Privacy Policy
Anvilus is operated by Georgios Loukovitis, Athens, Greece, who is the data controller for the information described below. This policy explains what we collect, why, who else sees it, and what you can do about it.
What we collect
- Account data: email and a hashed password.
- Content you create: journal entries, chat messages, goals, habits, nutrition logs, sleep logs, water logs, body measurements, looks photos, and analytics derived from that content (streaks, summaries, trends).
- Photos you attach: chat images, nutrition photos, looks photos. Stored on our servers; you can delete them at any time.
- Device tokens: APNs / FCM / web-push subscriptions used solely to deliver notifications you have requested.
- Subscription status: whether you have an active plan, which plan, and when it renews or expires. Payments are handled by Apple, Google, or Stripe — we never receive or store your card details.
- Diagnostics: crash reports (Sentry) and product-usage events (PostHog). We use these to fix bugs and improve the product.
What we do not do
- We do not sell your data.
- We do not track you across other apps or websites.
- We do not use your data to train AI models, ours or anyone else's.
How your data is used
To run the product: store your entries, generate summaries, run the AI coach, deliver reminders, and back up your account. Diagnostics are used internally only. Our legal basis is the performance of our contract with you — providing the Service you signed up for — and, for diagnostics, our legitimate interest in keeping the product working.
AI processing
The AI coach, summaries, quests, advice, and photo analysis work by sending the relevant content to a large language model. That means the text and images involved — journal entries, chat messages, goals, and photos you submit for analysis — are transmitted to our model provider, OpenRouter, and to the underlying model provider serving the request.
We send only what a given feature needs, over encrypted connections. We have configured these services so that your content is not used to train their models. If you would rather no content leave our servers, avoid the AI features; the rest of Anvilus — tracking, logging, planning — works without them.
Who else sees your data
- OpenRouter and its model providers — content you send to AI features, as described above.
- Apple, Google, Stripe, and RevenueCat — subscription and purchase processing.
- Apple (APNs), Google (FCM) — delivery of push notifications you have enabled.
- Sentry and PostHog — crash reports and usage diagnostics.
- Hetzner and Vercel — hosting of our servers and web front end.
We do not share your content with anyone else, and we do not disclose it to third parties except where required by law.
Where data lives
Your account and content are stored in our managed PostgreSQL instance hosted by Hetzner in Falkenstein, Germany (EU). Data is encrypted in transit (TLS) and at rest. Some of the services listed above process data outside the EU; where that happens, transfers rely on the safeguards those providers offer, such as standard contractual clauses.
How long we keep it
We keep your content for as long as your account exists. When you delete your account, all associated content is permanently removed within 30 days. Backups are rotated on the same schedule.
Your rights
You can export all your data from Settings → Data & backup. You can delete your account from Account → Delete account. Deletion is permanent and removes all associated content within 30 days.
If you are in the EU or UK you also have the right to access, correct, restrict, or object to our processing of your data, and to data portability. Export and delete cover most of this directly; for anything else, email us. You may also lodge a complaint with your local data protection authority — in Greece, the Hellenic Data Protection Authority.
Children
Anvilus is not intended for users under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children under that age.
Changes to this policy
We'll post any material changes to this page and, when reasonable, notify you via email or in-app notice.