A N A N K E

Privacy Policy

How we handle your data and what rights you have over it

Last updated: 5 September 2026 · Versión en español

ANANKE handles especially sensitive data: your conversations about your personal and emotional life. This policy explains, plainly, what we keep, why, who it is shared with and how you can delete it all whenever you want.

This is a courtesy translation. In case of discrepancy, the Spanish version prevails.

1. Who is responsible

Controller	Borja Castillo Barreda
Tax ID (NIF)	72145551W
Address	Barrio Revolgo, 35 · 39330 Santillana del Mar (Cantabria), Spain
Email	soporte@anankeapp.com
Application	ANANKE (iOS)

The controller is an individual acting as an independent developer. No Data Protection Officer has been appointed because it is not legally required; for any privacy question, write to the email above.

2. What data we process

2.1 Data you give us

Account data: email address, password (stored hashed, never in readable form) and, optionally, your name, gender and country.
Your conversations with the Maestro: the messages you write and the answers you receive.
Your reflections: answers to the Initiation Rite, to the daily Trials and to the Meditations.

2.2 Data generated by your use

Evolution of your Pillars: scores and changes across the seven areas of the method (Body, Mind, Craft, Family, Community, Character, Spirit).
Guidance and commitments the Maestro proposes and their follow-up.
Minimal technical data: activity dates, time zone and device language.

Special-category data

Your conversations and reflections may reveal information about your emotional wellbeing and mental health. The General Data Protection Regulation treats this as special-category data (Article 9) and gives it the highest protection.

That is why we only process it with your explicit consent, which is requested expressly and separately when you sign up, in a checkbox distinct from the acceptance of the Terms. We store the date you gave it and the version of these texts; you can review them under Settings → Privacy & my data.

You can withdraw it at any time from that same screen. Since the Maestro cannot read your conversations without it, withdrawing it means the immediate deletion of your account and all your data.

3. What we use your data for, and on what legal basis

Purpose	Legal basis
Create and maintain your account, and provide the service	Performance of a contract (Art. 6.1.b GDPR)
Let the Maestro remember your story and personalise its answers	Explicit consent (Arts. 6.1.a and 9.2.a GDPR)
Compute the evolution of your Pillars and your Path	Explicit consent (Arts. 6.1.a and 9.2.a GDPR)
Manage your subscription and conversation credits	Performance of a contract (Art. 6.1.b GDPR)
Answer support requests	Legitimate interest (Art. 6.1.f GDPR)
Comply with legal and tax obligations	Legal obligation (Art. 6.1.c GDPR)

We do not use your data for advertising. We do not sell it or hand it to third parties for commercial purposes. We do not build advertising profiles.

4. Who we share your data with

Only with the providers strictly necessary for the application to work. All of them act as processors, under a signed contract and following our instructions.

Provider	Purpose	Location
Anthropic PBC	Generate the Maestro's answers using artificial intelligence	United States
Railway Corp.	Hosting of the server and the database	United States / EU
Apple Inc.	Distribution of the app and processing of subscriptions	United States / Ireland
RevenueCat, Inc.	Technical management of subscriptions and purchases (receives an anonymous identifier of your account and your subscription status; never your conversations or payment details)	United States
Cloudinary Ltd.	Hosting and delivery of the app's audio and images (meditations, Rite). Receives no personal data beyond the technical data of the download	United States / Israel
Expo (650 Industries, Inc.)	Technical infrastructure of the app and delivery of reminders to the device (notification identifier)	United States

All transfers outside the European Economic Area rely on the European Commission's Standard Contractual Clauses or on the EU-US Data Privacy Framework where the provider is certified under it.

4.1 Artificial intelligence and international transfer

For the Maestro to answer you, the content of your messages is sent to the servers of Anthropic PBC (United States), which operates the Claude language model. Without this transfer the service cannot work.

This international transfer is covered by the Standard Contractual Clauses approved by the European Commission and by the data processing agreement signed with the provider. Under the terms of its API, Anthropic does not use your conversations to train its models.

Apple, as distributor, processes your payment data under its own privacy policy. We never see or store your card or payment details.

5. How long we keep your data

While your account is active, so the Maestro keeps your story.
If you delete your account, your data is erased immediately and permanently. It is not a soft delete: it is removed from the database.
If your account stays inactive for more than 24 months, we may delete it after notifying the associated email.
Purchases are made through Apple, which issues the receipt and keeps the billing information. We only store the identifier of each transaction and the status of your subscription while your account exists; when you delete it, they are deleted too.

6. How we protect your data

Content encryption: your conversations, reflections, evaluations, the Maestro's guidance, the classification of each message and the results of the Rite are stored encrypted in the database. Even with direct access to it they cannot be read in clear.
Passwords: stored with secure derivation functions (bcrypt). We cannot know your password.
Encrypted communications between the app and the server (HTTPS).
Restricted access to the systems, limited to the controller.

7. Your rights

You can exercise the following rights at any time:

Access and portability: know what data we hold about you and get a full copy in a machine-readable format (JSON), instantly and without asking us, from Settings → Privacy & my data → Download a copy of my data.
Rectification: correct inaccurate data.
Erasure: delete all your data. You can do it yourself, immediately, from Settings → Delete account. The deletion also reaches the data RevenueCat holds about your subscription.
Restriction and objection to processing.
Withdraw your consent at any time, without affecting the lawfulness of prior processing.

To exercise them, write to soporte@anankeapp.com stating the right you wish to exercise. We will answer within one month at most.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence.

8. Minors

ANANKE is intended exclusively for people aged 18 or over. We do not knowingly collect data from anyone younger. If we detect an account that breaches this requirement, we will delete it. If you are a parent or guardian and believe a minor in your care has created an account, write to us and we will delete it at once.

9. Automated decisions

The evolution of your Pillars is computed automatically from your activity and your conversations. This processing produces no legal effects and does not significantly affect you: it is a tool for personal reflection, with no external consequences of any kind. You can check your evolution at any time within the app.

10. Changes to this policy

If we change this policy, we will publish the new version at this same address and update the date in the header. If the changes are substantial, we will notify you within the app before they take effect.

11. Contact

For any question about your data: soporte@anankeapp.com