Anji – Privacy Policy

1. Introduction

Welcome to Anji, a mental-wellness and spiritual companion app created by Anji (“we”, “us”, “our”).

Your privacy is deeply important to us. Because Anji supports emotional, spiritual, and mental well-being, we treat your data with the highest level of confidentiality, security, and ethical responsibility.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Anji app or visit our website.

By using Anji, you agree to the practices described below.

2. Who We Are

We comply with the UK GDPR, EU GDPR, and applicable global privacy laws.

3. Data We Collect

We only collect the information necessary to provide our services and support your experience.

3.1. Personal Identification Data

If you create an account, we may collect:

• Email address
• Username
• Phone number
• Date of birth
• Gender
• Account identifiers from Apple or Google

3.2. Sensitive / Special Category Data

Due to the nature of the app, we may collect sensitive information you choose to share, including:

• Mood logs
• Emotional check-ins
• Journal or reflection entries
• Chat conversations with the AI
• Spiritual preferences (faith-based or secular modes)
• Mental health-related statements
• Any faith-oriented content you choose to generate

All sensitive data is encrypted in transit and at rest.

3.3. Device & Technical Data

We may collect anonymised device and technical information, including:

• Device type and model
• Operating system version
• App version
• Crash logs
• IP address (anonymised where applicable)
• Usage statistics

4. How We Use Your Data

We use your data to:

• Provide the core Anji app services
• Display personalised content and experiences
• Enable account creation, login, and authentication
• Process in-app purchases through Apple and Google
• Improve app performance and feature quality
• Maintain security and prevent misuse
• Offer customer support
• Provide AI-generated wellbeing guidance

We do not use your information for advertising.

We do not sell or rent your data.

5. Legal Bases for Processing (GDPR)

We process personal data based on:

• Consent: mood logs, chat content, spiritual preferences
• Contractual necessity: creating and maintaining your account
• Legitimate interests: app security, service improvements
• Legal obligations: compliance with applicable laws and authorities

You may withdraw consent at any time via app settings or by contacting us.

6. Third-Party Services & Data Sharing

We only share data with third-party processors necessary to operate the app.

6.1. Infrastructure & App Services

We use the following services to support Anji:

• Firebase (authentication, analytics, crash reports)
• Convex (data handling)
• RevenueCat (subscriptions and in-app purchase management)
• Apple App Store and Google Play Store (payment processing)
• OpenRouter (AI processing)

6.2. AI Data Handling

When you interact with the AI:

• Messages are securely sent to OpenRouter for AI responses.
• OpenRouter does not store or use your data for training.
• Personal identifiers are removed where possible before sending data to AI models.

6.3. Payments

We do not store any payment information. All payments are processed solely by:

• Apple App Store
• Google Play Store

6.4. Analytics

We use anonymised analytics only, which means:

• No personally identifiable data is included.
• No tracking for advertising purposes.
• Analytics cannot be reasonably linked back to you.

We do not share your data with advertisers, marketers, or data brokers.

7. International Data Transfers

Your data may be processed on servers located in the UK, EU, and US.

When data leaves the UK/EU, we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs)
• UK Addendum where required
• Only working with providers who meet strong data protection standards

8. Data Storage & Security

We take the following measures to protect your data:

• Encryption at rest
• Encryption during transmission
• Strict internal access controls
• Only the CTO can access server systems, and cannot view personal data
• Regular security monitoring and technical safeguards

9. How Long We Keep Your Data

We retain data only for as long as necessary:

• All user data is stored for a maximum of 12 months.
• If you delete your account, all associated data is permanently erased.
• Anonymous analytics may be retained for a longer period.

You may request deletion of your data at any time.

10. Children’s Privacy

Anji is not intended for users under 13. We do not knowingly collect data from children under this age.

If we become aware that we have collected such data, we will delete it immediately.

11. Your Rights

Under the UK GDPR, EU GDPR, and other applicable laws, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Delete your data (“right to be forgotten”)
• Download or export your data
• Restrict processing of your data
• Object to certain types of processing
• Withdraw consent at any time

To exercise any rights, please contact us through the app or our official support channels.

12. Automated Decision-Making & AI Use

Anji uses AI to support mental and emotional wellness.

• AI-generated messages are not a substitute for medical, therapeutic, or pastoral care.
• Your AI interactions are stored securely and encrypted.
• The AI does not make decisions that have legal or similarly significant effects on you.

13. Crisis & Safety Protocol

If the AI detects statements of self-harm, harm to others, or abuse, the system may:

• Pause normal conversation
• Display crisis support options such as local emergency numbers or hotlines
• Encourage you to contact a qualified professional immediately

Anji does not provide crisis intervention or therapy and should not be used as an emergency service.

14. No Selling or Misuse of Data

We confirm that:

• We do not sell your data.
• We do not rent your data.
• We do not share your data for advertising purposes.
• We do not use your data for profiling outside of app-related functionality.
• We do not create marketing audiences based on your personal or sensitive data.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will always indicate the latest version.

If we make significant changes, we may notify you within the app or via other reasonable methods.

16. Contact Us

If you have questions, concerns, or privacy requests, please reach us through the app or our official support channels.

London, United Kingdom

You may also contact the UK Information Commissioner’s Office (ICO) if you believe your data rights have been violated.