Privacy Policy

בקצרה

סנסה עובדת רק בקבוצות WhatsApp שהוזמנה אליהן במפורש, ועושה בכל קבוצה רק את מה שהוגדר לה שם: בקבוצה משפחתית — רשימת קניות, תזכורות ויומן; בקבוצה של גן — שמירת התמונות והסרטונים מהקבוצה לאלבום Google Photos של הגן.

אין פרסומות, אין מכירת מידע, ואין שימוש במידע לשום דבר מלבד השירות עצמו. סנסה לא קוראת שיחות אחרות שלכם — רק את הקבוצה שהוזמנה אליה.

Who this covers

Sansa is a private, self-hosted assistant operated by an individual for a small number of invited WhatsApp groups (households, and a parent-run kindergarten). It is not a public service, has no sign-up, and is not offered commercially.

What is processed

• Messages in groups Sansa has been added to — text, voice notes, photos and videos, plus the sender's WhatsApp display name and identifier.
• Items you ask her to keep — shopping list entries, reminders, and calendar events.
• Photos and videos, where a group has enabled photo archiving.

Sansa does not read your other chats. She has access only to groups she has been explicitly added to, and to nothing else in your WhatsApp account.

Why, and who else sees it

Message content is sent to third parties only as needed to provide the feature you asked for:

• An AI model provider (OpenAI, with Anthropic as a fallback) — to interpret requests written in free text.
• Groq — to transcribe voice notes into text.
• Google — Google Calendar for a group's own calendar, and Google Photos for photo archiving, using only the account that group authorized.

Nothing is sold, shared for advertising, or used to train models by us. Access to Google is limited to the narrowest permission that works: for photos, an upload-only permission, which means Sansa can add to an album she created and cannot read anything else in that Google account.

Where it is stored, and for how long

• On a single private server, in a separate directory per group. One group's data is not readable from another group's processing.
• Service logs and AI request records: 14 days, then deleted automatically.
• Photos and videos: about 6 hours on the server, long enough to process and upload, then deleted. Where photo archiving is on, the copy that persists is the one in the group's own Google Photos album, under the group's control.
• Backups of group lists and settings: 14 days.

Children's photos

Where a group archives photos of children, those photos go only to the Google account that group authorized, and are visible only to whoever that group's own administrator shares the album with. Sansa cannot share an album or grant anyone access — that is done by a human, in Google Photos.

Your choices

Ask the person who added Sansa to your group to remove her. She leaves the group, stops processing immediately, and that group's stored lists and settings are removed. A Google account's authorization can be revoked at any time by its owner at myaccount.google.com/permissions, which immediately ends Sansa's access to it. Deleting Sansa's access does not delete photos already in your album — those are yours.

Contact

Sansa is operated privately. For any request — access, deletion, or questions — contact the person who added her to your group; they operate the service.

This policy describes the service as operated at the time of writing. Sansa is a personal project and changes; material changes will be reflected on this page.