Anthea

Privacy Policy

Last updated: September 27, 2026 · This notice also serves as our disclosure under Turkish data protection law (KVKK) and the GDPR.

Anthea is an intimate space for exploring your relationship — privacy is not a feature of this product, it is its foundation. This policy explains plainly which data we process and why. Data controller: Anthea (contact: [email protected]).

What we collect

• Account: when you sign in with Apple — your name, email address (this may be Apple's private relay address), and a unique user ID.
• Profile: your display name; a profile photo if you choose; your confirmation that you are 16 or older.
• Pairing: the record linking you with your partner (couple ID) and, if you choose, your relationship start date.
• Your journey: your First Meeting answers, your answers to daily questions, what you write for the question of the day and on day 7, and your end-of-week answers; how long you take to answer and whether you change an answer.
• Content generated for you: your First Reading, today's reflections, the week's readings, emotion labels, and a short profile summary that is updated over time.
• Usage events: which steps you open in the app (e.g. seeing the payment screen). Kept only on our own servers; never used for ads or tracking.
• Subscription: subscription status and product info. Payments run through the App Store — your card or payment details never reach us.
• Technical: if you allow notifications, your device's push token; your last-active date; error logs; and, if the app crashes, a crash report (device model, iOS version; not linked to your identity).

How we use your data

• Running the app: serving questions, keeping your cycle in sync with your partner, saving your progress.
• AI analysis: after you give explicit consent, your answers and writing are sent to OpenAI's API to generate your First Reading, today's reflection, the reflection between you, and the week's reading. Alongside your answers, the analysis may consider your answering rhythm (e.g. pausing on a question). Your name is included; your email address and user ID are not sent. OpenAI does not use API data to train its models. If you don't consent, none of your answers are sent and no analysis is generated. If you are paired, the reflection between you is not generated unless both of you have consented.
• Safety: your texts may be automatically scanned for crisis phrases (e.g. self-harm). If there is a match, only the relevant short excerpt may be reviewed by a clinically trained team member, solely to point you to the right support. This is part of our duty of care to our users. If the AI analysis sees signs of crisis in a text, it shows a pointer to support instead of an analysis.
• Notifications: if you opted in, a daily reminder at the time you choose; if you are paired, notifications when your partner completes the day and when the reflection between you is ready. You can turn each type off separately.

What does your partner see?

Your partner cannot see your answer records or your writing directly. Your daily reflections, your First Reading, and the week's reading are visible only to you. If you are paired, when you have both finished the day you read "the reflection between you" together: it places your two perspectives side by side by name, saying where you stand in the same place and where you differ; it may include a few-word quote from what you wrote for the question of the day, and may mention if you skipped writing that day. With Premium you also see how many items you answered the same way.

Where your data lives

Your data is stored on Google Firebase infrastructure within the European Union (Frankfurt, europe-west3).

Who we share it with

We work with a small number of service providers to run the service; this includes transfers abroad:

• OpenAI (USA): only if you consented to AI analysis, while your analyses are generated.
• RevenueCat (USA): verifying subscription status.
• Apple: sign-in, notification delivery, and payments.
• Google Firebase: hosting, authentication and crash reports.
• Beyond these, your data is shared with no one. There are no ad networks, your data is never sold, and there is no cross-device tracking.

Retention and deletion

Your data is kept for as long as your account exists. When you delete your account in the app (Me → "Delete my account"), your answers, analyses, pairing record, and profile are permanently deleted; this cannot be undone.

Your rights

Under KVKK (art. 11) and the GDPR you have the right to access your data, have it corrected or deleted, object to processing, and request a copy. Write to [email protected]; we respond within 30 days at the latest. Most deletion and access requests you can carry out instantly yourself, inside the app.

Age limit

Anthea is for ages 16 and up. If we learn an account belongs to someone under 16, we delete the account and its data.

Changes

If this policy changes, the current version is published here with its date; significant changes are also announced inside the app.