Privacy Notice

1. Who we are

Hey Anchor is operated by Emily Anne Johnson ("Hey Anchor", "we", "us"). We act as the data controller for personal data collected through the Hey Anchor app and website. You can reach us at emilyjohnsonrd2@gmail.com.

2. Data we collect and why

• Account data (name, email, avatar, login credentials), to create and secure your account. Legal basis: contract.
• Content you add (calendar events, to-dos, activities, dinner plans, household invitations, and notes captured by text or voice), to provide the Service and share it with the people you choose. Legal basis: contract.
• Calendar data you connect (events from Google Calendar and from ICS calendar links you add, plus encrypted connection tokens), to show your schedule inside the Service. Legal basis: contract.
• Wellbeing and personalization data (mood check-ins, reflection preferences, and devotion completions), to personalize daily support. Legal basis: contract.
• AI prompts and responses (schedule, task, and capture text sent to our AI provider, including voice input). Voice recordings are sent to our AI provider only to be transcribed; the audio is processed temporarily and is not stored by Hey Anchor, and only the resulting text is retained. Used to generate devotions, briefings, and schedule suggestions. Legal basis: contract / legitimate interests.
• Usage and device data (IP address, browser/device type, log data), to keep the Service secure, prevent abuse, and improve reliability. Legal basis: legitimate interests.
• Support messages, to respond to your questions. Legal basis: legitimate interests.

Payment card details are handled directly by our payment processor, Stripe. Hey Anchor never sees or stores your card number.

3. Who we share data with

• Service providers / subprocessors: hosting, database, authentication, email, and analytics tooling that help us run Hey Anchor.
• AI provider: the model provider that generates devotions and schedule suggestions receives the prompt context needed to produce a response.
• Payment processor (Stripe): for Anchor+ subscription payments, billing, subscription management, tax calculation, and invoicing.
• Professional advisers and authorities, where required by law or to protect our rights.

We do not sell your personal data.

4. Data retention and account deletion

We keep your data for as long as your account is active. You can delete your account at any time from Settings, Account & Privacy inside Hey Anchor, or from heyanchor.org/delete-account. Deletion is immediate and permanent: your login, profile, settings, mood check-ins, reflections, connected calendar access, push notification tokens, and feedback are removed.

If another adult shares your household, shared household content (events, tasks, activities, meals, people profiles, and categories) remains with them and household ownership transfers to them. If you are the only adult, the household and its content are deleted with your account.

An active Anchor+ subscription is cancelled immediately on deletion and saved payment details are removed. Finalized invoices and transaction records are retained by our payment processor where we are required to keep them (for example, for tax or legal compliance).

For 24 hours after deletion we keep a single technical record containing only your account identifier and the status of the deletion. It exists to make sure any sign-in token issued before deletion is refused immediately and that a repeated request cannot run twice. After 24 hours that identifier is removed automatically by a scheduled hourly job, leaving only a random reference number, the status, a step code, and timestamps, which cannot be linked back to you.

5. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level security so users can only access their own (or their group's) data. No system is 100% secure, but we take this seriously.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing or withdraw consent. To exercise any of these rights, email emilyjohnsonrd2@gmail.com. UK/EEA users also have the right to lodge a complaint with their local supervisory authority.

7. International transfers

Hey Anchor's providers may process data outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for those transfers.

8. Cookies

Hey Anchor uses essential cookies and similar technologies to keep you signed in and to keep the Service secure. We may add analytics cookies in the future; if we do, we'll update this notice and provide controls where required.

9. Changes to this notice

We may update this notice from time to time. The "Last updated" date at the top reflects the most recent version.