Privacy Policy
How Anchor handles your data
Overview
Anchor is designed to protect your privacy by default. It does not collect, transmit, or store any personal data on external servers. This policy explains what data Anchor handles and how it is protected.
What We Collect
Nothing. Anchor does not collect personal data. There are no analytics, no tracking, and no telemetry. Your journal entries, mood data, calendar events, and settings exist only on your device.
On-Device Encryption
All data is stored locally using an encrypted SQLCipher database (AES-256). Your database is encrypted at rest — even if someone gains physical access to the device's storage, your journal entries cannot be read.
Your PIN is salted and hashed using SHA-256. It is never stored in plain text. The PIN hash, salt, and biometric preferences are kept in your device's secure keychain (iOS Keychain / Android EncryptedSharedPreferences).
Backups
When you create a backup, it is encrypted with AES-256 using a password you choose. Anchor cannot read your backup — only you can, with your password.
Cloud backups (iCloud, Google Drive) are encrypted on your device before upload. The cloud provider receives only encrypted data and cannot read your entries.
Screenshot Protection
Anchor includes built-in screenshot protection that blocks screen capture and screen recording. This is enabled by default and can be toggled in Settings. On Android, this uses the system FLAG_SECURE flag. On iOS, it prevents capture and blurs the app in the app switcher.
Advertising
Anchor uses Google AdMob to display ads. AdMob may collect device identifiers and usage data as described in Google's privacy policy.
Ads can be removed with a one-time purchase. Anchor itself sends no personal data to AdMob beyond what the SDK collects automatically.
Permissions
Anchor requests only the permissions it needs:
Biometrics — for app lock (Face ID / fingerprint).
Camera — for scanning QR codes during device-to-device sync.
Notifications — for journal reminders.
File access — for importing and exporting backups.
No permission is used for tracking or data collection.
Third-Party Services
Anchor uses only essential third-party services: Google AdMob for advertising and Google Drive / iCloud for optional cloud backups. No personal data is shared with any other third party.
This website uses Umami, a privacy-focused, open-source analytics tool. Umami does not use cookies, does not collect personal data, and does not track you across sites.
Changes
If this privacy policy changes in the future, the updated version will be made available within the app and on this website.
Contact
If you have questions about privacy or data handling, you can contact:
Effective February 2025