Legal

Privacy Policy

Effective August 15, 2026 Last updated September 11, 2026

This policy covers Anello: the assistant, this website, and the messaging service you can reach it through. It explains what we collect, why, and who does and doesn't get to see it.

1. Who we are

Anello is a service of Erik Hope, doing business as Mirabelle Studios ("we", "us"). You can reach us at privacy@bax.bot.

Anello is a hosted assistant for the adults running a household, reached by message or at your household's own email address. This policy describes that service: the signup form, the number we message you from, and what Nellie remembers for you.

2. Messaging

Opting in

A mobile number is required to set up your household, but starts nothing: give us one on the signup form and Nellie still won't message you until you text it first — that message is your opt-in. That form is the only way to sign up, and we message only numbers that have opted in that way. Leaving your email on our waiting list is not a signup and does not start any messages. We do not buy, rent, or import phone number lists, and we never send marketing or promotional messages. Consenting to messages is not a condition of anything you buy.

How the messages reach you

We send through a messaging provider that delivers over Apple's iMessage where your device supports it, and falls back to a standard text message where it doesn't. You don't choose or configure this; it's decided by the phone at the other end. Either way it arrives in the ordinary Messages app, and either way the parts below apply.

What we send, and how often

Two kinds of message, both of them things you asked for: replies to what you send Nellie, and the alerts and reminders you set up yourself: a price you're watching, a deadline you asked to be nudged about. How often varies entirely with how you use it. Nellie answers when you message it and speaks up when something you asked it to watch actually happens. There is no fixed schedule and no broadcast.

Cost

We never charge you for messages. Messages delivered over iMessage use your data connection. Where a message falls back to a standard text, message and data rates may apply. That's between you and your mobile carrier, so check your plan. Neither we nor any carrier can guarantee a message arrives on time, or at all.

Stopping messages, and getting help

Reply STOP at any time to stop all messages. We will send one confirmation and then nothing further. Reply START to resume, or HELP for support information. You can also email privacy@bax.bot, which reaches us the same way.

Your mobile number is not shared

We do not share your mobile number, or the fact that you consented to messages, with any third party for marketing or promotional purposes. Not with advertisers, not with data brokers, not with affiliates, and not with anyone else. We do not sell it and we do not rent it.

The only parties that ever touch your number are the providers who have to handle it to deliver a message to your phone, and they act for us under contract and may not use it for anything else. They're listed in Who we share it with.

3. What we collect

Nellie only receives what you send it. It has no connection to your email inbox, your calendar, your contacts, your photo library or your files, and it cannot access them. If Nellie knows something, it is because you told it, or because you sent it a photo or a document. Everything below is either something you typed into a form, something you sent Nellie, or a technical detail of the request that carried it.

Signup details: Your name, email address, the household name you pick, and the invite code you arrived with: the fields on the signup form. The form also creates a random request identifier so retrying it cannot create a second signup. We use the household name to identify your Nellie, and the email to reach you about your account when a message isn't the right channel.
Mobile number: The number you register or message us from, plus the date, time, and method of your opt-in and any later opt-out. We keep the consent record because we have to be able to show that you agreed.
Household membership details: The email addresses, mobile numbers, names, and household roles added in Nellie's household settings. We use them to identify who may contact a household and keep a current operational record of that roster.
Message content: What you send Nellie and what it sends back, by message or by email at your household's address. This is the substance of your request, so Nellie needs it to answer.
Message metadata: Timestamps, delivery status, and any error returned by the messaging provider or, where a message goes as a standard text, the carrier.
What you ask Nellie to remember: Notes, reminders, watch requests, and project documents you create by asking for them. Nellie is built to keep these across conversations; that is the feature, and it means the content persists until you delete it.
Your agreement: That you ticked the terms box, when, and which version of the terms was in force at the time. We keep it because "you agreed" is worth little without a record of what you agreed to.
Technical details of the request: When you submit either form we store the IP address it came from and your browser's user-agent string, alongside the submission. It's there to investigate abuse and to work out what happened when something goes wrong, and nothing else reads it.
Website analytics: Aggregate pageview counts, with no cookies and no cross-site tracking. See This website.

We do not collect your contacts, your location, your photo library, or any account credentials, and Nellie has no permission to log in to anything of yours, by design. A photo or document you choose to send Nellie is a different thing: that is message content, described above, and Nellie has the ones you sent it and no others.

4. How we use it

We use what we collect only to:

Answer you, and send the alerts and reminders you asked for.
Keep the notes and documents you asked Nellie to keep.
Prove your consent to receive messages, and honor opt-outs.
Diagnose delivery failures and keep the service running.
Prevent abuse of the number, and comply with law.

We do not use your messages or your number to advertise to you, and we do not sell your information. We do not use your message content to train AI models.

We share information with a small set of providers who process it on our behalf, only to the extent they need it to make the service work, and only under agreements that bar them from using it for their own purposes. This is the whole list. Two of them handle the things you actually say to Nellie, so they are first.

Messaging provider: A message cannot reach your phone without one. Our messaging provider receives your number and the content of the message in order to deliver it, over iMessage or as a standard text. It does not only pass them through: like any messaging service it keeps its own delivery records, so your number and the text of your messages are stored on its systems as well as ours, for as long as its own retention policy says. Where a message goes out as a text, the mobile networks carry it the last stretch, the same as any message you send yourself.
Email provider: Mail is the same story. Anything Nellie emails you, and anything you send to your household's address, passes through an email provider, which receives your email address and the contents of that mail in order to deliver it, and likewise keeps its own copy in its delivery records. That includes the invite and welcome mails we send when you sign up.
AI model provider: Nellie sends the content of your request to the AI model that generates the reply. Your phone number is not sent with it. Model providers we use are under terms that prohibit training on the content we send, and the models we use are hosted in the United States, so the content of your requests is not processed abroad.
Bot protection: Our forms use a bot-detection service to keep automated submissions out. It sees your IP address and some technical signals about your browser in order to tell a person from a script. It does not receive the contents of the form.
Infrastructure: Our hosting provider runs this website, the code behind the two forms, and the database those submissions are stored in, along with the servers Nellie itself runs on. There is no third-party form service in the middle: the forms post to our own code, on our own domain, and what you type goes straight into our own database. The hosting provider holds it at rest on our behalf and may not use it for anything else.
Legal: If we are legally compelled by valid process, or where disclosure is necessary to protect someone's safety or our rights.

To restate the point in §2, because it is the one that matters most: your mobile number and your consent to messages are never shared with any third party for marketing or promotional purposes. The providers above handle them only to run the service, and only under contract.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are used in US state privacy laws.

6. How long we keep it

Message content and the notes Nellie keeps stay until you delete them or ask us to. Delivery metadata is kept for up to 12 months for troubleshooting. Records of your opt-in and opt-out are kept for as long as we operate the messaging service, and for at least four years after, because messaging regulations require us to be able to evidence consent. If you opt out, we retain your number on a suppression list; that is what guarantees we don't message you again.

Copies our providers hold

The times above are ours. The providers in Who we share it with keep their own delivery records, and those run on their retention schedules, not this one. In practice that means a message or an email can still exist in a provider's logs for a while after we have deleted our copy of it. Each of them is under contract to use what they hold only to run the service for us, and never for their own purposes, and we ask them to delete on request where their systems allow it. We would rather write that down than let "deleted" sound more absolute than it is.

Closing your account

Ask us to close your account and everything Nellie holds for you is deleted from our servers: your messages, the notes and documents it kept, your lists, and your mobile number. That is the substance of it, and it does not come back. Copies sitting in a provider's delivery logs age out on their own schedules, as described just above.

Three narrow things outlive the account, and we would rather say so than imply otherwise:

Your household name. Names are claimed permanently, as the terms describe, so the name is not released to anyone else. We keep the name itself for that reason, with nothing attached to it.
The consent record. That you opted in, when, and how, which messaging regulations require us to be able to evidence for at least four years.
The suppression entry. If you asked us to stop messaging you, the record of that is the thing that keeps the promise.

None of the three is used to contact you or to build any profile of you, and none of them contains your message content.

7. Your choices

Stop messages. Text STOP. It takes effect immediately.
See what we have. Email us and we'll send you a copy.
Delete it. Email us and we'll delete your data. See Closing your account for the three narrow records that outlive an account, and why.
Correct it. Tell us what's wrong and we'll fix it.

Depending on where you live, you may have these rights under law, including under the California Consumer Privacy Act or the GDPR. We extend them to everyone regardless. We will not discriminate against you for exercising them. Write to privacy@bax.bot and we'll respond within 30 days.

8. Security

Your data is encrypted in transit and at rest. Everything we hold on our own servers is encrypted on disk: the database with your signup details, your mobile number and the record of your consent, and the storage behind the messages, lists and notes Nellie keeps for you. Access to the systems holding message content is limited to those who need it to operate the service. Nellie's own runtime is deliberately constrained: it runs in a container, confined to its own workspace, and by default cannot read the credentials it runs under. No system is perfectly secure, and a message that falls back to a standard text is not an encrypted channel: treat those as you would a postcard, and don't send Nellie anything you would not want a carrier to hold.

9. This website

bax.bot uses GoatCounter for analytics. It sets no cookies, collects no personal data, and does not track you across sites; it counts pageviews. Fonts are served by Google Fonts, and a bot-detection service runs on the pages that carry a form. Each of those receives your IP address as part of the request, as any server does. Our forms post to our own code on this domain rather than to a third-party form service. There are no advertising or social tracking scripts on this site.

Do Not Track. Some browsers send a "Do Not Track" signal. There is no industry agreement on what a site should do with it, so we don't respond to it specifically, but we don't track you across sites in the first place, with or without the signal. We also allow no third party to collect personally identifiable information about your activity across sites from this one.

10. Children

Nellie is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us information, email us and we will delete it.

11. Changes

If we change this policy we'll update the date at the top. For changes that materially affect how we handle your information, we'll notify you by text or email before they take effect.

12. Contact

Erik Hope, d/b/a Mirabelle Studios
privacy@bax.bot

For questions about the messaging specifically (opt-outs, frequency, or anything in §2), the same address reaches us, or text HELP to our number.