Transparency
We believe you should know exactly what happens with your data. This page explains how Lianas processes, stores, and protects your information.
Our approach to privacy
Lianas is built with a Swiss-first, privacy-by-design philosophy. By default, all AI processing runs on Infomaniak's sovereign infrastructure in Switzerland, subject to Swiss data protection law, one of the strictest in the world.
We don't sell your data. We don't use it for training. Your conversations, your memory, your context: they belong to you.
What happens when you send a message
Here is the path your data takes, step by step:
- You send a message: text or voice. If voice, the audio is transcribed on our own server, or by Infomaniak in Switzerland when ours is unavailable or hears nothing.
- Context is retrieved: the server queries the Context Engine to find relevant memories about you. Embeddings are computed locally with BGE-M3 and never leave the server.
- The LLM generates a response: your message, along with relevant context, is sent to the language model. By default, this is an open-weight model, served by Infomaniak and hosted in Switzerland.
- The response is returned to you: streamed token by token. The conversation is saved in the database for your history.
- Memory is updated: the Context Engine keeps useful facts from the conversation and from what Lianas consulted for you (search results, web pages, emails, calendar, to-dos) and stores them for future sessions. A detail from Lianas' reply is kept only when your message or one of those sources supports it.
- Voice output (optional): if voice replies are on, the response text is turned into audio on our own server (Kokoro), unless you chose your own provider.
What is stored and where
Server (Swiss infrastructure)
- Account information (email, hashed password, settings)
- Conversation history (messages, titles, timestamps)
- Context graph (entities and relations, your long-term memory)
- Sorted mail (sender, subject, category, summary, drafted or sent reply, not the full message) and a copy of your events for the next three weeks, kept a month after they end
- Files, notes, folders, to-dos, reminders and scheduled tasks
- Cards on your desk and the reminders Lianas proposed
- Devices and notification history
- Screenshots of web pages Lianas read, kept 15 days
- Encrypted secrets (your own API keys, mailbox and calendar passwords, with Fernet)
- Security audit log, AI usage and your feedback
- Server logs (IP address, page requested), erased at each update of the service
- An encrypted nightly backup of the data above, kept 7 days
Your browser / desktop app
- Session cookie on the web (httpOnly, 30 days), session token in the desktop app
- UI preferences (localStorage)
External services (default configuration)
Your conversations, memory, mail, calendar and files stay in Switzerland. Speech-to-text, voice synthesis, web search and embeddings run on our own servers, and the language models on Infomaniak. A few things go out, only as far as needed:
- Web search: our SearXNG passes your queries, without your IP address, to Bing (Microsoft), Seznam, Wikipedia and Wikidata, and DuckDuckGo for currency conversions
- Places: the place name of an event goes to OpenStreetMap (Nominatim) to find its address
- Push notifications: they pass, encrypted for your device, through your browser's push service (Google, Apple, Mozilla or Microsoft)
- Web pages: when Lianas reads a page for you, our server fetches it, so the site never sees you
- Emails: a notification that reached none of your devices is sent to your email address
Additional external providers (with BYOK)
- When you configure your own API key, messages and/or audio are sent to that provider
Bring Your Own Key (BYOK)
Lianas lets you connect your own API keys for different providers. This gives you flexibility, but it also means your data will transit to those providers' servers. Here's what you should know:
- Language models (OpenAI, Anthropic, Gemini, OpenRouter, Mistral, Scaleway, OVHcloud, Albert, IONOS, Nebius, Regolo): your messages and context, and the background work done for you (sorting mail, drafting replies, filing notes and files), are sent to their API. The extraction of your memory and the moderation of messages and images stay at Infomaniak.
- Transcription (OpenAI, Mistral, Scaleway, OVHcloud, Albert, Regolo): your voice is sent for transcription.
- ElevenLabs, Mistral: response text is sent for voice synthesis.
- Tavily, Staan: search queries are sent for web search results.
- Infomaniak: data stays within Swiss infrastructure regardless.
When you configure a BYOK provider, the UI will clearly indicate that data is being sent outside Swiss infrastructure. You accept that provider's privacy policy by using their service. Your API keys are encrypted at rest with Fernet encryption and are never logged or exposed.
Swiss sovereign infrastructure
By default, Lianas uses Infomaniak as its AI provider. Infomaniak is a Swiss company operating data centers exclusively in Switzerland. This means:
- Data is processed and stored under Swiss law (Federal Act on Data Protection, FADP)
- In the default configuration, your conversations, memory, mail, calendar and files are never sent to the US or other jurisdictions with weaker protections
- Infomaniak is ISO 27001, ISO 14001 and ISO 50001 certified and runs its data centers on renewable electricity (their commitments (opens in a new tab))
- The language models, and speech-to-text when our own server is unavailable, are reached through Infomaniak's API, in Switzerland, never through a provider outside it
The embeddings engine (BGE-M3) runs entirely on our own server. Your context vectors are computed locally and never sent to any external service, regardless of your provider configuration.
What we do to limit the energy Lianas uses is in our eco-design statement.
What you can control
You have full control over your data at all times. Here's what you can do from the app:
- Context graph: visualize everything Lianas knows about you as an interactive graph
- Manage individual facts: rename, pin or delete specific entities or relations in your memory
- Wipe all memory: erase your entire context graph in one action
- Delete conversations: remove individual conversations from your history
- Export your data: download it as a JSON file, get a readable summary, or export a conversation as markdown
- Disconnect a mailbox or calendar: the sorted mail and the copy of your events go with it
- Stop the news emails: from the link in the email or in Settings
- Choose what Lianas does with your mail: turn off filing, suggested reminders and events, drafted replies or follow-ups in Settings, Email tab
- Choose your providers: switch between providers or remove your API keys at any time
- Delete your account: remove your account and its data from settings
Audience measurement
We measure the audience of our website and app with Umami, running on our own server in Switzerland. It sets no cookie and never identifies you: it records the pages visited (without their parameters), the referring site, browser, system, screen size, language, the country and city deduced from the IP address (the address itself is not kept) and load times, plus a few steps such as signing up, sending a first message or connecting a mailbox, and whether you are signed in, have confirmed your email or have used up your credits.
It also records how visits unfold (pages, clicks, scrolling), with all text, fields and images hidden, to see where people get stuck. You can turn this off on your device in Settings or on the privacy policy page.
Your rights under GDPR
As a user, you have the following rights regarding your personal data:
Right of access
View your context graph and conversation history directly in the app.
Right to rectification
Rename, pin or delete individual facts in your context graph.
Right to erasure
Wipe your memory, delete conversations, or delete your account from settings.
Right to portability
Export your data as JSON from Settings, or a conversation as markdown.
The full detail of what we collect, why, and for how long is in the privacy policy. For any data-related request, contact us at info@lianas.app.