Privacy Policy

Plain-language summary: we collect the bare minimum needed to run the Service, we don't sell your data, and you can delete your account on request. The full version is below.

Data we collect

Account info: your email address (for sign-in) and an optional display name.
Conversation data: the messages you write to personas, the AI responses, post-session coaching results, and timestamps. These are stored so you can return to them.
Usage info: which features you use (sparring vs. coach mode), how often, what worldview personas you engage. Used in aggregate to improve the product.
Technical info: IP address and basic request metadata for rate limiting and abuse prevention. Not used for tracking across other sites.

Where your data lives

Supabase (hosted Postgres + auth): stores your account, profile, conversations, and feedback.
Anthropic: AI inference for sparring personas and coach responses. Anthropic may retain prompts and outputs briefly for safety review per their policies, but does not use API data to train their models by default.
Voyage AI: text embeddings for retrieval. Your query text is sent to Voyage; they do not retain it beyond the request.
Resend: transactional email (sign-in magic links, beta-status notices).
Vercel: application hosting.

What we don't do

We don't sell your data. Ever.
We don't share your conversation data with third parties beyond the AI providers listed above, who only see what's necessary to generate a response.
We don't use ad tracking or third-party analytics cookies. The only cookies we set are session cookies for keeping you signed in.

How we use your data

To deliver the Service (generate responses, save your work).
To improve product features in aggregate.
To communicate with you about your account or material changes.
To prevent fraud and abuse.

Your rights

You can at any time:

Access the data we hold about you (most of which is already visible inside the app)
Correct your display name or other account info
Delete your account and all associated data. Email team@anvld.com from the address on file and we'll process deletion within 7 business days.
Export your conversation history in JSON on request (email above).

Residents of California (CCPA) and the EU/UK (GDPR) have additional rights under those laws. The same email address handles those requests.

Data retention

We keep your data for as long as your account exists. If you delete your account, we remove your profile, conversations, and feedback within 7 business days, except for minimal records we may need to keep for accounting or legal purposes (e.g. evidence of subscription terms, if any). Server logs are rotated after 30 days.

Security

We use industry-standard practices to protect your data: TLS for all traffic, row-level security in Postgres so your data is only accessible to you and to admins, and secret rotation for API keys. No system is perfectly secure, but we treat this seriously.

Children's privacy

ANVLD is not directed at children under 13 and we do not knowingly collect data from them. Parents who become aware of an under-13 account should contact us for removal.

Changes to this policy

We may update this policy as the Service evolves. Material changes will be communicated via email and an in-app notice.

Contact

Questions about privacy or data: team@anvld.com.

Last updated 2026-05-12.