BACK TO HOMEPAGELegal Operations

Privacy Policy

Last Updated: May 2026 // Effective Date: Launch

1. Introduction

Anchor & Align Ltd. ("we," "us," or "our") operates the Anchor & Align platform (the "Service"). We are committed to protecting your privacy and ensuring Data Sovereignty. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

Key Principle: We operate on a Zero-Knowledge Architecture. For sensitive clinical and personal data, we cannot read your content. Your encryption keys are generated and stored locally on your device. Even if compelled by law, we cannot decrypt your beliefs, journals, or assessments.

2. Information We Collect

2.1 Information You Provide
  • Account Data: Email address, name (for profile identification).
  • Sovereign Content: Time audits, values, beliefs, boundary logs, biological rhythm data (SomaPhase™), and AI reflections. Note: This data is encrypted client-side before transmission.
  • Clinical Assessments: PHQ-9 and GAD-7 scores (encrypted).
2.2 Automatically Collected Information
  • Technical Data: IP address, device type, browser version, operating system.
  • Usage Data: Feature engagement metrics (e.g., "Time Audit module opened"), crash reports, and performance logs. This data is anonymized and aggregated.
  • Cookies: Essential cookies for authentication and session management. We do not use tracking cookies for advertising.

3. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To calculate your Coherence Index™ and generate AI insights via Athena Mirror™.
  • To ensure security and prevent fraud (via the Vantablack Covenant™ integrity checks).
  • To comply with legal obligations.

4. Zero-Knowledge Encryption & Data Sovereignty

  • Client-Side Encryption: Sensitive data (Beliefs, Journals, Assessments) is encrypted using AES-256-GCM on your device before being sent to our servers.
  • Key Management: Encryption keys are stored in IndexedDB on your device. They are never transmitted to Anchor & Align servers.
  • Server Blindness: Our servers store only ciphertext. We cannot access, read, or share your plaintext sovereign content.
  • Right to Erasure: You may delete your account and all associated data at any time via the Settings menu. Upon deletion, your encryption keys are destroyed, rendering any remaining ciphertext unintelligible.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share information only in the following circumstances:

  • Service Providers: Third-party vendors who assist in hosting (Firebase/Google Cloud) and email delivery. These providers are bound by strict confidentiality agreements and do not have access to decrypted sovereign content.
  • Legal Requirements: If required by law, we may disclose non-encrypted technical data (e.g., login timestamps, IP addresses). We cannot disclose encrypted sovereign content as we do not possess the decryption keys.
  • Business Transfers: In the event of a merger or acquisition, user data will be transferred subject to this Privacy Policy.

6. International Data Transfers

Your data is hosted in the EU Region of Google Firebase to ensure GDPR compliance. By using the Service, you consent to the transfer of your data to the United Kingdom and the European Union.

7. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

8. Changes to This Privacy Policy

We may update this policy periodically. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at:

  • info@anchorandalign.org
  • Address: Anchor & Align Ltd., 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, UK