Legal
Last updated: October 2026
ena.is is a personal website operated by a single individual. This page describes, in plain terms, how it handles data.
Account information you provide (such as your email address and profile details) and the content you create or connect while using the site's features. Data connected from third-party services — including email accounts you choose to link — is accessed only to provide the feature you connected it for.
Solely to operate the site and its features for you. Your data is not sold or used for advertising, and it is not shared with third parties except through the optional mailbox AI extraction described below, which runs only if you turn it on. Connected mailbox content is shown to you, and bookings found in it are added to your calendar; it is not used for any other purpose.
If you connect a Google account (for example, a Gmail mailbox), ena.is accesses your Gmail data over IMAP using the permission you grant on Google's consent screen. It uses that data only to provide the site's mail feature to you: showing your mail, searching it, applying the actions you take (mark read, star, archive, move, delete), and adding bookings it finds in your mail, such as flights and hotel stays, to your own calendar. That booking check runs on the site's own server. It stores message headers and message bodies in the site's database so your mailbox loads quickly and is searchable; attachments are not stored, and your Google credentials are held only as an encrypted OAuth token. It shares this data with no one: no third parties, no advertising, no analytics, and no AI service. The optional mailbox AI extraction described below never applies to mail from a Google account, and ena.is does not use your Gmail data to train any AI model. No human other than you reads it. Disconnecting the account deletes all of its stored data.
ena.is's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
This is off unless you turn it on in your settings, and it never applies to mail from a Google account. When it is on, and a booking email in another mailbox you connected comes from a sender the site has approved but the site's own extractor cannot read it, part of that email is sent to Anthropic's Claude AI model so the booking can be added to your calendar. That is its only purpose.
What is sent: the day the email was sent, the sender's domain (not the full address), the subject, and up to 4,000 characters of the message text. Links, email addresses, phone numbers, and card, ticket and Korean resident registration numbers are removed first. Names and other details in the text are not removed. Attachments are never sent.
Anthropic receives it through the site owner's personal Claude subscription, and Anthropic's consumer terms for that subscription govern what happens to it next. Anthropic's published policy is to keep it for 30 days, or for up to 5 years if the owner's account allows Anthropic to use data to improve its models, and longer if it is flagged for a safety review. Whether it is used to train Anthropic's models depends on that account setting, which ena.is cannot enforce, so ena.is does not claim that it is not. ena.is itself does not use it to train any model.
ena.is records each time this happens — when, which message, and how many characters were sent, but not the content — and keeps that record until you delete it or your account. From the same settings page you can see the record, turn the feature off at any time, or delete your agreement and the record together. Turning it off stops anything further being sent; nothing already sent to Anthropic can be recalled by ena.is.
When you type in a calendar event's location field, our server sends the text to a place-search service to suggest matching places: Photon, operated by komoot on OpenStreetMap data, or Google Places if the site is configured to use it. Each request carries the text you typed and an approximate area — a city chosen from your calendar's time zone, or from your country when the time zone gives none — so nearby places rank first; Google is also told your interface language. The request comes from our server, so the service does not receive your IP address, your precise location or your account. Photon's answers may be kept on our server for ten minutes to answer the same search again; Google's are not kept. The number of searches each account can make per minute is limited.
The Iroha desktop app sends statistics about how well a connection worked: which versions and hardware were involved, how the connection was made and how long it took, how long the session lasted and how it ended, and measurements of network, picture and sound quality. When a connection goes badly it also sends those measurements second by second for part of that session. When a step fails it sends the name of the step and a short error code.
These statistics are stored with your account, with the computer they came from, and with the IP addresses of both ends of the connection, together with the internet provider and country each address belongs to. A report about a connection between two people records both accounts — the computer’s owner and the person who connected to it — and which of that person’s devices they connected from.
The addresses are used to estimate how fast the connection could have been, by comparing what was measured against the distance between the two ends. That estimate is kept; the position it was calculated from is not.
Nothing from inside a session is included: no screen content, no file or folder names, no addresses you typed, and no passwords, keys or tokens.
This information is kept for 30 days. After that it is replaced by daily totals, which hold no account, computer or IP address and are kept indefinitely. Separately, a daily count of connections a computer refused is kept against that computer for a year.
You can turn this off with “Send connection statistics” in the Iroha app. It is on when the app is installed — the installer offers it as a ticked box — and the app itself says so after an update. A session’s report includes measurements from both ends, so turning it off on either computer stops reports about connections between them.
Closing your ena.is account deletes these statistics along with the rest of your data.
Credentials and access tokens are stored encrypted at rest. Connections to mail providers use TLS. Access to your data requires your authenticated session.
You can disconnect a linked account or delete your data at any time from the site's settings. Removing a connected mailbox deletes its locally stored data.
Questions about this policy can be sent to [email protected].