Áncora

Privacy Policy

Effective date: April 23, 2026 · Version 1.1

This policy explains, in plain language, what data Áncora collects, why we need it, and who we share it with. If anything is unclear, email hello@ancoraapp.org and a real person will reply.

1. Who we are

Áncora is a mobile app for Spanish-first Christian devotionals, published by MEAS Partners, LLC, a limited liability company organized in the State of Delaware, United States.

We are a small team. We have no offices or staff in Latin America or the European Union. We respond to any data request within 72 business hours.

2. What we collect

We only collect what the app needs to work.

When you create an account (required to save your progress):

While you use the app:

Technical data (anonymous or pseudonymous):

What we do NOT collect:

3. How we use your information

  1. Make the app work. Authenticate you, show your devotional, streak, favorites, journal, prayer requests, and subscription.
  2. Generate AI prayer content. We send the name and context you type to Anthropic so Claude can draft a personal prayer. The draft returns to you and is stored tied to your account.
  3. Moderate community content. Every request you share publicly runs through Claude Haiku (Anthropic) to detect prohibited content. Ambiguous cases are reviewed manually within 24 hours.
  4. Send push notifications that you have opted into: daily devotional, novena reminders, "someone prayed for your request."
  5. Measure aggregate usage to improve the app. We use PostHog to see which screens work and which do not. Events are anonymous.
  6. Diagnose crashes. Sentry tells us when something breaks.
  7. Comply with law. We respond to valid legal process and notify you unless the law prohibits it.

We do not use your data for advertising, to sell profiles, or to train AI models. Content you send to Anthropic is governed by the Anthropic Commercial Terms: Anthropic does not train on it.

4. Who we share data with

We only work with vendors we need to operate. Each vendor sees only the data required for its function:

We share with no one else. We do not sell, rent, or barter user data with other publishers.

About WhatsApp. Áncora will soon include a "Share via WhatsApp" button that sends a verse image and a link to a chat you pick. When you tap that button, the content leaves Áncora and enters Meta's systems; from that point WhatsApp and Meta become the data controllers for that content under their own policy. Áncora does not track what happens after you send the message: we do not know if it was opened, forwarded, or to whom. If you schedule a daily auto-send to a specific chat, Áncora stores only the chat identifier and the time you chose; we do not keep copies of the sent messages.

5. Children's data

Áncora is for users aged 13 and up. On signup we ask for your date of birth in a neutral way to verify your age, consistent with the 2025 amended COPPA Rule (US).

6. Data retention

When you request deletion, we immediately remove: profile, prayers, journal, favorites, streak, push token, linked subscriptions. Moderation records and abuse reports are retained anonymized (no account identifier) for the period above.

7. Your rights

You have the right to:

To exercise any right, email hello@ancoraapp.org from the address associated with your account. We respond within 30 days; in practice, within 48 to 72 hours.

8. Security

Your data travels encrypted with TLS between your device and our servers. Every table that contains user data has Row-Level Security (RLS) enabled, so no account can read another's data. The Supabase service-role key never appears in the app; it lives only in server-side functions. We do not use tracking cookies. The session is kept with a Supabase JWT stored locally on your device.

If we detect a security incident that compromises your data, we will notify you within 72 hours by email and, where applicable, the relevant authority.

9. Cookies and identifiers

Áncora is a native app: it does not use cookies. We use:

10. Where processing happens

If you use Áncora from outside the United States, your data is transferred to the US. We rely on standard contractual clauses and, where applicable, your explicit consent at account creation.

11. European Economic Area, United Kingdom, and Swiss users

If you use Áncora from the EEA, the UK, or Switzerland, the following applies in addition to everything above.

Data controller. MEAS Partners, LLC, 131 Continental Dr, Ste 305, Newark, DE 19713, USA. Contact: hello@ancoraapp.org. We have not appointed an EU or UK representative because the app processes the minimum personal data strictly necessary to deliver a devotional service (Sign in with Apple identifier, push token, your own devotionals / journal / prayers) and does not conduct large-scale processing or profiling of EU/UK residents.

Legal basis for processing (GDPR Article 6). We rely on (a) performance of a contract with you (Article 6(1)(b)) for account creation, streak / favorites / journal / prayer storage, subscription management and sync; (b) consent (Article 6(1)(a)) for push notifications and for AI-assisted prayer drafting, which you grant inside the app and may withdraw at any time from Settings or by disabling notifications; and (c) legitimate interests (Article 6(1)(f)) for fraud and abuse prevention on the community-prayer feature (moderation logs, abuse reports), with our interest in keeping the community safe weighed against your right to privacy.

International transfers. Our processors (Supabase, Anthropic, Expo, Sentry, PostHog, RevenueCat, Apple) are based in the United States. Transfers rely on the European Commission's Standard Contractual Clauses (2021/914) and, where applicable, the UK International Data Transfer Addendum, together with supplementary technical measures (TLS in transit, RLS at rest, service-role key never exposed in the client).

Your rights. Under the GDPR / UK GDPR you may request access to, rectification of, erasure of, restriction of processing of, or portability of the personal data we hold about you, and you may object to processing based on legitimate interests. You can also delete your account and all associated data yourself from Settings → Account → Delete account. To exercise any other right, email hello@ancoraapp.org from the address associated with your account; we respond within one month. You also have the right to lodge a complaint with your national supervisory authority (e.g., AEPD in Spain, CNIL in France, BfDI in Germany, Garante in Italy, the Information Commissioner's Office in the UK, the FDPIC in Switzerland).

Automated decision-making. We do not make any decisions that produce legal or similarly significant effects on you using automated processing or profiling. AI-assisted prayer drafting and community-prayer moderation produce content suggestions, not decisions about you.

Retention in the EEA / UK / Switzerland. Same as section 6 above.

12. Changes to this policy

If we change anything that affects how we handle your data, we will:

  1. Update the effective date at the top of this document.
  2. Show an in-app notice the next time you open Áncora.
  3. Email the address on your account when the change is material (e.g., a new data vendor, a new use of your data).

If a change expands how we use your data, we will ask for your explicit consent before it takes effect.

13. Contact

For urgent requests (e.g., suspected unauthorized access to your account), put "URGENT" in the subject line. We respond within 24 hours.

Effective date: April 23, 2026 · Version 1.1