Legal

Privacy Policy

Last updated: [To confirm: date these documents take effect, e.g. 1 November 2026]

Some details are still being confirmed. Highlighted items will be completed shortly. If you have a question in the meantime, please get in touch.

1.Who we are

Annah is operated by Dodavah Solutions Limited, company number [To confirm: Companies House registration number], registered office [To confirm: registered office address]. We are the “controller” of the personal information described in this policy, which means we decide how and why it is used. We are registered with the Information Commissioner's Office (ICO) under registration number [To confirm: ICO data protection registration number].

This policy explains what we collect when you use Annah, why, who we share it with and the rights you have. You can contact us about it at info@dodavahsolutions.com.

2.What we collect

Information you give us

  • Account details: your name, email address, password (stored securely by our sign-in provider, never in plain text), language setting, when you accepted our terms, and whether you want product updates. If you sign in with Google, we also receive your Google profile name, email address and profile picture.
  • Conversations: the messages you send to Annah and its replies, which are saved to your account so you can return to them.
  • Documents: if you upload a document such as a Home Report, its text is read in your browser and shared with Annah as part of your conversation.
  • Enquiries to brokers: if you use a broker's version of Annah and choose to leave your details, we collect your name, email address, phone number (optional), the consent you gave and how many messages you exchanged.
  • Messages to us: anything you send when you email us.

Information collected automatically

  • Technical data: your IP address, browser and device type and the pages you request, used to run the service securely and to prevent abuse.
  • Usage statistics: aggregated, anonymous page-view statistics. These do not use cookies and do not identify you.

The calculators run in your browser. The figures you enter there are not sent to us unless you also type them into the chat.

Please do not share special category information, such as details of your health, with Annah. It is not needed to answer mortgage questions.

3.How we use it, and our lawful basis

Data protection law requires a lawful basis for each use of your information:

What we doLawful basis
Create and run your account, answer your questions and save your conversationsPerforming our contract with you (these terms)
Keep Annah secure, prevent abuse and fix problemsOur legitimate interests in running a safe, reliable service
Understand how Annah is used, in aggregate, to improve itOur legitimate interests
Send you product updatesYour consent, which you can withdraw at any time
Pass your enquiry to a mortgage brokerYour consent, given on the enquiry form
Keep records we are required to keep, and respond to lawful requestsLegal obligation

4.How AI is used

To generate an answer, your message, the earlier messages in that conversation and any document text you have shared are sent to an AI language model through OpenRouter, which routes the request to the model provider. [To confirm: whether AI model providers retain prompts or use them for training, and for how long]

Annah does not make decisions about you that have legal or similarly significant effects. It does not decide whether you can get a mortgage; it only gives general information.

5.Who we share it with

We use trusted service providers to run Annah. They process personal information on our behalf, under contract, and only for the purposes below:

ProviderWhat they do for us
SupabaseAccount sign-in, and the database that stores accounts, saved conversations and enquiries.
VercelHosting the website and app, and privacy-friendly, cookie-free visitor statistics.
OpenRouter and the AI model providers it routes toGenerating Annah's answers from your messages and any document text you share.
UpstashRate limiting, to protect the service from abuse.
GoogleOnly if you choose "Continue with Google" to sign in.

We also share information:

  • with a mortgage broker, only when you ask us to by leaving your details on their version of Annah. The broker then uses it under their own privacy notice;
  • where the law requires it, for example with regulators, law enforcement or courts;
  • if our business changes hands, with a buyer who will continue to protect it as described here.

We do not sell your personal information.

6.International transfers

Some of our providers, including AI model providers, may process information outside the UK. Where they do, we make sure it is protected to the standard UK law requires, using [To confirm: safeguard used for transfers outside the UK, e.g. the UK IDTA or UK Addendum to the EU SCCs].

7.How long we keep it

  • Account details: while your account is open, then [To confirm: how long account details are kept after an account is closed].
  • Conversations and documents: [To confirm: how long saved conversations and uploaded documents are kept]. You can ask us to delete them sooner.
  • Broker enquiries: [To confirm: how long enquiry details passed to brokers are kept by Annah].
  • Technical and security logs: [To confirm: how long server and security logs are kept].

We may keep information for longer where the law requires it or to resolve a dispute.

8.Cookies and local storage

We keep this to what Annah needs to work:

  • Sign-in cookies keep you signed in securely. They are strictly necessary, so they do not need your consent.
  • Local storage in your browser remembers your conversations on that device and preferences such as light or dark mode.

We do not use advertising or cross-site tracking cookies, and our usage statistics are cookie-free. If this changes, we will update this policy and ask for your consent where required.

9.Your rights

Under UK data protection law you have the right to:

  • access the personal information we hold about you;
  • have inaccurate information corrected;
  • have your information deleted;
  • restrict or object to how we use it, including objecting to uses based on legitimate interests;
  • receive a copy of information you gave us in a portable format;
  • withdraw your consent at any time, where we rely on it.

To use any of these rights, email info@dodavahsolutions.com. We will respond within one month. There is normally no charge.

If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10.Keeping it secure

Information is encrypted in transit, access to it is restricted, and your saved conversations can only be read through your own account. No online service is completely secure, so please use a strong, unique password and keep it private.

11.Children

Annah is for adults. You must be at least 18 to create an account, and we do not knowingly collect information from children.

12.Changes to this policy

We will update this policy when how we handle personal information changes, and show the date of the latest version on this page. We will tell account holders about significant changes.

13.Contact us

For anything about your personal information, email info@dodavahsolutions.com, use our contact page, or write to Dodavah Solutions Limited, [To confirm: registered office address]. See also our Terms of Service.