AnoniendAnoniend Privacy Policy
Draft v0.1 — 13 October 2026. Must be reviewed by an EU lawyer before launch (docs/04-legal.md). Placeholders in [brackets].
The short version: we collect almost nothing. No e-mail, no phone number, no photos, no location, no advertising trackers. You are anonymous to other members — but not to the law: if a court or authority lawfully orders it, we must hand over what little we have.
1. Who we are
Controller: [OPERATOR NAME, ADDRESS, COUNTRY]. EU representative (GDPR art. 27): [EU REPRESENTATIVE]. Contact: privacy@anoniend.com.
2. What we process, why, and on what basis
| Data | Purpose | Legal basis (GDPR) | Kept |
|---|---|---|---|
| Nickname(s), bio, follower count | your public identity | contract (6(1)(b)) | until Reincarnate/Vaporize (old nickname reserved 90 days) |
| Password (hashed), 12 recovery words (hashed) | sign-in, account recovery | contract | until Vaporize |
| Birth year, gender | age check (18+), optional profile display | contract; legal obligation for age checks | until Vaporize |
| Interests, follows, likes, saves, blocks, mutes | your feeds and settings — never shown to others (only follower counts are public) | contract | until you change them or Vaporize |
| Whisps and replies | publishing what you write | contract; for sensitive topics you choose to make public, art. 9(2)(e); for "Whisp as Someone", your explicit consent (9(2)(a)) | until you delete them or Vaporize |
| Link between your account and your anonymous whisps | so only you can see and delete them | contract | encrypted; until deletion |
| Reports, moderation decisions, appeals | safety and DSA obligations | legal obligation (6(1)(c)); legitimate interest in a safe service (6(1)(f)) | reports 12 months; decisions 6 months after closure |
| Strikes, bans, device-integrity bits (Apple DeviceCheck / Google Play Integrity) | stopping banned people from returning | legitimate interest | while the account exists + max. 90 days after Vaporize |
| Hashed IP address in rate-limit counters | preventing brute-force and spam | legitimate interest | max. 48 hours |
| Push token | notifications you enabled | contract / consent in OS | until you sign out or disable |
We do not use analytics SDKs, advertising IDs, or sell data. Fonts are bundled in the app (no Google Fonts requests).
3. Automated moderation (AI)
New whisps are classified by an AI model (Anthropic, Claude) to detect harassment, hate, threats, doxxing, sexual content, spam, illegal content and self-harm risk. Clear violations may be hidden or removed automatically; you always get a statement of reasons and can appeal to a human. Only the whisp text is sent — never your nickname, account or device data.
4. Processors and transfers
Supabase (database & hosting, Frankfurt, EU) · Anthropic (AI moderation; [DPA/SCCs, zero data retention requested]) · Google Firebase Cloud Messaging / Apple Push Notification service (notification delivery; payload contains no whisp text) · Apple DeviceCheck / App Attest and Google Play Integrity (device integrity). Transfers outside the EEA rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.
5. Your rights
Access, rectification, erasure, restriction, portability, objection (art. 15–21) — most are self-service in the app (Settings; Vaporize deletes your account). Otherwise write to privacy@anoniend.com; we answer within one month. You may complain to your data-protection authority.
6. Law enforcement
We disclose data only on a valid legal order, or proactively when we suspect a threat to someone's life or safety (DSA art. 18). Because we store no e-mail, phone, IP history or location, there is very little to disclose.
7. Age
Anoniend is for adults (18+). If we learn that an account belongs to a minor, we delete it.
8. Changes
We will announce material changes in the app at least 14 days in advance.