Privacy Policy
Last updated: October 1, 2026
Who we are
andAndrea is operated by andAndrea LLC, EIN: 38-4338058, registered at 30 N Gould St Ste R, Sheridan, WY 82801.
We are the “data controller” for the information described here, meaning we decide what is collected and why.
Questions, requests, or complaints: admin@andandrea.com.
The short version
We collect as little as we can get away with. We do not run advertising, we do not track you across other websites, and we do not sell or rent your information to anyone. There is no Google Analytics, no Meta pixel, and no advertising cookies on this site.
What we collect
Your email address. It is how you sign in, we email you a link or a six-digit code instead of using passwords, so there is no password for us to store or lose. Your email address and your first name are the only things we may ask you for directly.
Your first name. When you buy, we ask what Andrea should call you. It is kept alongside your email so that when Andrea writes to you, she is writing to a person and not an address. That is the entire reason we hold it.
The name on your credit card. Stripe’s payment page also collects the cardholder name and billing details (except the card number, expiry date and security code), and passes them back to us with the confirmation of payment. We do not ask for these and we do not use them, access to guides is decided by your email address alone, but they are part of your purchase record and we can see them.
Your card number, never. Payments are handled entirely by Stripe. Your card number goes to Stripe, not to us, and we never see it or store it. We do not run a customer database separate from Stripe: your purchase record, your email and your first name all live in Stripe’s systems, and that record is what tells the app which guides you can read.
What you write in the app. If you use the members’ chat rooms, we store the chat name you choose and the messages you post. The chat name is yours to pick and you can change it at any time, many people simply use their first name, and whatever you choose is visible to every other member in the room. If you ask a question during a live session, we store the question, together with your email address, so Andrea can answer it. Your email address is never shown to other members, only your chat name.
Notifications, if you allow them. If you let the andAndrea app send notifications, your phone gives us an address that only Apple’s or Google’s notification service can deliver to. We keep it with your email so Andrea’s messages reach you, and delete it when you sign out or your phone switches notifications off. Each message is encrypted so only your phone can read it.
Conversations with the andAndrea Concierge. The Concierge is an AI helper. What you type into it, and any screenshot you choose to attach, is sent to Anthropic to generate a reply. Do not send it anything confidential. If you use the talking install helper, the sound from your microphone is sent to OpenAI while the helper is on, so it can hear your answers. It is used for nothing else.
Whether the app made it onto your phone. So we can help if adding the app to your phone goes wrong, we note, against your email address, how far you got on the install page (for example, which steps you were shown, which step the talking helper reached, or that it couldn’t use your microphone) and, once the app is on your phone, the days you use the app, which of its setup steps you’ve completed (such as putting it on your first home screen), and what kind of device it is (for example “iPhone”). We never record what you say to the helper. We use this only to help you get set up, to improve the install steps, and to see how members are using andAndrea so we can keep making it better. It is never used for advertising.
Basic technical information. Like all websites, our hosting and delivery providers automatically log things such as IP address, browser type, and which pages were requested. This is used to run and secure the service, not to build a profile of you.
What we store on your device
Cookies. Seven, all our own, none for advertising or tracking. Six of them are set by our server and cannot be read by scripts running in the page; the seventh, which only remembers that you have seen the cookie notice, is set by the page itself. All are sent only over an encrypted connection, and none are sent along with requests made by other websites.
| Cookie | What it does | Roughly how long |
|---|---|---|
aa_session |
Signs you in and keeps you signed in on the device you installed the app to, so you can reach the guides you bought without typing a code every time | 90 days |
aa_ent, aa_entg |
Records which guides your purchase entitles you to, so pages you have paid for open straight away | A few hours |
aa_help |
Limits how many Concierge messages one visitor can send, so the service cannot be abused | 1 day |
aa_chat, aa_qa |
Limits how fast messages and questions can be posted, to prevent spam | A few hours |
aa_consent |
Remembers that you have seen the cookie notice, so it is not shown again | 1 year |
None of these require your consent, because each one is necessary to deliver something you asked us for, signing you in, opening a guide you bought, or stopping the service being abused. None of them are used for analytics, advertising, or building a picture of you, and none are shared with anyone. We show you a short notice about them on your first visit so you know they are there. If we ever want to use anything beyond this list, we will ask you first, and it will not run unless you say yes.
Saved copies of the app. So guides load fast and work without a signal, your browser stores copies of pages, photos, and fonts. This stays on your device. You can clear it in your browser settings at any time.
Two things that live only in your tab. Whether you turned card sound on, and your conversation with the Concierge, so it is still there if you move between pages. Both disappear when you close the tab, and neither reaches us.
Who we share it with
We use a small number of specialist companies to run the service. Each receives only what it needs to do its job, and none of them may use your information for their own purposes.
| Company | What it does for us | What it sees |
|---|---|---|
| Stripe | Takes payments, holds the record of what you bought | Your email, your name and billing details, your card details, purchase history |
| Resend | Sends sign-in emails and receipts | Your email address |
| Vercel | Hosts the website | Technical logs |
| Bunny.net | Delivers guide text and photos | Technical logs |
| Cloudflare | Delivers the videos and live sessions | Technical logs |
| Upstash | Stores chat messages, event questions, install progress and notification addresses | Your email, your chat name, what you posted, how far you got installing the app, the days you used it, and your phone’s notification address if you allow notifications |
| Anthropic | Powers the Concierge and screens chat messages for abuse | What you type to the Concierge; chat messages as they are posted |
| OpenAI | Powers the talking install helper: it turns what you say into text so the helper can hear “next”, “help” and so on | The sound from your microphone, only while the helper is switched on |
| Apple and Google | Deliver notifications to your phone, if you allow them | An address for your phone; the message itself is encrypted so only your phone can read it |
We may also disclose information if the law requires it.
andAndrea LLC is a United States company, and your information is stored and processed in the United States. European and UK privacy law still applies to us, because we offer our guides to people in Europe and the UK, and we hold ourselves to it.
How long we keep it
- Your first name and email address are kept until you ask us to stop. There is no automatic expiry, because the point of holding them is to stay in touch with you personally. Every email we send carries an unsubscribe link, and you can ask us to delete you entirely at any time, see “Your rights” below.
- Purchase records are kept by Stripe for as long as required for tax and accounting purposes.
- Chat messages and event questions are kept while your account is active, so conversations make sense to the people in them.
- Install progress (how far you got on the install page), the days you used the app, the setup steps you completed, and on what kind of device, is kept while your account is active.
- Your phone’s notification address is kept until you sign out on that phone or it stops accepting notifications.
- Sign-in links and codes expire within 15 to 30 minutes.
- Concierge conversations are not stored by us beyond the conversation itself.
Your rights
Depending on where you live, you may have the right to ask us to: give you a copy of what we hold, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can also withdraw consent where we relied on it, and complain to your national data protection regulator.
To exercise any of these, email admin@andandrea.com. We will respond within one month.
Please note: deleting your information means losing access to guides you have bought, because the record of your purchase is what unlocks them.
Children
andAndrea is not intended for children, and we do not intentionally collect information from anyone under 16.
Changes
If we change this policy we will update the date at the top of this document.