Health-related data, precisely.

Anren LLC (8 The Green STE A, Dover, DE 19901) runs Anren, an AI for reflection and self-discovery. Anren isn't a health care provider, and it isn't therapy or medical care. But people often write about how they're doing, and some of that, along with what Anren infers from it, can count as consumer health data under these laws. We treat it that way.

1. Consumer health data we collect, and how we use it

What we collect:

• ✦What you write or dictate about your physical or mental health, emotions, wellbeing, relationships, or life circumstances, when it reveals something about your health.
• ✦What Anren infers from what you share, including its private sense of how you seem to be doing and the patterns it notices over time.
• ✦Signals of possible crisis that Anren detects in what you share (for example, signs of a risk to yourself, of disordered eating, or, rarely, of harm to someone else), and records that its crisis response was triggered. These records don't include your words.
• ✦If you use voice typing, the audio of what you say, which is turned into text.
• ✦If a health or wellbeing practitioner referred you to Anren, the fact of that referral, recorded once when you sign up and looked at only in totals.

How we use it:

• ✦To provide Anren to you: remembering what you share, generating replies, and reflecting you back over time.
• ✦To keep you safe: detecting crisis signals so Anren can stop the reflective work and point you to human help.
• ✦To secure the service, and to prevent fraud and abuse.
• ✦Only if you turn sharing on: to have our team read it to improve Anren, and to help train Anren itself (see our Privacy Policy for exactly what that means, including the parts that can't be undone).

2. Where it comes from

Directly from you, through what you write or say in Anren. And from Anren itself, which infers some of it from what you share. The question light on our website isn't a place for health details, so please don't type any there. Whatever you type goes through our website host to our AI provider to answer you. We don't save it, though those providers keep their own short-lived technical records.

Our website counts visits without cookies and without anything that identifies you, and the count is never linked to you or your account.

3. Consumer health data we share, and with whom

We share consumer health data only with processors, meaning service providers that handle it on our behalf, under contract, to run Anren:

• ✦AI model provider (Anthropic): your conversations and the context Anren assembles, so the AI can reply.
• ✦Cloud database (Supabase): all of it, so it can be stored and kept safe.
• ✦Backup storage (Cloudflare): holds our encrypted nightly backup copies for 30 days. They're encrypted before they reach Cloudflare, and Cloudflare can't read them.
• ✦Website host (Vercel): carries questions typed into the light on our website, where we ask you not to share health details, to the AI model provider. Your conversations in the app don't pass through it.
• ✦Speech-to-text (Deepgram): your voice audio, only if you use voice typing.

We have no affiliates that receive consumer health data. We share consumer health data with anyone else only with your separate consent, or where the law allows us to without it, such as to comply with a legal obligation or valid legal process, or to protect someone's safety.

4. What we don't do

We don't sell consumer health data. We don't use it for advertising. We don't set up geofences around places where people get health care.

5. Your rights

You have the right to:

• ✦Confirm whether we collect, share, or sell your consumer health data.
• ✦Access it, including a list of every third party and affiliate we've shared it with, with their contact information.
• ✦Withdraw your consent to our collecting and sharing it.
• ✦Delete it. When you do, we also ask the processors that hold it to delete it, where their contracts allow. Backup copies expire on their schedules, and some records are kept as the law requires; the narrow exceptions are in our Privacy Policy.

How to exercise them. You can export or delete your record in the app (Tending → your data), or email privacy@anren.ai. We'll verify that the request comes from you and respond within 45 days. If we need more time, we may extend that once by up to 45 more days, and we'll tell you why within the first 45. We won't discriminate against you for exercising a right.

Appeals. If we decline your request, you can appeal by emailing privacy@anren.ai with "Appeal" in the subject. We'll respond within 45 days and explain our decision. If your appeal is denied, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.

6. Changes

If we want to collect, use, or share consumer health data in a way this policy doesn't describe, we'll ask for your consent first.

Effective October 19, 2026. Questions: privacy@anren.ai.