Anren holds what you share so it can remember you and reflect you back. It's locked to your account, never sold, and yours to see, export, and delete. Here is exactly how.
This policy is from Anren LLC, which runs Anren. This policy covers Anren and Enkara. Plain language up top, the fuller detail below. It's written for Anren's 18+ early period. If you're in Washington, our separate Consumer Health Data Privacy Policy also applies. See also our Terms of Service and Safety & Crisis Support. Questions any time: privacy@anren.ai.
Your words are stored with our hosting provider, locked to your account, and never sold. To reply, they pass through Anthropic's AI. If you turn sharing on, our team may read them and they may help train Anren. Anren isn't a vault even we can't open, and we'd rather say so plainly. We keep access to as few hands as we can, and we log it.
Your account email (how you sign in); if you set up a passkey, a public credential that lets your device prove it's you (your face, fingerprint or screen-lock secret never leaves your device); your date of birth (to confirm you're 18 or older, to place what you tell Anren in the right years of your life, and to notice when your birthday comes round); your pronouns, if you give them; your conversations, word for word (what you write or dictate, and Anren's replies); the picture Anren builds of you over time, including a private sense of how you seem to be doing; and basic usage and diagnostic info (that the app was opened, the steps you take in the app and how they went, such as how sign-in, the agreement screen, export, deletion and checkout went, with timings and error codes, never what you typed; crash and error reports; your device's time zone and language setting, recorded once when you agree; how you found Anren, for example a referral or a promo code; and, if you use voice typing, numbers about how each dictation went, such as how confident the transcriber was and how much of the dictated text you kept, never the words), which is kept separate from the content of what you wrote. If you turn on notifications, we also keep your phone's notification token and a record that a notification was sent, with no message text. Because you write freely, what you share can reveal sensitive things, such as your health, sexuality, beliefs, background or legal troubles. We treat all of it as sensitive, use it only as this policy describes, and ask for your clear agreement when you sign up. If you sign in with Google or Apple, they give us your email address and name (Apple may give us a private relay address instead). We use them only to sign you in and to send you account emails.
With our hosting provider, Supabase, in the United States. It's encrypted in transit and at rest by that provider, and database access rules lock it to your account so other users can't see it.
Other users can't. Anthropic, whose AI (Claude) Anren runs on, receives your conversation so it can reply. If you turn sharing on, our team (in this early period, mostly Faolan, the founder) may read your conversations, and every read for review is logged. As the operator, we can also reach the database directly to keep it running and secure and to meet legal obligations, and that access is logged too. A handful of other services handle narrow pieces, and each is named below. We may also disclose information in the limited cases described under When we may share your information.
We never sell your data. We don't show you ads, and we never share your data with advertisers or use it to target ads. We use it to run Anren, to improve it (and, if you opt in, to train it), to keep it safe and secure, to meet our legal obligations, and as you direct us.
Whether you're paying or not.
Anren isn't designed for or directed at anyone under 18. When you sign up, we ask your date of birth to confirm you're old enough. If the date shows you're under 18, you can't use Anren and we don't keep the date you entered. Signing in may already have created a sign-in record by then; it's deleted automatically within 7 days (within 72 hours if you're under 13). If you think we got your age wrong, email us. If you sign in but don't agree, we keep only the sign-in record, and it's deleted automatically about two weeks after you last signed in, unless you come back and agree. We may email you once to ask whether something went wrong, and we won't email again unless you reply. Email us and we'll delete the sign-in record.
Anren is an AI for reflection and growth. Not a therapist, not medical care, not a crisis service, and not a substitute for professional help.
The reflective work stops and Anren turns to care, pointing you to real human help like 988 (Suicide & Crisis Lifeline), call or text, anytime. If you're in immediate danger, call 911. The crisis lines Anren points to are free.
Anren can't be a vault even Anren can't open. The AI has to read your words to reflect them. We'd rather tell you that plainly than promise more than we can keep.
Your words pass through Anthropic so the AI can respond. If you turn sharing on, a small number of people may read them to make Anren better. We keep access to as few hands as we can and log it, and we never sell what you share.
To run Anren for you: storing your conversations and record so Anren can remember you, sending your words to the AI so it can reply, forming the picture and the private readings Anren uses to reflect you back, and handling your account, sign-in, and any payments. To keep Anren safe and working: detecting crisis signals so it can point you to human help, preventing abuse and fraud, securing our systems, and fixing errors. To meet legal obligations. And, only if you turn sharing on, to have our team review it and to train Anren, as described next.
Anren also keeps private notes on how its own guesses about you turn out (for example, whether a question it asked was the right one), so it can understand you better. They're kept with your account, deleted when you delete it, and not shown in the app; your export says what they are. We also keep anonymous totals across at least five people, with no names or words, to see how Anren's judgments are doing overall, and we don't try to work out who anyone is from them.
When the app shows you crisis help, we count that with no link to you. If you tap one of those lines (to call, text or open it), we record which one, where in the app it was and when, never anything you said, so we can tell whether help is actually within reach. That record is yours: it's in your export, used for nothing but safety, and deleted with your account.
On our website. If you ask the light on our website a question, your question and the last few turns of that chat go through our website host (Vercel) to our AI provider (Anthropic) to generate the answer. We don't save what you ask, and it isn't connected to any account, but those providers keep their own short-lived technical records. Please don't share health or other personal details there; the app is the place for that. If you speak your question instead of typing it, your browser's own speech service (for example Apple's or Google's) turns it into text, under its own terms.
Asking to join the beta. When you ask to join from our website, we keep what you send: your name, your email, anything you write in the optional box, and where you heard about us (the site or campaign that sent you, the page you arrived on, and who sent you if you tell us). We also keep basic technical details of the request, such as a scrambled form of your internet address and the kind of browser, to keep spam out. We use them to reply to you, to invite you, and to count where people come from (counted only in totals). If you join, what you wrote may be used to open your first conversation with Anren. We keep your request until you ask us to delete it or you delete your Anren account, which removes it too. To have it deleted sooner, write to support@anren.ai. If you send feedback or a crash report through TestFlight, Apple passes it to us with details of your device.
Counting visits to this website. Our public website counts visits with Vercel Web Analytics. It uses no cookies and keeps nothing in your browser. It records which page was read, the site or campaign that sent you, your country, and the kind of device, and it can tell that two page views on the same day came from the same visit; it doesn't keep that link past the day or know who you are. If your browser sends Global Privacy Control, we don't count you at all. The count isn't used for ads, nothing is sold, and nothing from inside Anren is involved. The privacy, safety, terms and consumer-health-data pages aren't counted.
If you answer the question on the card, your browser remembers that you did, so we don't ask twice. That answer isn't sent anywhere because of it.
Sharing is off by default. If you turn it on, two things become possible.
Our team may read your conversations and Anren's record of you, to check that Anren is reading you accurately and to make it better. In this early period that's mostly Faolan, the founder, working with AI tools that include Claude. Every read for review is logged: who, when, and why. You can turn sharing off any time in Settings. When you do, the team's tools can no longer show your words, and we delete what we set aside to read, apart from a note of what was decided; some items are removed up to 30 days later.
Your data may help train Anren itself. That means the underlying learning that improves Anren for everyone, not only for you, and that over time helps Anren grow its own understanding from having been with many lives. This part works differently from everything else here. Once something you've shared has shaped what Anren has learned, it becomes part of that general understanding and can't be pulled back out. Turning sharing off stops any new use of your data this way. You can still delete your account and your record at any time, but the learning that already happened stays. That learning isn't tied to your name and is never sold. We build it to capture general patterns rather than to store or reproduce what any one person wrote.
We keep your conversations and record for as long as your account is open, because remembering you is the service. If you ask us to delete something specific, we remove it from our live systems. When you delete your account, you get a 7-day hold by default (signing back in within those 7 days cancels it), or you can choose to erase immediately. Then your account and record are removed from our live systems: deleted, not hidden. A few things take longer or stay behind, and we'd rather tell you:
Beyond the providers listed below, we disclose personal information only in these cases:
We use reasonable safeguards for the sensitivity of what you share. Data is encrypted in transit and at rest by our hosting provider. Database access rules lock your record to your account. Our team's tools can't show conversation content unless you've turned sharing on, and access to content is logged. The keys to our AI provider stay on our servers, never on your device. No system is perfectly secure, though, and we can't guarantee that your information will never be accessed without authorization. If a breach affects your personal information, we'll notify you as the law requires.
These providers help run Anren. Most act only on our instructions, under contracts that restrict what they can do with your data. Some (Apple, Google, Stripe, and Resend for its own delivery records) also handle what they receive under their own privacy policies, because they run their own sign-in, payment or email systems. Our providers' staff can reach data only as needed to run their service, and providers use their own sub-processors, such as data-centre operators.
Enkara. To run Enkara, Supabase and Vercel store and serve what you put in it, and Anthropic's AI reads it. Anthropic does not train on it.
One more exists but is switched off, and would only run if you turned it on: a voice provider (if conversational voice ships). Enkara can also share a short distilled portrait with another app, but only when you grant it. We'll add any new provider here before it touches your data.
This list is current as of 2 November 2026. We update it when it changes. If you want to know exactly who holds what of yours, ask at privacy@anren.ai and we'll tell you.
Whatever state you're in, and whether or not you're paying, you can ask to access the personal information we hold about you, get a copy of it, correct it, delete it or your whole account, and withdraw consent to optional uses like sharing, as easily as you gave it. Some of this you can do yourself in the app (Tending → your data). For anything else, email privacy@anren.ai. We'll verify that the request comes from you, then respond within the time the law allows. If we can't fully honor a request, for example because the law requires us to keep a record, we'll tell you what we kept and why, and how to appeal. We won't charge you or treat you differently for exercising a privacy right.
Reflection naturally involves your relationships, and part of Anren holds them deliberately: the people you mention, who they are to you, and what’s alive or unresolved between you. Because this touches people who never signed up for Anren, it’s held under its own rules:
No one's conversations or record are shown to another person's Anren. If Anren ever adds anything shared directly between two people, it will need both people's clear consent. The general learning described above, if you turn sharing on, draws on many people at once and isn't a way for anyone to see what you wrote.
Some of what you share can count as consumer health data under Washington's My Health My Data Act and similar laws. That includes reflections about how you're doing, and the private sense Anren forms of that. We collect and use it with your consent, to provide Anren and, if you opt in, to improve and train it. We never sell it. We share it only with the processors named in our Consumer Health Data Privacy Policy, and in the cases under When we may share your information. You can withdraw consent and ask us to delete it at any time. The full details are in our separate Consumer Health Data Privacy Policy.
California residents have the right to know what personal information we collect and how we use it, and to access, delete, and correct it. You can also limit our use of sensitive personal information to what's needed to provide Anren. We don't sell personal information, and we don't share it for cross-context behavioral advertising. To exercise a right, email us. We won't discriminate against you for it.
We may update this policy as Anren changes. If a change is material, meaning a new use of your data, a new kind of data, a new kind of recipient, or a narrower right, we'll ask for your consent before it applies to you. For other changes we'll post the updated policy here with a new effective date.
Anren LLC, 8 The Green STE A, Dover, DE 19901. Questions, or want to see, export, correct, or delete your data? Email privacy@anren.ai.
See also our Terms of Service, Consumer Health Data Privacy Policy, and Safety & Crisis Support. · Effective November 2, 2026.
How your trust is held →