# Privacy Policy

**Anky, Inc.** · Effective June 7, 2026

> **The short version:** Anky is local-first. Your writing stays on your device unless you choose to export it, back it up, contact support, or ask Anky for a reflection. When you ask for a reflection, your `.anky` writing is sent to Anky’s mirror service and AI providers so a reflection can be generated. We do not sell your data, use it for advertising, or use your writing to train our own models.

---

## 1. Who We Are

Anky is operated by **Anky, Inc.**, a Delaware corporation.

Contact: **[support@anky.app](mailto:support@anky.app)**

This Privacy Policy explains how Anky handles information when you use the Anky mobile app, website, mirror service, purchases, support, and related services.

---

## 2. What Anky Is

Anky is a local-first writing and reflection app.

The core artifact is the `.anky` file: a forward-only writing session created under constraint. The app lets you write, save, revisit, export, import, delete, and optionally reflect on that writing.

Anky is not a therapist, medical service, crisis service, financial advisor, legal advisor, or spiritual authority.

---

## 3. What Stays On Your Device By Default

The following data is stored locally on your device unless you choose to export it, back it up, recover it elsewhere, contact support, or request a reflection:

* Your `.anky` writing files
* Active writing drafts
* Reconstructed readable writing
* Local reflections returned by Anky
* Session history and Map data
* Local app settings
* Daily reminder settings
* Local Anky identity information
* Recovery phrase/private key stored in secure device storage
* Local credit balance cache
* Local export/import files you create

Writing, saving, revealing, copying, browsing Map, and viewing local history do not require sending your writing to Anky’s server.

---

## 4. What Leaves Your Device

Data may leave your device in these situations:

### Asking Anky for a reflection

When you tap **Ask Anky**, the app sends the exact `.anky` file bytes to Anky’s mirror service.

The mirror service may:

* Verify the request
* Verify the `.anky` format and hash
* Reconstruct readable text from the `.anky`
* Send the reconstructed writing and prompt to AI service providers
* Receive the generated reflection
* Return the reflection to your device
* Spend or check reflection credits

The returned reflection is stored locally on your device.

### Purchases and credits

If you buy reflection credits, purchases are processed by Apple and managed through RevenueCat. We do not receive or store your credit card number.

We may receive purchase-related records, credit balances, transaction identifiers, product identifiers, entitlement information, app user identifiers, and related metadata needed to grant and manage reflection credits.

### Local identity and request verification

Anky creates a local account/identity for your device. When you request a reflection or credit operation, the app may send your Anky account address, request signature, app version, platform, and related verification metadata.

Your recovery phrase/private key is not sent to Anky.

### Device trial and abuse prevention

For free trials, abuse prevention, fraud prevention, or request verification, the app or mirror service may use Apple DeviceCheck, app attestation, request signatures, timestamps, hashes, app version, platform, and similar technical metadata.

### iCloud, Keychain, backup, export, and import

If you enable backup, recovery, or export features, your writing, reflections, identity recovery information, or related files may be stored using Apple services such as iCloud, iCloud Keychain, device backups, or the destination you choose through the share sheet or file picker.

Anky cannot control the privacy of files after you export or share them.

### Support

If you contact support, you choose what to send. Support messages may include your email address, Anky account address, platform, app version, and any text, screenshots, files, or context you include.

---

## 5. What We Do Not Collect

Anky does not require:

* Your legal name
* Your phone number
* Your contacts
* Your precise location
* Your camera
* Your microphone
* Your photos
* Your social accounts
* A traditional username/password login

Anky does not sell personal data.

Anky does not use your writing for advertising.

Anky does not use your writing to train Anky-owned AI models.

---

## 6. Third-Party Services

Anky may use the following third-party services:

* **Apple** — App Store purchases, refunds, device services, iCloud, iCloud Keychain, device backup, DeviceCheck, notifications, and platform services.
* **RevenueCat** — purchase management, credit balances, entitlements, and transaction-related records.
* **OpenRouter** — routing reflection requests to AI model providers.
* **AI model providers** — generating reflections from the text you choose to send.
* **Cloud hosting / infrastructure providers** — operating Anky’s mirror service, logs, security, and reliability.
* **Email/support providers** — receiving and responding to support requests.

These providers process data according to their own terms and privacy policies.

---

## 7. AI Processing

When you ask for a reflection, your writing is processed by AI systems.

AI-generated reflections may be inaccurate, incomplete, unexpected, emotionally intense, or not useful. Reflections are generated automatically and should not be treated as professional advice.

We design Anky’s mirror service to avoid permanently storing raw `.anky` writing, reconstructed writing, or reflection text unless needed for a user-requested support/debugging flow, security, abuse prevention, legal compliance, or another clearly stated purpose.

AI providers may process requests according to their own data-handling policies. We try to use privacy-protective settings where available, but we cannot promise that every downstream provider has identical retention practices.

---

## 8. Operational Metadata

To operate Anky, we may collect or process limited metadata, such as:

* Anky account address or app user identifier
* Request timestamps
* Request hashes
* App version
* Platform
* Credit balance and credit transaction records
* Purchase product identifiers
* Error states
* Provider usage metadata
* Security and abuse-prevention signals
* Support request metadata

We use this data to provide reflections, manage credits, prevent abuse, debug issues, respond to support, comply with law, and operate the service.

---

## 9. Payments

Payments are handled by Apple through the App Store and managed with RevenueCat.

We do not receive your full payment card details.

Refunds, billing disputes, and purchase history are handled according to Apple’s policies.

---

## 10. Blockchain, Tokens, and Local Identity

Anky may display or use blockchain-compatible account addresses or token references.

Your local Anky identity may be used to sign requests or identify your credit/account state. Your recovery phrase/private key remains on your device unless you export, reveal, back up, or otherwise share it.

Never share your recovery phrase. If you lose it, Anky may not be able to recover your identity.

Any blockchain address, transaction, token, or contract information may be public by nature. Anky cannot delete information written to a public blockchain.

---

## 11. Data Retention

Local data remains on your device until you delete it, delete the app, reset the app, or remove backups.

Reflection-related operational metadata may be retained as long as needed to operate the service, manage credits, prevent fraud or abuse, comply with legal obligations, resolve disputes, and maintain security.

Purchase records may be retained by Apple, RevenueCat, and Anky as needed for billing, accounting, fraud prevention, tax, legal, and support purposes.

Support emails may be retained as long as needed to respond to you, keep records, and protect Anky.

---

## 12. Deletion

You can delete local writing, local reflections, local identity, and local app data from inside the app where deletion tools are available, or by deleting the app from your device.

Deleting the app may not delete:

* Files you exported or shared
* iCloud backups or device backups controlled by Apple settings
* App Store purchase records
* RevenueCat purchase records
* Support emails you sent
* Backend metadata needed for security, credit accounting, fraud prevention, legal compliance, or dispute resolution
* Public blockchain data

To request deletion of data Anky controls, contact **[support@anky.app](mailto:support@anky.app)**.

---

## 13. Children

Anky is not intended for children under 13.

If you are under 18, use Anky only with permission from a parent or guardian.

We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact **[support@anky.app](mailto:support@anky.app)**.

---

## 14. Your Rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain uses of your personal data.

Because Anky is local-first, much of your data is only on your device and can be managed by you directly.

For requests about data Anky controls, contact **[support@anky.app](mailto:support@anky.app)**.

---

## 15. Security

We use reasonable technical and organizational measures to protect data we process.

No system is perfectly secure. You are responsible for protecting your device, passcode, recovery phrase, exported files, iCloud account, and any place where you store or share your writing.

---

## 16. International Users

Anky, Inc. is based in the United States. If you use Anky from outside the United States, your data may be processed in the United States or other countries where our service providers operate.

---

## 17. Changes

We may update this Privacy Policy from time to time.

When we do, we will update the effective date. Continued use of Anky after changes means you accept the updated policy.

---

## 18. Contact

**Anky, Inc.**
Contact: **[support@anky.app](mailto:support@anky.app)**
