1. Who is responsible
Nakama is developed and operated by the Association WizIT, Chemin des Fourcles 13, 1985 La Forclaz VS, Switzerland.
For any question about this policy or about your data: info@wizit.org.
2. What Nakama does
Nakama is a companion app intended to support people with an intellectual disability. It offers a spoken or written conversation, adapted to each person by a carer or a professional who writes their profile.
The app is used with a single Google account per person being supported. The carer sets up the app on the person's device, under that same identity.
3. The principle: your data stays with you
Nakama keeps no conversation content on its servers. The profile, the memory, the context documents, the conversation history and any audio recordings are written:
- to your own Google Drive, in a folder named
nakama-resources; - and as a local copy on the device (browser storage), so that the app remains usable offline.
The nakama-resources folder also contains: the list of addresses that receive the alerts and their thresholds, the log of reports and the usage statistics, and the hash of the PIN code (never the code itself).
(An earlier version of the app allowed a personal Gemini key to be saved there, in a file api-key.json. The app no longer reads or writes it. If such a file remains in your folder, you can delete it yourself.)
What our servers keep: only what is needed to recognise you and to act on your Drive on your behalf.
- your name, your e-mail address and your Google profile photo;
- your sign-in sessions;
- the access tokens that Google issues to us, including a refresh token; these allow Nakama to write to your Drive without asking for your agreement again at each visit.
No conversation content, no document, no profile is stored there. A few technical cookies, necessary for operation (the sign-in session, and the return from the Google Drive picker for a few minutes), are set in the browser; Nakama sets no advertising or tracking cookie.
Our servers run on Google Cloud (Cloud Run, region europe-west1, Belgium). The sign-in database is stored in a Cloud Storage bucket in the same region (europe-west1, Belgium).
4. Access to your Google Drive
On sign-in, Google asks you to allow Nakama to access “only the files you use with this app”.
This is a restricted authorisation. Nakama can see only:
- the files it created itself (the
nakama-resourcesfolder and its contents); - the files that the carer chooses themselves, with the “Choose from Google Drive” button (« Choisir dans Google Drive » in the app): a context document, for example. Each choice opens access to that file only. Nakama reads it to extract the text and adds a shortcut in
nakama-resources/context; it does not modify it or delete it.
The rest of your Drive is invisible to it — neither your personal documents, nor your photos, nor anything that you have not chosen to show it.
Nakama also requests your name, your e-mail address and your Google profile photo, to identify you.
5. The third-party services called
Running the app involves sending some data to third parties.
| Service | What is sent to it | Why |
|---|---|---|
Google Gemini, called through Vertex AI (Google Cloud), region eu | The person's profile, their memory, the text of the context documents, the content of the conversation (voice or text), the history of a resumed conversation, camera images when the camera is turned on, and the location (coordinates and address) at the start of each conversation. When a context document is added, the file itself (PDF, image, audio) so that its text can be extracted | To produce the app's answers, and to read the documents |
| Google Drive | The files listed in point 3 | To store them in your account |
| Google Maps Platform (map, Places, Geocoding) | Your location | To find an address, search for nearby places, display a map |
| Google Routes | A starting point and a destination | To estimate a journey time |
| transport.opendata.ch | A public transport stop, or your GPS coordinates to find the nearest stop | To give the next departures |
| Resend (sending e-mails) | The address of each alert recipient, the person's name, the type and level of the alert, a sentence giving the reason, written by the AI, the date and time | To send the safety alerts (point 8) |
Where Gemini processes this data. Nakama calls Gemini through Vertex AI, the AI service of Google Cloud, in the eu multi-region: according to Google, processing there stays within the European Union (Switzerland and the United Kingdom are not part of it). No personal key is involved: our server authenticates itself to Google with a service account, using a 15-minute token. The conversation (voice, text, camera images) goes from the device directly to Google. Only the exchange with the AI that helps write the profile, and the context documents when they are analysed, pass through our servers, for the duration of the call and without being kept there.
What Google says about it. According to Google Cloud's documentation for Vertex AI (the “Data governance” page, accessed on 18 October 2026): Google does not use its customers' data to train or fine-tune its models without their prior authorisation; Google may log requests to detect abuse, and this documentation does not say for how long; a cache, deleted after 24 hours at the latest, may be used by the Gemini models. Google's processing of the data is governed by the Cloud Data Processing Addendum of Google Cloud. Source: https://docs.cloud.google.com/vertex-ai/generative-ai/docs/data-governance.
The other services process this data under their own terms. They may process it outside Switzerland and the European Union.
What is never sent to a third party: your Google password (Nakama never sees it), and the content of the rest of your Drive. Only the files that the carer chooses (point 4) are read.
6. The technical logs
Nakama records one line per request, to know that the service is working and how many people use it. These lines contain a page address and an opaque session identifier — never the content of a conversation or of a document.
One additional line is written at each sign-in, and that one carries your name and e-mail address.
| Where | Contains name and e-mail | Kept |
|---|---|---|
| Operating logs | yes, on the sign-in lines | 30 days, then deleted automatically |
| Analytics warehouse | yes, on the sign-in lines | 395 days (13 months), then deleted automatically |
These deletions are automatic: each day of data disappears by itself on expiry.
The Google Cloud Run platform also keeps its own infrastructure logs (IP address, browser, address requested). They are written to the operating logs above, and so kept for 30 days; the analytics warehouse, for its part, receives only Nakama's usage lines.
7. Audio recording of conversations
Nakama can record the voice during a conversation. This feature is turned off by default and is only turned on if a carer switches it on explicitly in the settings.
When it is active, the recordings first wait on the device, then are sent to your Google Drive through our servers, which do not keep them. You can delete them at any time from your Drive.
Regardless of this option, the voice is sent to Google Gemini (through Vertex AI, region eu) during the conversation so that the app can respond (point 5).
Recording the voice of a vulnerable person calls for informing them and, as far as possible, obtaining their agreement.
8. Safety alerts
When Nakama believes it detects distress or problematic use, it may send an alert e-mail to the designated carers. This sending is not guaranteed (see the terms of use).
- Who receives the alert: the addresses on the list that the carer keeps in the settings (it is saved in your Drive). This list may be pre-filled from the licence register (point 9). If no address is configured, the alert goes to a fallback address specific to the deployment and, as a last resort, to the person's own address.
- What the e-mail contains: the name (or e-mail address) of the person, the type of alert (stress or problematic use), the level, a sentence giving the reason, written by the AI (500 characters at most), and the date and time. It contains neither the conversation nor the audio recording; the sentence giving the reason may nevertheless reuse elements of what was said.
- How it is sent: by the Resend service, from a verified domain (point 5).
- Limits: at most 5 e-mails sent per 10 minutes and per person.
9. The licence register
Access to Nakama is reserved for registered people. For this we keep a register (a Google Sheets spreadsheet, read by our servers) containing, for each access: the name of the institution, the name or first name of the person, the authorised Google address, a possible end date, notes, and possibly the carer's e-mail address, which is used to pre-fill the list of alert recipients (point 8).
This register is used only to check that an account has the right to use the app. It contains no health data and no content. Removing a row cuts off access generally within a minute (up to ten minutes if the register is temporarily unreachable).
10. What Nakama does not do
- No advertising, no advertising profiling.
- No resale or sharing of your data for commercial purposes.
- No tracking across sites.
11. Your rights
You may request access to your data, its correction, its deletion, or object to its processing. Write to info@wizit.org.
In practice, most of your data is already in your hands: the nakama-resources folder is in your Drive, you can view it yourself at any time.
To erase everything, use “Reset the app” (« Réinitialiser l'application » in the app) in the settings. This action moves the nakama-resources folder to the Drive bin (recoverable for 30 days), removes Nakama's access to your Google account, deletes your sessions and access tokens on our side, and erases the data from the device.
Deleting the folder by hand in Drive is not enough: the device keeps a local copy, which can be sent back to a new folder. What the reset does not delete on our side: your identity (name, e-mail address, photo) and, if there is one, your row in the licence register. Their deletion is requested from info@wizit.org.
You can also withdraw Nakama's access to your Google account at any time from https://myaccount.google.com/permissions.
You have the right to refer the matter to the competent authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).
12. Changes
This policy may change. The date at the top of the page shows the latest change.
13. Contact
Association WizIT
Chemin des Fourcles 13, 1985 La Forclaz VS, Switzerland
info@wizit.org
See also: Terms of use