Privacy
What leaves your computer, and why
Apart from the web pages you choose to open, only these:
Searching and suggestions. What you type in the address bar goes to the search engine you have chosen (Google, Bing, DuckDuckGo, Ecosia, or in China Baidu, Bing China or Sogou), with your language and country so results come back in your language. While you type, the same engine is asked for suggestions. Switch suggestions off in Settings › Search. They never run in a private window.
Usage count. Every few hours Nayan sends us a random number that stands for this installation, the Nayan version, whether this is Windows 10 or 11, and which edition it is. Nothing else: no page, no search, no name. It only tells us how many people use Nayan. Switch it off in Settings › General › Usage count.
Blocking rules. The ad and tracker lists are downloaded about once a day, from Ghostery, or in China from our own update server. The request carries nothing about you.
Updates. The website version asks our update server a few times a day whether a newer version exists; the request carries only the version you have. The Microsoft Store version is updated by the Microsoft Store.
Region. On first start, if Windows does not say which region you are in, Nayan asks our server once which country the connection comes from, to choose between the global and the China version. Nothing is stored.
Site icons. The small pictures on the Start Page are fetched from each website itself.
Your Google account on the Start Page. If you are signed in to Google in Nayan, the Start Page shows your Google account (photo, Gmail, Drive), the way Chrome's new tab does. To do that, Nayan asks Google (accounts.google.com) which account is signed in, using the Google sign-in you already have in this browser. Nothing is sent that Google does not already have. The name, e-mail and photo address are kept in memory for two minutes and never written to disk, and never reach us. It does not run in China. Hide it in Customise › Google account.
Your AI assistant. If you choose one, its own website opens in the side panel and what you ask is typed into it. If you ask about a spreadsheet, that file is uploaded to the assistant you chose. That company then holds the conversation under its own policy.
Translate and Meaning. The selected words open in Google Translate or Google search (in China, Baidu Fanyi or Baidu).
Messengers in the side panel. WhatsApp, Telegram and the others are their own websites, signed in with your own account, under their own policies.
Nayan Chat
Your Nayan Chat ID. If you make one, our server keeps your username, full name, photo, the “about” line, country and language (so people can find you), your public key (so they can seal messages to you), a scrambled form of your PIN that cannot be turned back into it, and when the ID was made and last used. Your PIN itself is never stored anywhere, on your computer or ours.
Messages, photos, files and voice notes are sealed on your computer before they leave. Our server keeps the sealed envelope only until the other person's computer confirms it has arrived, then deletes it. It cannot open it. Anyone who has your computer can read your chats on it, just like any other app.
Calls go straight between the two computers. When a network does not allow that, the call passes through a Cloudflare relay, still encrypted end to end; the relay cannot see or hear it. The few messages that set up a call are sealed like a chat message. “Typing…” carries nothing but the fact that you are typing.
GIFs. When you search for a GIF, your search words go through our server to GIPHY. The GIF you pick is sent to the other person as an ordinary sealed picture; they never contact GIPHY.
Reporting and blocking. When you report someone, our server keeps your username, theirs, the reason and your note, so that we can review it. The reported message goes with it only if you tick “Send this message with the report”; nothing else from the chat is sent. Blocking happens on your computer only and is never sent to anyone. A report about Saathi carries the task and Saathi's summary of that run, not the values it filled or the page.
Deleting it. Settings › Privacy › Nayan Chat ID › Delete my ID removes your username, name, photo, key and any messages still waiting for you from our server, at once, and signs this computer out. Messages already delivered stay on the computers they were delivered to.
Nayan for Work
Team report, only if you join your workplace's team with the code your employer gives you. Then Nayan sends your workplace: your name, whether you are at the computer, how much time you spent on each of the workplace's own systems today and how much of it had real typing or clicking, the shape and count of repeated tasks, the titles of pages open on the workplace's systems, and how many other tabs are open. If your employer turns on “Show all open tabs”, the site name and title of every tab that is not private is sent too, and Nayan tells you so on your own page. Never sent: any web address, anything you type, private tabs, or the name of a site outside the workplace's list (unless that switch is on).
While the team report is on, a badge shows in the browser. You can see the exact message that is sent at
nayan://me, and you can switch the report off there; your workplace then sees that it is off.
Nazar and Sikhaai, which count and learn your repeated work, keep everything on your computer. Nazar never records what you type.
Contacting NayanX from the owner's console sends only the details the owner typed and a few counts, only when the owner presses the button, and shows the exact message first.
Saathi, the AI co-worker
When you give Saathi a task, it sends what it needs to Anthropic's Claude, using the API key you entered: the task, the fields, buttons and text of the page it is working on, and any document you attach. Anthropic holds that under its own policy. Your key is kept with Windows' own protection on this computer. Saathi asks you before it presses any button that saves, sends or deletes, and keeps a receipt of each run on your computer.
What Nayan keeps on your computer
History, bookmarks, downloads, cookies, cache, settings, page thumbnails, passwords you ask it to remember, your chats
and their files, and in Nayan for Work the counts and learned tasks. All of it sits in your Windows user profile. Clear
it from Settings › Privacy. Uninstalling the Microsoft Store version removes it; the website version leaves your
profile folder in place so a reinstall keeps your things, and you can delete %APPDATA%\Nayan yourself.
Coming from another browser. Bringing bookmarks and passwords over happens on your computer only. The password file you export from your old browser is deleted as soon as Nayan has read it.
Private windows
A private window keeps no history, no cookies, no thumbnails and no passwords, and is never counted or reported. When the last private window closes, everything it held is thrown away.
Camera, microphone, screen and location
A website gets none of these until you say yes, and your answer is remembered for that one site only. You can review or withdraw it at any time in Settings › Privacy.
Security
Everything Nayan sends to us travels over encrypted connections (https). Nayan tries the secure version of every address first and warns you before falling back.
Children
Nayan is not aimed at children under 13, and Nayan Chat is not meant for them.
This website (nayanx.com)
Forms. When you pre-book Nayan for Work or NayanX Nirmaan, or send us a question, we keep what you typed: your name, phone, e-mail, company, city, team size or the kind of software, your message, the booking number, the time, and the country your connection comes from. Only NayanX staff see it, to call or write back to you. It is stored with Cloudflare (our host) and never sold or shared. Pre-booking takes no payment.
Sign in with Google. Google may offer to sign you in when you open the site. Only if you tap “Continue”, Google tells us your name, e-mail address, photo and a Google account number; we keep those, with when you first and last came, so your forms fill in by themselves and we know who booked. After you have tapped “Continue” once, Google signs you in again by itself on later visits, until you sign out. We get nothing else from your Google account. Sign out from your name at the top of the page; the offer then stays away for a week. In China, or where Google cannot be reached, nothing is loaded from Google.
Nothing else. The site has no analytics and no advertising trackers, and does not record which pages you look at. Your IP address is not stored; a scrambled form of it is kept for one hour only, to stop spam.
Deleting it. Write to contact@suryabharti.in from the e-mail or phone you used and we delete your form and sign-in record.
Changes
When Nayan gains something that sends data, this page is updated with that version, and the date above changes.
Two more requests the browser makes
- Doodle of the day. Thirty seconds after start and every six hours Nayan fetches a small list from updates.suryabharti.in and, if a doodle is set for today, its picture. A plain GET; nothing about you is sent. Customise → Doodles switches it off, and then no request is made at all.
- Store update check. The Microsoft Store edition asks Microsoft's own catalogue (displaycatalog.mp.microsoft.com) a minute after start and every six hours whether a newer Nayan is listed, so the Update button can show. The request carries the product id only, no account and nothing about you.
Questions about this policy, or a request about your data: contact@suryabharti.in.