Privacy Policy for Anchor
Last updated: October 14, 2026
Anchor ("we," "us," "the app") is a personal accountability app that lets you set daily tasks with a self-imposed penalty for missing them. This Privacy Policy explains what data we collect, why, and how you can control it.
This app is developed and operated independently, not through a registered company. If you have any questions, contact anchor.theapp@gmail.com.
1. Information We Collect
Account information
- Email address
- Display name
- Profile photo (optional — you choose whether to upload one)
- Language and theme preference
- Default currency and default penalty amount
If you sign in with Google or Apple, we receive your name and email address from that provider at the time of your first sign-in (Apple only shares your name once, the first time you authorize the app).
Challenge and task data
Everything you create inside the app is stored so the app can function:
- Challenge titles, descriptions, and settings (currency, penalty amounts, closing time, grace period)
- Task titles and completion status
- Penalty, payment, and withdrawal records ("balance" history)
If you join a challenge with other people, the other members of that challenge can see your display name, profile photo, task activity, and balance history within that shared challenge — that visibility is the core function of the app. Members who leave a challenge, or whose challenge is closed, keep seeing its history up to the moment they stopped being members.
When you share an invite link to a challenge, anyone who opens it can see the challenge's name, description, photo, number of members, and currency before joining — but not the members' names.
Usage data
While you're signed in, the app records which features you use — for example, opening a tab, creating a challenge or task, marking a task done, recording a payment, or opening the subscription screen. Each record contains your account ID, the action and its time, and technical details such as the IDs of the related challenge or task, amounts, or your sign-in method. Each record also notes the country the request came from — a two-letter code worked out from your IP address. The IP address itself is not saved in these records, and the app never asks for access to your location. The titles and descriptions of your tasks and challenges are never included. If a screen stops working because of an error, we also record the error message, your app version, and platform so we can fix it.
These records are stored in our own database (Supabase), are accessible only to the Anchor team, and are used only to understand how the app is used and to improve it. We do not use them for advertising, do not combine them with data from other apps or websites, and do not share them with anyone.
Notifications
Both kinds of notifications in the app are optional. Reminders about unfinished tasks are scheduled on your device itself — nothing about them is sent to us. Updates from friends in shared challenges (for example, a member recorded a payment or planned their day) come from our server, so for them we store your device's push token together with your account ID and platform (iOS or Android).
To deliver an update, our server passes the push token and the notification text — the friend's display name, the challenge name, and, for payments and withdrawals, the amount — to Expo's push notification service, which forwards it to Apple (iOS) or Google (Android). You can turn off updates from friends in Settings → Notifications, or all Anchor notifications in your device settings. The push token is deleted when you sign out or delete your account.
Subscription information
If you purchase Anchor Pro, the purchase itself is handled entirely by Apple (App Store) or Google (Play Store) through RevenueCat, our subscription management provider. We do not receive or store your payment card details. We only receive your subscription status (e.g., active/expired) so the app can unlock Pro features.
What we don't do
We do not use third-party advertising networks or analytics/tracking SDKs, and we do not track you across other companies' apps or websites. We do not sell your data to anyone.
2. How We Use Your Information
We use the information above to:
- Operate your account and the challenges you create or join
- Calculate balances, penalties, and daily task status
- Send you account-related emails (e.g., email confirmation, password reset) via our email provider
- Provide customer support if you contact us
- Unlock Pro features if you subscribe
- Send you updates from friends in shared challenges, if you allow notifications
- Understand how the app is used and find and fix errors, using the usage data described above
Legal bases for processing (for users in the EU/EEA under the GDPR): performance of a contract — to operate your account, challenges, and subscription; legitimate interest — for basic service security, responding to your requests, and understanding how the app is used and fixing errors (usage data); your consent — for notifications and optional data such as a profile photo. You can withdraw consent at any time.
3. Third-Party Services We Rely On
| Service | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage for the app |
| Resend | Delivers account-related emails (confirmation, password reset) |
| RevenueCat | Manages Anchor Pro subscriptions |
| Expo | Delivers updates from friends as push notifications |
| Apple (Sign in with Apple, App Store) | Authentication, subscription purchases, and push notifications on iOS |
| Google (Sign-In, Play Store) | Authentication, subscription purchases, and push notifications on Android |
| ExchangeRate-API (open.er-api.com) | Public currency exchange rates for the Statistics tab |
| Cloudflare | Hosts our website and the web version of the app |
The Statistics tab downloads public currency exchange rates directly from your device, at most once a day. The request contains no account data, but like any internet request it shows ExchangeRate-API your device's IP address.
Each of these providers processes data only as necessary to provide their service to us and is bound by their own privacy terms.
These providers may store and process data on servers outside your country, including in the EU and the United States. Such transfers rely on the providers' own contractual safeguards, including the Standard Contractual Clauses provided for by the GDPR.
4. Website
This policy also covers our website. The site uses no advertising or analytics trackers and loads no fonts or scripts from other companies; the page language is determined by its address (/uk/ for Ukrainian) and is not stored in your browser.
5. Data Retention and Account Deletion
You can delete your account at any time from Settings → Profile → Delete Account inside the app.
When you delete your account:
- Your login credentials and personal profile data are permanently removed from our authentication system.
- If nobody else has ever been a member of a challenge you own, that challenge and all its data are permanently deleted. If only former members are left in it, the challenge is closed and kept for them.
- If you are (or were) a member of a challenge shared with other people, your name, email, and photo are anonymized, but your past activity within that shared challenge (tasks, penalties, payments) is retained in anonymized form. This is necessary because that history is shared with — and still visible to — the other members of the challenge, and deleting it would corrupt their own balance history.
- Your push notification tokens are deleted. Usage data stays linked only to the anonymized account — not to your name or email.
Before you can delete your account, the app will ask you to resolve any outstanding balance you owe in a shared challenge, and to transfer ownership of any shared challenge you own that other members are still active in.
6. Your Rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to how we process it. You can do most of this yourself in the app (editing your profile, deleting your account). For anything else, contact us at anchor.theapp@gmail.com and we'll respond as soon as we can. If you are in the EU/EEA or the UK, you also have the right to lodge a complaint with your local data protection supervisory authority.
7. Children's Privacy
Anchor is not directed at children. We do not knowingly collect data from children under 13 — or under a higher minimum age if your country's law sets one for consenting to data processing.
8. Security
We rely on Supabase's infrastructure, which includes encryption in transit and role-based access controls, to protect your data. No method of storage or transmission is 100% secure, but we take reasonable steps to protect your information.
9. Changes to This Policy
We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and additionally notify you — in the app or by email.
10. Contact Us
Questions about this policy or your data? Email anchor.theapp@gmail.com.