Privacy Policy

This is a current draft prepared in good faith. It is being reviewed by legal counsel and may be updated before it becomes our final published policy. If you have questions in the meantime, please contact us using the details below.

Last updated: June 2026 Applies to: Nanami services offered to users in Australia.

1. Who we are

Nanami (“Nanami”, “we”, “us”, “our”) provides a personal insurance document management tool that helps you organise and understand your insurance. We are the organisation responsible for the personal information described in this notice.

• Contact: hello@nanami.com.au
• Privacy questions: hello@nanami.com.au

2. What this notice covers

This notice explains how we collect, use, share, store, and protect your personal information when you use Nanami, and the choices and rights you have. We aim to be transparent: where this notice references service providers we rely on, we name them so you know who handles your information.

3. The information we collect

• Account and profile: name, email, date of birth, phone number, and addresses.
• Identifiers you choose to add: driver licence, passport, or Medicare numbers. These sensitive identifiers are encrypted at rest.
• Your insurance policies: the documents you upload (or that we find, with your permission, in your email), and the information we extract from them. This can include health and life-insurance details, which are sensitive information.
• People named in your policies: for example beneficiaries, dependants, or additional drivers. See section 9.
• Email connection: if you connect Gmail, we store an encrypted access token and metadata about insurance-related emails. Access is read-only.
• Payments: subscription and donation records. Payments are processed by Stripe; we do not store your card numbers.
• Usage and preferences: onboarding answers, notification settings, and feedback.

4. Why we use your information

We use your information to:

• Provide the service, including storing and organising your policies.
• Read and analyse your policy details (including health and life-insurance details) so we can produce summaries, gap analysis, and reminders. We rely on your consent to process sensitive information, and you can withdraw that consent at any time.
• Connect your email to help find your policies, where you choose to enable this.
• Process billing and meet our legal and record-keeping obligations.
• Handle referrals you choose to send.
• Keep the service secure and comply with the law.

You can withdraw consent at any time in your account settings. Withdrawing consent does not affect processing we have already carried out.

5. AI processing and automated analysis

We use AI to read your policy documents and produce summaries, gap analysis, and insights. We do not provide insurance recommendations or personal financial advice. The content you see is AI-assisted, and it is not a substitute for professional advice. We do not make automated decisions that produce legal or similarly significant effects about you without a lawful basis and appropriate safeguards.

6. Who we share your information with

We share your information only with vetted service providers that process it on our behalf under contract. These currently include:

• Hosting and database: Supabase, which hosts your account data and uploaded documents.
• Document analysis and AI: Google (Gemini), Firecrawl, OpenAI, and Google Cloud Vision, used to extract and analyse the information in your policy documents.
• Payments: Stripe, which processes subscriptions and donations.
• Email delivery: Resend, which sends transactional and reminder emails.
• Email connection: Google (Gmail), where you choose to connect your email so we can find insurance-related messages.

We do not sell your personal information, and we do not run advertising trackers.

7. Where your information is stored and international transfers

Some of our service providers process information outside Australia. Where information is transferred overseas, we take reasonable steps to ensure it is handled consistently with this notice and with applicable privacy law, and we prefer providers with appropriate safeguards in place. Further details are available on request.

8. How long we keep your information

We keep your information while your account is active. Under our data-retention policy, we remove the original uploaded PDF 180 days after upload; the structured information extracted from it remains in your dashboard so you can keep using the service. Billing records are kept for as long as the law requires. You can delete your information — including individual documents — at any time (see section 10).

9. Information about other people

Your policies may name other people, such as beneficiaries, dependants, or additional drivers. You are responsible for ensuring you have a basis to share their information with us. We process that information solely to provide the service to you, and we protect it the same way we protect yours.

10. Your rights and choices

You can:

• Access and download all of your information from within your account.
• Correct your account and profile details.
• Delete your account and your information at any time.
• Withdraw any consent you have given, including for email connection and sensitive-information analysis.

To exercise any other rights, or if you have a privacy concern you would like us to address, contact us at hello@nanami.com.au. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Security

We protect your information with per-user database isolation (row-level security), encryption of sensitive identifiers and tokens, encrypted transport, access controls, and logging. No method of electronic storage or transmission is completely secure, but we take reasonable steps to safeguard your information.

12. Cookies

We use only the essential cookies needed to run the service and remember your preferences. We do not use advertising or analytics trackers. If that ever changes, we will ask for your consent first.

13. Changes to this notice

We may update this notice from time to time. When we make material changes, we will notify you and update the date shown above.