Anchor Consumer Health Data Privacy Policy

This policy explains how ProgramU LLC ("ProgramU", "we") handles consumer health data about people in Washington and Nevada who use Anchor. Our full Privacy Policy is at programu.app/legal/anchor/privacy-policy.

Version 2 · Last Updated: October 15, 2026

1. Consumer Health Data We Collect

"Consumer health data" is information that identifies or can reasonably be linked to you and describes your physical or mental health. In Anchor, that can include:

• The addictions or habits you choose to track (for example alcohol, nicotine, gambling, or a pattern you name yourself), your quit dates, streaks, and milestones.
• What you choose to write or say about how you feel and what you are working through: daily check-ins (mood, craving level, triggers, notes), slips and the notes on them, wins, your daily pledge, the craving-button moments you name, your anchor words, journal entries (including answers to a prompt card), and time-capsule letters.
• Your conversations with June and Jack, our AI companions: text messages, voice-call transcripts, the short titles and weekly reflections made from them, the consolidated companion memory our systems distill from them, and the short list of things June and Jack remember about you (which you can see, add to and clear on the For June & Jack screen).
• A record that our automatic crisis check ran on something you wrote or said (when, where in the app, and which kind), never your words.
• Savings goals and the weekly-spend figures you enter.

We do not collect diagnoses, prescriptions, test results, readings from health devices, or precise location, and we do not track your location near health care facilities. Photos and videos in Your Anchor stay on your phone unless you turn on Cloud Backup.

2. Why We Collect It and How We Use It

We use consumer health data only to provide what you ask for:

• to run your tracker, streaks, check-ins, calendar, and pattern insights;
• to hold your conversations with June and Jack and remember them for continuity, so they know your story;
• to keep you safe: our crisis check reads your text and calls to spot a crisis, and routes you to real help;
• to send the Sunday note to the people you chose under Your Person, with only what you decided to share;
• to answer you when you contact support, and to keep the service secure and working.

We do not sell consumer health data, use it for advertising, or use it to train AI models.

3. Where It Comes From

• From you: what you type, say, or record in the app.
• From our own processing of what you give us: computed streaks and insights, conversation titles, weekly reflections, the companion memory, and crisis-check records.

4. What We Share and With Whom

We share consumer health data only with the service providers (processors) that run Anchor for us, under contracts that let them use it only to provide their service to us:

• AI providers: Inworld AI (speech-to-text, voice synthesis, and model routing for all companion conversations and background jobs) and, reached through Inworld, OpenAI (GPT-6) or Google (Gemini) for the live replies, Google (Gemini) for the crisis check, and Anthropic (Claude, the crisis-check backup). They receive the text or audio a feature needs, such as your message to June and the recovery facts that let her respond.
• Cloud hosting and storage: Google Cloud and Firebase (your account data, tracker, journals, and conversations) and Cloudflare (your Cloud Backup media, if you turn it on).
• Email: Resend delivers your time-capsule letters and the Your Person notes.

We have no affiliates that receive consumer health data, and we do not share it with advertisers or data brokers. Our error-reporting tools (Sentry, and our own error reports) never receive what you write or say. Payment providers (Apple, Google, and RevenueCat) do not receive consumer health data.

Third parties do not collect consumer health data about your activity over time and across other websites or apps through Anchor. Anchor runs no third-party analytics; our own product events never contain your text.

5. Your Rights

You can:

• confirm whether we collect or share your consumer health data, get a copy of it, and get a list of every service provider that received it, with a way to contact each one;
• withdraw your consent: delete the content, turn off the journal-sharing toggle in Profile → For June & Jack, or delete your account;
• have your consumer health data deleted, including from our service providers. Delete your account in the app (Profile → Delete account), on the website (programu.app/delete-account), or ask us by email. Backups are overwritten within 35 days.

To make a request, email support@programu.app with the subject "Consumer health data request". We may need to confirm it is you. We answer within 45 days; if we need more time, we tell you why within those 45 days and take at most 45 more. Requests are free, up to twice a year. We never treat you differently for using these rights.

6. Appeals

If we decline your request, you can appeal by replying to our decision email with "Appeal" within 30 days. We answer your appeal in writing within 45 days and explain our reasons. If we deny it, you can complain to your Attorney General: Washington at atg.wa.gov/file-complaint, or Nevada at ag.nv.gov.

7. Changes and Contact

If we change this policy in a material way, we tell you in the app or by email before the change applies, and update the date above. Questions: support@programu.app. ProgramU LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States.