to comply with applicable law.
  • Strictly Limited Purpose: Health and fitness data retrieved from Google APIs is processed exclusively to deliver the user-facing scheduling and calendar visualization features you have requested.

5. Token Storage & Security

  • Storage: Your data is stored securely in encrypted databases hosted on Lovable Cloud infrastructure, protected by row-level security.
  • Google OAuth tokens are stored securely in protected server-side database records that are inaccessible to client browsers. They are used strictly for automated synchronization of your sleep and activity data, and are deleted immediately upon disconnecting the integration.
  • Retention: We retain your data only for as long as your account is active and you choose to maintain your synced history.

6. Service Providers

Taana-Baana relies on the following service providers to operate:

  • Lovable Cloud — provides the database (Supabase) and server hosting that power the app and store your data.
  • Firebase Cloud Messaging (Google) — delivers web push notifications, such as your configured reminders, to the devices you have enabled.

These providers process data only on our behalf to deliver the service. We do not share your health data, notes, or calendar content with any other third parties.

7. Pods & Admin Access

Taana-Baana operates on an invite-only pod model: small, private groups (typically a two-person pair) created by invitation only. There is no public sign-up, and each pod’s content is fully isolated from every other pod.

  • Pod admins can see aggregate usage metrics only — for example, how many entries were created or how recently someone signed in.
  • Admins can never see your private entries, journal notes, or schedule details.
  • Your pod partner only sees what you explicitly mark as shared.

8. Sharing with Your Partner

  • By default, your synced sleep and activities are private to your individual calendar.
  • Only when you explicitly configure your account to share sleep/activities with your linked partner will those blocks appear on your partner's calendar view or activity feed.
  • You can revoke partner sharing at any time via your account settings.

9. Data Retention & Deletion

  • Disconnecting Google: Google OAuth tokens are deleted immediately from our servers when you disconnect the integration through the in-app connection settings, which also halts further data synchronization.
  • Revoking Google access yourself: You can also revoke Taana-Baana’s access to your Google account at any time via https://myaccount.google.com/permissions.
  • Account deletion: Requests for complete deletion of your account and associated data, including stored health records, are processed within 30 days. To request deletion, contact us at rahulgohrani@gmail.com.

10. Children's Privacy

Taana-Baana is not directed to children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our features or legal obligations. When updates occur, the “Last Updated” date at the top will be updated.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact:

Rahul Gohrani
Email: rahulgohrani@gmail.com
App: https://taana-baana.lovable.app