SANE

Privacy Policy

Effective February 28, 2026 · Last updated February 28, 2026

SANE ("School Alerts, Notices & Essentials") is operated by Eric Cheng. SANE is a tool that helps parents filter and summarize school emails. This privacy policy explains what data we collect, how we use it, and how we protect it.

What Data We Collect

Information You Provide

  • Account information: your email address and password (password is hashed, never stored in plain text)
  • Family information: your children's names, grades, classrooms, teachers, and any additional context you provide
  • Forwarding addresses: email addresses and names of people you choose to forward summaries to
  • Feedback: thumbs-up/down ratings and sender rules you create to improve AI accuracy

Information We Access via Google APIs

  • Gmail messages (read-only). SANE connects to your Gmail account using OAuth 2.0 with the gmail.readonly scope. We read incoming messages to analyze them for school-related content. We never send, delete, or modify emails in your account, and the read-only scope we request does not grant permission to do so.
  • Basic profile information. We request the userinfo.email scope to verify your Google account identity during the OAuth connection process.

Information Generated by SANE

  • AI summaries: short summaries of emails the AI determines are actionable
  • Extracted events: dates, deadlines, and calendar events extracted from email content
  • Extracted links: actionable URLs (sign-ups, payments, RSVPs) identified in emails
  • Classification decisions: whether each email was deemed actionable or not

How We Use Your Data

  • Email analysis. Incoming Gmail messages are sent to an AI provider for classification and summarization. The AI determines whether an email is actionable for your family and generates a brief summary.
  • Email forwarding. If you enable forwarding, actionable emails are delivered to your chosen forwarding addresses via an email delivery service. Forwarded messages include both an AI-generated summary and the original email content. The original email content is not stored by SANE after forwarding.
  • Daily and weekly briefs. If you enable briefs, SANE compiles digests of recent actionable emails and sends them on a schedule you configure.
  • Calendar extraction. Events and deadlines extracted from emails are stored and made available through an in-app calendar and a subscribable iCal feed.
  • Improving accuracy. Your feedback (thumbs-up/down) and sender rules are used to improve classification for your account only. If you enable the "Allow feedback data collection" option in Settings, SANE will store an encrypted snapshot of the email or event alongside your feedback for up to 90 days so we can review classification quality. These snapshots are encrypted at rest and are never sent to AI providers for model training. You can disable this at any time, and no snapshots are captured without your explicit consent. We do not provide your data to AI providers for the purpose of training their models.

Third-Party Services

SANE shares limited data with the following third-party services to provide its core functionality:

  • AI providers (OpenAI, Anthropic, Google Gemini, or Grok, as configured by the admin). We send email content (sender, subject, body text) and your family context (children's names, grades, teachers) to classify and summarize emails.
  • Resend (email delivery). We send forwarding addresses, summary content, and original email content to deliver forwarded emails and briefs to your chosen recipients.
  • Google OAuth. We store OAuth tokens (encrypted at rest) to maintain read-only access to your Gmail inbox.

We do not share data with any other third parties. We do not use data brokers, advertising networks, or analytics services that receive your personal information.

What We Don't Do

  • No advertising. Your data is never used for advertising or to serve ads of any kind.
  • No data sales. We never sell, rent, or trade your personal information or email content to any third party.
  • No AI model training. We do not send your data to AI providers for model training purposes. We select providers whose API terms state that data submitted via their APIs is not used for model training. However, we cannot independently verify provider practices, and their policies may change over time. We encourage you to review the privacy policies of our current providers: OpenAI, Anthropic, Google Gemini, and xAI.
  • No human reading of emails. SANE employees and operators do not read your email content except when required for: (a) responding to a support request you initiate, (b) investigating a security incident, or (c) complying with a legal obligation. Even in these cases, access is limited to the minimum necessary.
  • No credit, lending, or profiling. Your data is never used for creditworthiness assessments, lending decisions, or building consumer profiles.

Data Storage & Encryption

All data is stored on secure, hosted infrastructure. The following sensitive information is encrypted at rest using industry-standard encryption:

  • Your children's details (names, grades, classrooms, teachers)
  • Forwarding addresses and recipient names
  • Gmail OAuth tokens
  • AI provider API keys

Passwords are securely hashed and are never stored in plain text. All connections to SANE use HTTPS in production.

Data Retention

  • Processed emails: summaries and classification data are retained for 30 days by default, after which they are automatically deleted.
  • Extracted events: calendar events are retained for 90 days by default.
  • Account data: your account information, family details, and settings are retained for as long as your account exists.
  • Gmail message content. SANE does not permanently store the full content of your Gmail messages. Email content is processed in transit for analysis and forwarding, and only the AI-generated summary is retained.

User Controls

You have full control over your data and how SANE operates:

  • Pause or disable monitoring. You can disconnect your Gmail account at any time from Settings, which immediately stops all email reading.
  • Control forwarding. Enable or disable individual forwarding, daily briefs, and weekly briefs independently at any time.
  • Manage forwarding addresses. Add or remove recipients who receive your forwarded emails.
  • Set sender rules. Configure specific senders to always forward or always skip.
  • Delete your account. You can permanently delete your account from Settings. This removes all your data including family information, forwarding addresses, processed emails, events, and settings. This action is irreversible.
  • Opt out of feedback. Providing thumbs-up/down feedback on email classifications is entirely optional.

Google API Services Limited Use Disclosure

SANE's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  1. SANE only uses access to Google user data to provide the email analysis and forwarding features described in this policy.
  2. SANE does not transfer Google user data to third parties except as necessary to provide the service (AI analysis and email delivery), as required by law, or as part of a merger/acquisition with equivalent privacy protections.
  3. SANE does not use Google user data for serving advertisements.
  4. SANE does not allow humans to read Google user data except with the user's affirmative consent (e.g., a support request), for security purposes, to comply with applicable law, or when the data is aggregated and anonymized for internal operations.

Children's Privacy

SANE collects children's names, grades, and school information solely to personalize email filtering and determine which school communications are relevant to your family. This information is:

  • Encrypted at rest
  • Never shared with third parties except as part of the AI analysis prompt (to match emails to the correct child)
  • Deleted when you delete your account or remove a child from your family settings

SANE is a tool for parents. It is not directed at children and does not knowingly collect information directly from children.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users promptly by email and disclose the nature of the breach, the data involved, and the steps we are taking in response.

Changes to This Policy

If we make material changes to this privacy policy, we will notify existing users by email before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Governing Law

This privacy policy and your use of SANE are governed by the laws of the State of California, United States, without regard to conflict of law provisions.

Contact

If you have questions about this privacy policy or your data, please use our contact form.