Anchor + Flow is a personal life operating system. The entire product exists to hold information about your life, so we treat privacy as a design requirement, not a legal afterthought. This policy explains what we collect, where it lives, and who can see it — in plain English.
Account information. If you create an account: your email address and a password (stored hashed — we cannot see it).
Your life data. Goals, projects, habits, notes, daily anchors, life scores, and coaching conversations you create in the app. Without an account, this data lives only in your browser on your device. With an account, it also syncs to our database so it follows you across devices.
Coach usage counts. We count how many coaching messages you send each day to enforce plan limits. We store the count, not surveillance. For guests without an account, we store a one-way hashed form of your IP address (never the address itself) to enforce the daily guest limit.
Launch updates. If you join the iPhone-app waitlist on our site, we store your email address for the sole purpose of telling you when the app launches. No marketing drip, and you can be removed anytime by emailing us.
Payment information. Handled entirely by Stripe. We never see or store your card number. We receive your email, your Stripe customer ID, your subscription status, and your renewal or end date, so the app knows you're a Pro member and can show when your plan renews. You can change plans, update your card, or cancel anytime in Settings → Manage subscription.
When you message the coach, your message and relevant app data — your first name, chosen values, life scores, goals, habits, project and task titles, recent captures, waiting items, daily anchor, and the recent conversation — are sent to Anthropic's Claude API to generate the response. Per Anthropic's API terms, this data is not used to train their models. Coaching conversations are stored as part of your synced app data, and are cleared from a device when you sign out.
With Pro, your coach can remember past conversations. After a day you chat with the coach, the app sends that day's messages to Anthropic once to write a short note about what's worth remembering and to update a short profile of what matters to you. The note and profile are stored in your account data, visible and editable in Settings → Coach memory, and used to give later replies continuity. You can pause memory at any time (no new notes, and replies stop using it), forget any single day, or wipe it entirely — after a wipe, past chats are never read again for memory. Memory is included in your data export and deleted with your account. Memory is instructed to leave out crisis and self-harm details, medical diagnoses and medications, and account numbers or passwords.
Quarterly audit (Pro). When you finish a quarterly audit, the app sends summary numbers (days active, anchors held, area scores then and now), the titles of your top wins, pattern titles, and what you chose to keep, change, and drop to Anthropic to write a short look-back. No chat messages are sent for the audit.
Patterns. The patterns across your life areas are calculated on your device. Nothing is sent anywhere to find them.
Photos and files (Pro). When you attach a photo, PDF, or text file to a coach message, it is sent to Anthropic with that message so the coach can read it for that reply. Photos are shrunk on your device before sending. We don’t store attachments: your conversation keeps only a small marker such as “Photo” or the file name. Screenshots can include other people’s messages or details — share thoughtfully. We count how many you send each day to enforce plan limits (the count only, never the file).
Synced data is stored with Supabase (hosted Postgres) with row-level security: the database itself enforces that only your authenticated account can read your rows. The app is served by Cloudflare. We do not run ads, we do not use advertising trackers, and we do not sell or share your data with data brokers — ever.
You can export your full data as a file anytime (Settings → Export backup) — it includes your wins, decisions, audits, and coach memory. You can erase all data on a device (Settings → Reset everything). To permanently delete your account and all synced data, use Settings → Account & sync → Delete account — it removes your data and account immediately, no request needed. Questions: welcome@anchorflowapp.com. Deleting your account also cancels any active Pro subscription first.
Anchor + Flow is not directed at children under 13, and we do not knowingly collect data from them.
If this policy changes materially, we'll note it in the app and update the date above.
Questions about privacy: welcome@anchorflowapp.com