Privacy Policy

Pana is a conversational companion designed to support people living with long-term health conditions. We know the conversations you have with Pana can be personal, so we have written this policy to be clear about what we collect, why, and the control you keep over your information.

This Privacy Policy describes how Pana ("we", "us") collects, uses, discloses and protects personal data when you use the Pana application and related services (the "Service"). We are based in Singapore and follow the Personal Data Protection Act 2012 ("PDPA"). Because our users are located around the world, we also describe below the additional rights that may apply if you are in the European Union, the United Kingdom, or certain US states.

1. Information We Collect

We collect only the information needed to run the Service and make it useful to you.

Account details

Your name, email address and age
Account and sign-in credentials

Conversation content

The messages you type and the things you say to Pana
Memory and context that Pana uses to stay consistent and personalise future conversations

Technical & usage data

Device information and how you interact with the app
Audio you speak to Pana, which is processed in real time to power voice features and is not stored after processing

2. Health-Related & Sensitive Information

Because Pana is intended for people managing long-term conditions, you may choose to mention health details — such as symptoms, a diagnosis or how you are feeling — during a conversation. You decide what to share.

Anything you share in a conversation is handled as conversation content under this policy. We do not build a separate clinical or medical record about you, and we do not use what you share to diagnose, treat or make decisions about your health.
Where the law treats this kind of information as "sensitive" or "special category" data, we rely on the consent you give by choosing to share it with Pana, and you can withdraw that consent at any time (see Your rights).
Pana is a companion, not a healthcare provider. Its responses are general and informational and are not a substitute for advice from a qualified professional.

3. How We Use Your Information

To provide, maintain and personalise the Service
To give Pana memory and continuity across your conversations
To improve the quality and reliability of the Service
To understand how the Service is used, through aggregated analytics
To monitor performance, security and stability

4. Analytics & Tracking

We use PostHog to understand how the app is used so we can improve it. Through this tool we collect:

App usage patterns
Performance metrics
User-journey data
System events

Before analytics data leaves the app, we apply automatic filtering to remove personally identifying and sensitive content, and the resulting analytics data is anonymised.

Advertising measurement (off unless you turn it on)

If you turn on ad measurement, we share a small amount of purchase information with Meta (Facebook) so we can tell which of our ads brought people to Pana. This is off by default. Nothing goes to Meta unless you explicitly turn it on, and you can turn it off again at any time in Settings › Privacy & Safety.

While it is on, two things happen:

From the app — Meta's SDK records app installs, app opens, and the start of a Pro trial (with that trial's price and currency). It collects Apple's advertising identifier only if you separately allowed tracking in Apple's own "Allow Tracking?" prompt; if you declined that prompt, no advertising identifier is collected.
From our servers — when Apple tells us a subscription was purchased or renewed, we send Meta a Purchase or Subscribe event carrying the amount and currency, the product identifier and plan name, the app's bundle identifier, and whether you allowed tracking. It also carries an event identifier used for one purpose only: so the same purchase is not counted twice.

What we never send to Meta: your name, email address, phone number, account identifier, or any other identifier that would let Meta recognise you as an individual — none of these are included. Neither is any health information: no symptoms, medications, conditions, mood entries, community activity, or anything you say to or type into Pana.

Subscriptions that began before ad measurement went live are excluded from this entirely.

We do not sell your personal data and we do not provide it to data brokers. The only advertising-related sharing we do is the opt-in ad measurement described in section 4: it is off unless you turn it on, it carries purchase information only, and it never includes health information or anything that identifies you personally.

We do rely on trusted service providers ("subprocessors") that process data on our behalf to deliver core features:

OpenRouter — routes our AI requests to the models below, under zero-data-retention terms (these providers do not retain your content)
DeepSeek (via OpenRouter) — generating text-chat replies and translating community content
Anthropic (Claude) (via OpenRouter) — generating voice-call replies and extracting the facts Pana remembers for you
OpenAI (via OpenRouter) — creating the numeric embeddings that power Pana's memory
Inworld — converting Pana's text replies into speech during voice calls
Supabase — database, authentication, and file storage
Fly.io — application hosting
Meta (Facebook) — ad measurement only, and only while you have turned it on (see section 4); receives purchase information, never health information and never anything that identifies you personally

Speech-to-text is performed on your device by Apple's on-device speech recognition; your voice audio is not sent to us or any third party for transcription.

These providers are bound by contract to process data only as needed to provide their service, and are prohibited from using your data to train their own models. We may also disclose information where we are legally required to do so, or to protect the rights, safety and security of our users and the Service.

6. International Data Transfers

Pana is operated from Singapore, and some of our subprocessors process data in other countries. When personal data is transferred outside Singapore, we take reasonable steps to ensure it receives a standard of protection comparable to that required under the PDPA, for example through contractual safeguards with the receiving party.

7. How We Protect Your Data

Encryption of data in transit using TLS
AES-256 encryption of data at rest
Strict, role-based access controls
Regular security reviews and audits

8. How Long We Keep Data

We keep your personal data for as long as your account is active. After you delete your account, we retain certain data for up to 12 months to meet legal, security and operational needs, after which it is deleted or anonymised. Audio you speak to Pana is deleted immediately after it is processed.

9. Your Rights & Choices

Under the PDPA, you have the right to:

Access the personal data we hold about you
Correct or update inaccurate data
Withdraw your consent to our processing
Request deletion of your data
Turn ad measurement off at any time in Settings › Privacy & Safety (it is off unless you turned it on)

Changes you make to your privacy settings take effect immediately. To make any of these requests, email us at contact@pana.ai.

If you are outside Singapore Depending on where you live, you may have additional rights. Users in the European Union and United Kingdom may have rights under the GDPR (including data portability and the right to object to processing), and residents of California and other US states may have rights under their local privacy laws (including the right to know what we collect and to opt out of any "sale" or "sharing" of personal data). Pana does not sell personal data. The opt-in ad measurement in section 4 may count as "sharing" for advertising purposes under some US state laws; it is off unless you turn it on, and the toggle in Settings › Privacy & Safety is how you opt out. To exercise any of these rights, contact us at the email above and we will respond as required by the law that applies to you.

10. Children's Privacy

Pana is not intended for children under the age of 13, and we do not knowingly collect personal data from them. In some regions a higher minimum age applies; where that is the case, the higher age governs. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a significant change — including before introducing any feature that would collect health information in a new way — we will let you know and, where required, ask for your consent.

12. Contacting Us

If you have questions about this policy or wish to reach our data protection contact, email contact@pana.ai. We aim to respond within a reasonable time and in line with the PDPA and any other laws that apply to you.