Privacy Policy

Last updated: June 18, 2026

This Privacy Policy explains how Anchor (“we”, “us”, the “App”) collects, uses, and protects your information. By using Anchor you agree to this policy. For any questions, contact us at anchorr26@gmail.com.

Information We Collect

• Account information: your name, email address, and a securely hashed password. If you sign in with Google or Apple, we receive your name, email, and a provider account identifier from that service (we never receive your Google or Apple password).
• Focus session data: the sessions you run (start/end times, duration, timer mode), the categories you create, focus scores, streaks, goals, and aggregated statistics.
• NFC tags: the unique identifier (UID) of any tag you register and the label you give it, used to verify your physical presence during sessions.
• Notifications: a device push token, if you enable notifications.
• Screen Time / app blocking: app blocking uses Apple’s Screen Time (Family Controls) framework. Your blocked-app selections and app-usage data are processed on your device and are not transmitted to or stored on our servers.

How We Use Your Information

• To provide and operate the App (authentication, running sessions, syncing your data across devices).
• To calculate analytics, streaks, goals, and focus scores.
• To generate AI-powered insights from anonymized, aggregated behavioral data.
• To send transactional emails (email verification and password-reset codes) and the notifications you enable.

We do not sell your personal information and do not use it for advertising.

Third-Party Services

We share the minimum data necessary with service providers that help us run the App:

• Google / Apple — sign-in (only when you choose social sign-in).
• Brevo — sending verification and password-reset emails (receives your email address).
• AI providers (GitHub Models / OpenAI and Google Gemini) — receive anonymized, aggregated session data to generate insights; this data is not used to identify you.
• Expo — delivery of push notifications.
• Render (hosting) and MongoDB Atlas (database) — store and process your data on our behalf.

Data Retention and Deletion

We retain your data while your account is active. You can permanently delete your account and all associated data at any time from within the App (Profile → Delete Account). Deletion removes your account, sessions, statistics, tags, insights, and tokens.

Security

Passwords are stored hashed (bcrypt). Data is transmitted over encrypted connections (HTTPS) and access is protected by authentication tokens.

Children’s Privacy

Anchor is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.