Anchor Privacy Policy

Your privacy matters to us — more than most apps, because of what Anchor is. Anchor is a recovery companion, and the data you put into it describes your recovery journey. We treat that as sensitive personal information, and this policy explains exactly what we collect, how we use it, who touches it, and the rights you have over it. Anchor is operated by ProgramU LLC. Questions: support@programu.app.

Anchor is not a substitute for professional medical care, therapy, or treatment. If you are experiencing a medical emergency or severe withdrawal symptoms, contact a healthcare provider immediately.

Version 8 · Last Updated: October 15, 2026

1. Who This Policy Applies To

This Privacy Policy applies to all users of the Anchor mobile application, whether you are a paid subscriber, a free-tier user, or a trial user.

Anchor is offered in the countries where it is available on the App Store or Google Play. It is not offered in mainland China, Russia, or countries and regions subject to comprehensive United States sanctions (see Section 11). If you live outside the United States, Section 16 (Your Rights by Country) also applies to you.

Anchor is intended for adults 18 years of age and older, or the age of majority where you live if that is higher. We do not knowingly collect personal information from anyone under that age. If you believe a minor has provided us with their information, contact support@programu.app and we will delete it promptly.

2. Information We Collect

Account Data:

• Your email address (from email sign-up, or from Apple/Google when you sign in with them)
• Your display name (the name you give us, or your first name if shared by Apple/Google sign-in)

We do not collect your date of birth. Age (18+, or the age of majority where you live) is confirmed by your attestation at consent.

Region and language:

• Your country, taken from your App Store or Google Play account, else your phone's region, or the country you pick in Profile → Region; your phone's time zone and language setting. We use these only to show the crisis lines for your country, to pick the legal text and rights that apply to you, and to avoid sending notifications in the middle of your night. We never use them to track your location, and never for prices (the store sets those).
• The language you choose for June and Jack (Profile → June & Jack's language), stored in your account.

Recovery Profile Data — this is sensitive data, and we treat it that way (see Section 4):

• The addiction or habits you choose to track (for example: alcohol, porn, drugs, nicotine, gambling, social media, caffeine, sugar, gaming, spending, or a custom entry you define)
• Your quit dates and streak history
• Daily check-ins: mood, craving level, and triggers you log
• Slips you record, and the notes you attach to them
• Wins and milestones you record
• Your daily pledge and whether you marked it held
• Craving-button events ("waves" you name) and how you marked they ended
• Your anchor text (the "why" you write), and any savings goals and weekly-spend figures you enter
• Journal notes and free-text reflections (including entries you write in answer to a companion prompt, stored with the prompt's text)
• Time capsule letters: the text of letters you write to your future self and the delivery date you choose. A letter is stored until you unseal (delete) it or delete your account; on its delivery date it is emailed to the address on your account (via Resend, our email provider — see Section 3) and remains readable in the app.
• Transcripts of your companion AI conversations (voice and text — see Section 14 for exactly how these work)
• Weekly reflections our systems generate for you from your week's conversations
• Feedback you submit (thumbs ratings and optional notes), and reports you send us about something June or Jack said (Profile → Report)
• A record that our automatic crisis check ran on something you wrote or said: when, where in the app, and which kind — never your words (Section 14)

Media in Your Anchor and My journey stays on your device by default. Photos, videos, and written journey updates — including messages you record to yourself — are stored ONLY on your phone unless you are a subscriber with Cloud Backup enabled. On the free tier this means they are lost if you delete the app or lose the device. The written anchor text does sync to your account so your companion can hold it.

Cloud Backup (subscribers, optional and clearly labeled). When enabled, your vault media and journey updates are copied to private cloud storage (Cloudflare R2) tied to your account, accessible only through short-lived signed links our servers issue to you — there is no public access path, and this media is never shared with any AI provider or third party. It is kept for as long as you are subscribed. If you cancel, uploads stop and your backup remains restorable for 90 days (we email you before removal), after which the cloud copy is deleted; media on your phone is never touched. Deleting the app does NOT delete your backup — deleting your ACCOUNT deletes everything immediately, including the cloud backup.

Usage Data:

• Feature activity that is itself your own stored record (check-in history, conversation history, craving-button events)
• In-app preferences and notification settings (stored on your device)
• Streak and pattern numbers computed by our servers from your own logged data
• Product events — a small, fixed list of moments used to understand whether the app works: which onboarding step you reached, that the subscription screen was shown, the first time you open a feature, and that crisis resources were opened

About those product events. They are stored in your own account on our own servers, and they are deleted when you delete your account. They record only counts, yes/no flags, and fixed labels from a short predefined list. They never contain your journal notes, check-in text, anchor text, conversation content, pattern names you typed yourself, or anything you wrote. When we record that crisis resources were opened, we record only that — never which resource, and never anything you said. The app is built so that free text cannot enter this record at all.

We do not run a third-party analytics SDK. These product events go to our own database and are never sent to an analytics company, an advertising network, or any third party.

Error Reports: If the app hits an error, a report may be sent to us containing the error message, a technical stack trace, your user ID, the app version, and platform — never your journal text, check-in content, media, or conversation content. These reports are stored in our database and emailed to our team so we can fix problems (see Resend in Section 3). Reports are limited to a few per day per device.

Home-Screen Widgets: If you add Anchor widgets, your pattern names and streak-start dates are copied into a private on-device container shared between the app and its widgets. This data never leaves your phone and is blanked when you sign out or delete your account.

Device Information: We collect app version and operating system platform at consent time for audit purposes. We do NOT collect: device model, IP-address-based location profiles, advertising identifiers, precise location, or device fingerprinting data.

Subscription and Payment Information: Anchor Premium ($19.99/month or $149.99/year) is processed by Apple (iOS) or Google (Android). They handle your payment details per their own privacy policies; ProgramU LLC receives only your subscription status and a transaction identifier — never your card details. We use RevenueCat to manage subscriptions across both stores; it receives your user ID and subscription state only.

Your Person (accountability partner, subscribers, optional and entirely user-initiated). If you choose to invite someone, you give us their name and email address so we can send them a short weekly note about how you are doing. We store that name and email on our servers for as long as the invitation is active, and use them only to send that note — never for marketing, and never shared with anyone else. YOU choose which patterns are shared and at what level of detail, and you can pause or stop sending at any time; they are not notified when you do. They receive only what you chose to share — never your journal, notes, conversations, or media. Every note includes a one-click unsubscribe, and if they unsubscribe or you remove them, we delete their address. You are responsible for having their permission before entering their email.

Crisis resources, tracking, breathwork, and the audio library are free and never gated behind a subscription. Using them creates no additional data collection beyond the records and product events described above — and for crisis resources that means a single count that they were opened, never which one you tapped and never anything you said or wrote.

3. Third-Party Services (Sub-Processors)

We use the following sub-processors to operate Anchor. Each processes only the data necessary for its function:

• Google Firebase: Authentication, Firestore database, and Cloud Functions. Stores your account data, recovery profile, check-ins, journal notes, and conversation transcripts. Data is encrypted at rest and in transit.

• Inworld AI: Powers all companion conversations — speech-to-text and text-to-speech for voice, and the language model (reached through Inworld's model router) that generates replies for both voice and text. Background jobs (conversation titles, weekly reflections, the companion memory, and the post-conversation safety review) and our any-language crisis check use the same router. The models reached through it are OpenAI's GPT-6 or Google's Gemini for June and Jack's replies and the background jobs, and Google's Gemini with Anthropic's Claude as a fallback for the crisis check; OpenAI, Google and Anthropic process that text only to generate the reply or the safety verdict, under their API terms, which do not allow training on it. Your voice audio is processed in transit and is not stored by ProgramU LLC. See Section 14 for the full data flow.

• Cloudflare R2: Object storage. Holds our shared, pregenerated audio library (the same tracks for every user — no personal data), and, for subscribers who enable Cloud Backup, a private per-account copy of your vault media reachable only through short-lived signed links our servers issue (see Section 2 — Cloud Backup).

• Resend: Email delivery. Used to send error-report alerts to our own team, and for service email we may send you. Resend processes the email content it delivers.

• Expo (EAS Update): Delivers app updates. Your device requests updates with the app version and platform — no personal data.

• Sentry: Crash reporting. Reports are scrubbed before transmission — we strip your email, username, and IP address, keep only an opaque user ID, and drop console and input breadcrumbs, so your journal text, check-in content, and conversation content are never included.

• RevenueCat: Unified subscription management across Apple and Google. Receives your user ID and subscription state only — never payment card details.

• Apple App Store / Google Play: In-app purchase processing for subscriptions. Each handles your payment details per their own privacy policies.

What we do NOT send to sub-processors: we do not send your email address to Inworld beyond what is described above (your first name and recovery context are included in conversation prompts so your companion knows you), and we do not use any advertising network, tracking pixel, or third-party analytics SDK that profiles you across other apps or websites.

4. Sensitive Data

The fact that you are on a recovery journey — and everything you log about it — is sensitive personal information. What you track in Anchor could affect how an employer, insurer, landlord, or family member sees you if it were disclosed. We designed Anchor with that risk in front of us, and we make these commitments plainly:

• We will never sell your data. Not to data brokers, not to advertisers, not to anyone.
• We will never show you ads or share your data with advertising networks.
• We will never share your data with employers or insurers. No exceptions, no "partner programs."
• We delete your data on request. See Section 8.

Your recovery data exists for one purpose: to support your own recovery journey inside the app. That is the only use we put it to.

Your explicit consent for health-related information. The patterns you track, your check-ins, slips, cravings, and what you say to June and Jack are health-related information. At consent you give us your explicit, separate agreement to collect and use it to run Anchor and, with your choices, to personalize it, and to store and process it in the United States. You can withdraw that consent at any time by deleting the content, turning off the sharing toggles in Profile → For June & Jack, or deleting your account (Section 8). Without it, Anchor cannot work, because the app is the record.

Washington and Nevada residents. Our separate Consumer Health Data Privacy Policy (programu.app/legal/anchor/consumer-health-data, also in the app under Profile) covers the consumer health data we collect about people in Washington and Nevada, who receives it, and your rights, including how to appeal.

5. How AI Data Processing Works

Anchor uses AI in two separate ways, and it matters which is which:

Live conversations (voice and text) run through Inworld's realtime agent API — Section 14 covers these in detail.

Background processing uses the same language-model router (Inworld). After a conversation ends, and on a weekly schedule, our servers send relevant slices of your data (a conversation transcript, or your week's conversations) to produce:

• Short titles and one-line descriptions for your conversation history
• A weekly reflection — a few warm sentences drawn from your week's conversations
• A post-conversation safety review (see Section 14)
• The any-language crisis check: a model reads one message, entry, or call transcript and returns only a verdict (none / soft / hard, and the category). Nothing is stored from it except a record that it ran (Section 14).

Pattern statistics shown in the app (your hardest window, top triggers, craving trends) are computed directly by our own code from your logged data — no AI model involved.

These outputs are saved back to your account and are deleted with it.

Numbers are computed, not generated. Any streak count, day count, or pattern statistic your companion speaks or displays is computed by our servers from your own logged data. The AI model never invents these numbers.

No training on your data. Your conversations, journals, and recovery data are not used to train any AI model — ours or any third party's.

AI-generated content can contain errors. Your companion is a support tool, not an authority — use your own judgment, and lean on the humans in your corner: sponsor, therapist, meetings, and the people who know you.

6. How We Use Your Information

We use your information to:

• Provide the core Anchor service: your tracker, streaks, check-ins, audio library, and companion conversations
• Personalize your experience: your companion and generated audio reflect what you have shared about your own triggers and goals
• Compute your streaks, milestones, and pattern insights from your own data
• Process subscriptions (via Apple and Google)
• Send notifications you have opted into
• Catch and diagnose errors (via our error-report pipeline; PII-limited as described in Section 2)
• Comply with legal obligations and prevent fraud or abuse

We do NOT use your information to:

• Show you ads or sell ad space
• Train AI models
• Sell, rent, or trade your personal data
• Build advertising profiles of you
• Track you across other apps or websites
• Report on you to any employer, insurer, or third party

Legal disclosures. We may disclose information where required by law or valid legal process; to enforce our Terms of Service; to respond to a payment dispute with records of the subscription and your acceptance of our terms; or to protect the rights, property, or safety of ProgramU LLC, our users, or the public. This describes legally compelled or defensive disclosure only — it does not change the commitments in Section 4: we never sell your data, never share it with advertisers, and never voluntarily report on you to any employer or insurer.

7. Data Security

Your data is stored in Google Firebase and Cloudflare R2, which employ industry-standard security practices:

• TLS encryption for all data in transit between your device and our servers
• Encryption at rest for stored data
• Firebase Security Rules restricting access to your authenticated account and authorized system processes

We minimize logging of personal content: your journal text, check-in content, and conversation content are never written to operational logs or crash reports.

No system is perfectly secure, and we cannot guarantee absolute security. But we apply modern best practices and continuously work to improve our safeguards — because of what this data is.

8. Your Rights

If you live outside the United States, Section 16 lists the additional rights the law where you live gives you. Everything below applies to everyone.

Access and Correction:

• Update your profile and recovery settings at any time within the app
• Request a copy of your personal data by emailing support@programu.app

Deletion: You can permanently delete your account and all associated data at any time, in the app (Profile → Delete account) or by emailing support@programu.app. Account deletion permanently wipes your recovery profile, check-in and slip history, journal notes, conversation transcripts, reflections, feedback, and authentication account. Media in Your Anchor lives only on your device — deleting the app removes it. Most deletions complete within 24 hours; in rare cases, full deletion may take up to 30 days.

Data Portability: The app includes a one-tap export (Profile → Export my data) that hands you your complete tracking record as a JSON file. You can also request a copy by email.

Right to Object: You may object to certain processing activities by contacting support@programu.app.

9. Data Retention

Your data is retained for as long as your account remains active. We do not automatically delete inactive accounts — your history remains yours until you delete it.

Slips and lifetime history. Anchor is built so that your lifetime recovery history is preserved, never zeroed out — a slip resets a streak counter, not your record. That history exists for you: it powers your own pattern insights and your own sense of how far you have come. It is your data. You can delete individual entries on request, and all of it is deleted with your account.

What gets deleted when you delete your account:

• Firebase Auth account, your user document, and all subcollections (recovery profile, check-ins, slips, wins, pledges, waves, journals, conversation transcripts, reflections, the companion memory and the list of what June and Jack remember, time-capsule letters, Your Person invitations, feedback and reports, region and language settings)
• Cloud Backup media (if enabled) in Cloudflare R2
• RevenueCat subscriber record
• On-device data (widget container, preferences) is blanked; Your Anchor media is removed when you delete the app

What we keep after deletion: a minimal deletion record (your account's internal ID and the dates deletion was requested and completed — no content), kept so a deleted account is never billed or recreated; crisis-check records, which are tied to a one-way hash of your user ID and contain none of your words; and emails you sent to our support inbox, kept separately so we can answer them (email support@programu.app to have them deleted).

After deletion, data may persist briefly at sub-processors under their own retention policies (for example: Firestore automatic backups for up to ~35 days, Google Cloud operational logs ~30 days, Apple/Google transaction history at the account level, and AI-provider request data retained short-term for abuse detection per their terms). None of this retained data is used to contact you or re-identify you after deletion.

10. Children's Privacy

Anchor is intended for adults 18 years of age and older, or the age of majority where you live if that is higher. Age is confirmed by your attestation during onboarding consent.

ProgramU LLC does not knowingly collect personal information from anyone under that age. If we become aware that we have, we will delete that information immediately. If you are a parent or guardian who believes we have collected data from a minor, contact support@programu.app.

11. Where We Operate and International Transfers

ProgramU LLC is organized in the State of Wyoming, United States. Anchor is offered in the countries where it is available on the App Store or Google Play. It is not offered in mainland China, Russia, or countries and regions subject to comprehensive United States sanctions.

Where your information is stored. We store your information in the United States (Google Cloud, region us-central1). Our sub-processors (Section 3) process it in the United States and in other countries where they operate. If you live outside the United States, your personal information is transferred to the United States, where privacy laws may differ from those where you live, and where it may be accessible to courts, law enforcement, and national security authorities under United States law.

How we protect transfers. We transfer your information only as needed to provide Anchor. Our sub-processors are bound by written agreements that require them to protect it to a standard comparable to this Policy. Where the law of your country relies on consent for transfers abroad, we ask for your consent in the app (the health-related information box at consent). For people in Quebec, we assessed these transfers before making them, as Quebec law requires. For people in the European Economic Area, Switzerland, and the United Kingdom, we rely on standard contractual clauses with our sub-processors and on your explicit consent for health-related information.

We do not sell your personal information.

Crisis resources by country. The Get Help screen shows verified crisis lines for your country first (currently the United States, Canada, the United Kingdom, Ireland, Australia, New Zealand, Malaysia, Singapore, India, South Africa, and the Philippines), and findahelpline.com with your local emergency number everywhere else. June and Jack name the same lines. Our Trust & Safety page lists them in full.

12. California and Other State Residents

Washington and Nevada. Our Consumer Health Data Privacy Policy (programu.app/legal/anchor/consumer-health-data; in the app under Profile) is the separate notice those states require. It explains the consumer health data we collect, who receives it, and how to make a request or appeal.

Residents of certain U.S. states have additional rights under applicable privacy laws, including:

• The right to know what personal information we collect
• The right to delete personal information
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information (Anchor does not sell or share personal information)
• The right to limit the use of sensitive personal information
• The right to non-discrimination for exercising your privacy rights

To exercise any of these rights, email support@programu.app. We will respond within the timeframe required by applicable law (typically 45 days).

ProgramU LLC does not sell or share personal information for cross-context behavioral advertising.

13. Changes to This Policy

We may revise this Privacy Policy from time to time. When we make material changes, we will:

1. Post the updated policy with a new "Last Updated" date
2. Notify you within the app
3. Require you to review and accept the updated policy before continuing to use Anchor

For minor changes (typo fixes, formatting), we may update the policy without requiring re-acceptance.

14. Companion AI Conversations (Voice and Text) — Data Flow

Your companion is an AI, available 24/7, built to be there when cravings hit. This section describes exactly how conversation data moves.

Live voice data flow. When you talk to your companion by voice, the conversation runs on Inworld's realtime agent API in three steps, in real time:

1. Your spoken audio is transmitted to Inworld and transcribed to text (speech-to-text)
2. The transcribed text, with your conversation context, goes to a fast language model reached through Inworld's model router, which generates the reply
3. The reply is synthesized back into speech (text-to-speech) and played to you

In text mode, only step 2 applies.

Your voice audio exists in transit only. It is processed to be transcribed and is not stored by ProgramU LLC. It is NOT used to create a voiceprint, and it is NOT used to train any model. Inworld processes conversation data under its own privacy policy.

Background jobs are separate from the live loop. Conversation titles, weekly reflections, and the post-conversation safety review run after the fact through the same language-model router (Inworld) described above — never inside your real-time conversation (Section 5).

Computed numbers. Any streak or pattern figure your companion speaks is computed by our servers from your logged data, never generated by the model.

Transcript storage. After each conversation, a transcript (the text of what you and the companion said, with timestamps) is stored in your account (voice calls under companionCalls, text threads under companionChats), so you can revisit conversations in your history. Transcripts are your data: you can delete them, and they are wiped when you delete your account.

What June and Jack can see. Each conversation includes a context block built by our servers from your own data, so your companion knows you. It can include: your first name; your anchor text; the patterns you track with their computed streaks and milestones; your daily pledge; recent check-ins, slips, urges, and wins; your computed pattern insights (hardest window, top trigger); the cards you filled out in Profile → For June & Jack (people in your corner, when it's hardest, what helps, anything else you added); one short carry-over note from your previous conversation; a consolidated companion memory — a short summary our systems periodically distill from your conversations, check-ins, and notes so your companion's understanding of you deepens over time (stored in your account, readable by you on request, deleted with your account); a short list of things June and Jack remember about you — lasting details picked from your conversations after they end (people in your life, what makes it hard, what helps, your wins), plus anything you add yourself, shown in full on the For June & Jack screen, where you can remove any item or all of them; nothing that touches self-harm, crisis, substance amounts or medical details is kept on it. The "Let them remember" switch on that screen turns off the list, the summary and the carry-over note; and — if the "journal prompts to memory" toggle is on — journal entries you wrote (in answer to a companion prompt or on your own). The rule the app is built on: nothing reaches June and Jack that is not shown to you on the For June & Jack screen, and turning off the journal toggle there excludes your journal entries.

Safety review and crisis alerts. Conversations run through crisis detection on your device in real time (English patterns), and through an any-language AI check on our servers: every text message, every call as it happens (June and Jack can flag a crisis in any language), the whole call afterwards, and what you write in the journal, a check-in, your anchor words, a time-capsule letter, or a slip note before it is saved. If a conversation or an entry indicates a crisis, the app routes you to the crisis lines for your country immediately, a reply is not generated, and an entry is not saved (your words stay in the box). A minimal internal alert (a one-way hash of your user ID and a category only — never the content of what you said) may notify our team so we can review that our safety systems worked, and we keep a record that the check ran (when, where in the app, and which kind) to count how often the protocol runs and, where the law requires, to report those counts — never your words. Our Trust & Safety page publishes the full protocol.

June and Jack are AI, and the app says so inside every conversation. Every chat and every call shows a line that they are AI companions, not people, and can be wrong.

Language. You can choose the language June and Jack use (Profile → June & Jack's language). The rest of the app stays in English. Your choice is stored in your account and read on every message and call.

Feedback with crisis content. If a feedback note you write reads as a crisis, the app stops treating it as product feedback, shows you crisis resources, and flags it for priority review.

Consent flow. Anchor's onboarding consent covers the AI nature of conversations, data handling, safe listening, and the not-medical-care acknowledgment. Your acceptance (timestamp + version) is stored at users/{your-uid}/consent/v1. You will be asked to re-accept when these documents materially change.

Your companion works alongside your existing support — sponsor, therapist, meetings — it does not replace them. Anchor is not a substitute for professional medical care, therapy, or treatment. If you are experiencing a medical emergency or severe withdrawal symptoms, contact a healthcare provider immediately.

15. Contact Us

For privacy questions, data requests, or to exercise your rights:

• Privacy, data requests, safety concerns, and general support: support@programu.app

Privacy Officer: Zachary Fleshman, Founder — support@programu.app. This person is our privacy officer in Canada, Australia, and New Zealand; the person in charge of the protection of personal information in Quebec; our data protection officer in Singapore and the Philippines; our grievance officer in India; and our information officer in South Africa.

Mailing address: ProgramU LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. Phone: +1 615-669-4644.

16. Your Rights by Country

Everyone outside the United States. Wherever you live, you can ask us for a copy of your personal information, correct it, delete it, and withdraw any consent you gave, and you can complain to your data protection authority. The law where you live may give you more; the country sections below cover the countries whose laws we have mapped in detail. To use any of these rights, email support@programu.app. We would appreciate the chance to put things right first.

Canada. You can access and correct your personal information and withdraw your consent. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Quebec. You can also ask for the computerized personal information you gave us in a structured, commonly used technological format. We use your country only for the purposes in Section 2, never to track your location. The French version of this Policy is offered to you first. You can complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

Australia. You can access and correct your personal information under the Australian Privacy Principles. Your information is disclosed to recipients in the United States and in the other countries where our sub-processors operate (Section 3). You can complain to us first, and then to the Office of the Australian Information Commissioner (oaic.gov.au).

New Zealand. You can access and correct your personal information under the Privacy Act 2020, and we answer within 20 working days. If we collect information about you from someone else (for example, your subscription status from Apple or Google), we will make sure you know. You can complain to the Office of the Privacy Commissioner (privacy.org.nz).

Malaysia. You can access your personal data (we answer within 21 days) and correct it, withdraw your consent, ask us to stop processing that is likely to cause you damage or distress, and ask us to stop using your data for direct marketing. You can complain to the Personal Data Protection Commissioner (pdp.gov.my).

Singapore. You can access your personal data and ask how it has been used or disclosed in the past year, correct it, and withdraw your consent. Our data protection officer is listed in Section 15. You can complain to the Personal Data Protection Commission (pdpc.gov.sg).

India. You can ask for a summary of your personal data and how we process it; have it corrected, completed, updated, or erased; withdraw your consent as easily as you gave it; and nominate someone to exercise your rights if you die or cannot act. You can ask for this Policy in English or in any language listed in the Eighth Schedule to the Constitution of India. Our grievance officer (Section 15) acknowledges complaints within 48 hours and resolves them within one month. After using our grievance process, you can complain to the Data Protection Board of India.

South Africa. You can access, correct, and delete your personal information, object to its processing, withdraw your consent, and refuse direct marketing. You can complain to the Information Regulator (inforegulator.org.za).

Philippines. You have the rights to be informed, to access, to object, to correct, to erasure or blocking, to data portability, and to damages. You can complain to the National Privacy Commission (privacy.gov.ph).

European Economic Area, Switzerland, and the United Kingdom. ProgramU LLC is the controller of your personal data. We use it on these legal bases: to provide the Service you signed up for (contract); with your explicit consent, for the health-related information you choose to share and for personalization (you can withdraw consent at any time); for our legitimate interests in keeping the Service safe, secure, and working, and in improving it; and to comply with the law. You can access, correct, and delete your personal data, restrict or object to its processing, receive it in a portable format, and withdraw consent. You can complain to your national data protection authority (in the UK, the Information Commissioner's Office, ico.org.uk). We do not have a representative in the EEA or the UK at this time; contact us directly at support@programu.app.

Data breaches. If a breach of your personal information puts you at real risk of significant harm, we will tell you, and the regulators your law requires, within the time it requires.

By continuing to use Anchor, you acknowledge that you have read and understood this Privacy Policy.

Thank you for trusting us with something this personal. We take that trust seriously. — The Anchor Team