Last updated: August 24, 2026

This Privacy Policy explains how Vana Labs, Inc., doing business as VANA ("VANA," "we," "us," or "our"), collects, uses, discloses, and protects personal information through vana.so, VANA accounts, connected-agent tools, direct VANA chat experiences, applications, Protocols, and related services (the "Service").

"Connected Agents" are VANA tools used through a third-party agent platform. "Direct VANA Experiences" are interfaces where you communicate directly with VANA, including VANA chat experiences delivered through messaging services such as iMessage.

The Consumer Health Data Privacy Policy gives additional information for consumer health data processed through separately identified Direct VANA health features. If that policy conflicts with this Privacy Policy for consumer health data, the Consumer Health Data Privacy Policy controls.

1. Information we collect

Information that you give us

• Account and identity information: name, email address, profile photo, sign-in provider identifiers, and account settings.
• User Data: files, Protocols, instructions, notes, profile text, messages that you send to VANA, tool inputs and results, and other content that you store or create.
• Direct VANA health and wellness information: when you use a separately identified Direct VANA health feature, this can include goals, habits, activities, measurements, symptoms, medications, supplements, laboratory or clinician information, and other health information that you choose to provide.
• Public content: a public profile, bio, Protocol, metric, image, attribution, or other information that you choose to publish or make public.
• Support information: messages, attachments, and other information that you send when you ask for help or make a privacy or legal request.

Connected Agents are general protocol and routine tools. They are not designed to process protected health information or clinical records. Do not submit medical records, clinician notes, laboratory results, or other clinical information through a Connected Agent. Health information stored through a Direct VANA health feature is not made available through Connected Agents.

Information from connections

When you connect a data source within a Direct VANA health feature, we can collect the supported information that the connection makes available. This can include activity, sleep, heart rate, recovery, body measurement, nutrition, location-derived activity, and other wellness data. The connection is private by default.

When you connect an agent platform, we receive account, authorization, tool request, and instruction information needed to authenticate the connection and carry out your request. We return requested Connected Agent tool results to the platform that you selected. We do not include health information stored through a Direct VANA health feature in those results.

Information collected automatically

We collect device, browser, Internet Protocol address, date and time, referring page, page interaction, diagnostic, security, authorization, and audit-log information. We use cookies and similar technologies for sign-in, security, preferences, and basic operation. We do not use this information for third-party targeted advertising.

2. How we use information

We use personal information to: