Privacy Policy
Anvilus is operated by Georgios Loukovitis, Athens, Greece, who is the data controller for the information described below. This policy explains what we collect, why, who else sees it, and what you can do about it.
What we collect
- Account data: email and a hashed password.
- Content you create: journal entries, chat messages, goals, habits, nutrition logs, sleep logs, water logs, body measurements, looks photos, and analytics derived from that content (streaks, summaries, trends).
- Health data you choose to share from Apple Health or Health Connect: sleep, workouts, and weight. See “Apple Health and Health Connect” below.
- Photos you attach: chat images, nutrition photos, looks photos. Stored on our servers; you can delete them at any time.
- Device tokens: APNs / FCM / web-push subscriptions used solely to deliver notifications you have requested.
- Subscription status: whether you have an active plan, which plan, and when it renews or expires. Payments are handled by Apple, Google, or Stripe — we never receive or store your card details.
- Diagnostics: crash reports (Sentry), product-usage events (PostHog), and server telemetry (Pydantic Logfire) — which requests our backend served, how long they took, and the errors they raised. We use these to fix bugs and improve the product.
What we do not do
- We do not sell your data.
- We do not track you across other apps or websites.
- We do not use your data to train AI models, ours or anyone else's.
How your data is used
To run the product: store your entries, generate summaries, run the AI coach, deliver reminders, and back up your account. Diagnostics are used internally only. Our legal basis is the performance of our contract with you — providing the Service you signed up for — and, for diagnostics, our legitimate interest in keeping the product working.
Apple Health and Health Connect
In the iOS and Android apps you can connect Apple Health (HealthKit) or Health Connect. Nothing is read until you do, and only the types you allow in the system permission sheet are read: sleep, workouts (including their duration, distance, and energy), and weight. Anvilus only reads this data — it never writes anything to Apple Health or Health Connect.
What is read is stored in your account as sleep, workout, and body measurement entries, alongside the ones you log by hand, and is used only to provide the Service to you: your logs, streaks, trends, and coaching. If you use the AI coach, it can draw on these entries like any other, as described under “AI processing”. We never use health data for advertising, marketing, or data mining, we never sell it, and we never share it with third parties for any of those purposes.
You can stop syncing at any time in Settings, and withdraw access in the Health app or in Health Connect. Entries already imported stay in your account until you delete them or delete your account.
AI processing
The AI coach, summaries, quests, advice, and photo analysis work by sending the relevant content to a large language model. That means the text and images involved — chat messages, journal entries, goals, habits, tasks, sleep, workout, nutrition and water logs, saved facts, and photos you submit for analysis — are transmitted to our model provider, OpenRouter, and to the underlying model provider serving the request.
We send only what a given feature needs, over encrypted connections. We have configured these services so that your content is not used to train their models. If you would rather no content leave our servers, avoid the AI features; the rest of Anvilus — tracking, logging, planning — works without them.
Who else sees your data
- OpenRouter and its model providers — content you send to AI features, as described above.
- Apple, Google, Stripe, and RevenueCat — subscription and purchase processing.
- Apple (APNs), Google (FCM) — delivery of push notifications you have enabled.
- Sentry, PostHog, and Pydantic Logfire — crash reports, usage diagnostics, and server telemetry. Logfire receives operational records — request paths, timings, errors, your account identifier and the IP address the request came from — and is configured not to receive the content you write.
- Hetzner and Vercel — hosting of our servers and web front end.
We do not share your content with anyone else, and we do not disclose it to third parties except where required by law.
Where data lives
Your account and content are stored in our managed PostgreSQL instance hosted by Hetzner in Falkenstein, Germany (EU). Data is encrypted in transit (TLS) and at rest. Server telemetry is held in Pydantic Logfire's EU region. Some of the services listed above process data outside the EU; where that happens, transfers rely on the safeguards those providers offer, such as standard contractual clauses.
How long we keep it
We keep your content for as long as your account exists. When you delete your account, all associated content is permanently removed within 30 days. Backups are rotated on the same schedule.
Your rights
You can export all your data from Settings → Data & backup. You can delete your account from Account → Delete account. Deletion is permanent and removes all associated content within 30 days.
If you are in the EU or UK you also have the right to access, correct, restrict, or object to our processing of your data, and to data portability. Export and delete cover most of this directly; for anything else, email us. You may also lodge a complaint with your local data protection authority — in Greece, the Hellenic Data Protection Authority.
Children
Anvilus is not intended for users under 16 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children under that age.
Changes to this policy
We'll post any material changes to this page and, when reasonable, show a notice in the app.