Privacy policy.

WithAnchor is operated by Doffy Labs LTD (“we”, “us”). We make a mobile app that helps people work on compulsive patterns using techniques from Acceptance and Commitment Therapy.

Contact for any privacy question: support@doffy.com.

What WithAnchor is, for this policy

WithAnchor is a non-medical, self-help practice tool. We do not create, receive, maintain, or transmit Protected Health Information (PHI) under the U.S. Health Insurance Portability and Accountability Act (HIPAA). We are not a covered entity, a business associate, or a “Part 2 Program” under 42 CFR Part 2. Nothing in the app is medical advice or treatment.

Everything in the app is information you choose to enter. We do not buy data, scrape your contacts, read your messages, or pull from external profiles.

Profile and onboarding

When you first open the app, you can answer a series of optional questions: your name, how long the pattern has been with you, when urges tend to come up, what triggers them, what success would mean to you, what you value, the tone of voice you prefer, and an optional written commitment. You can skip any of it; you can change any of it later in Settings.

Practice data

As you use WithAnchor, the app records the things you do inside it so that your progress is yours to look back on. This is:

• Sessions — when you start and end a grounding session (Drop Anchor or Surf), how long it lasted, the trigger you noted, the intensity, the outcome, and any short note you wrote.
• Slips — if you log a slip, the timestamp, the trigger you associated with it, an optional written framing, and which value you want to recommit to.
• Check-ins — your morning intention and evening reflection on whether the day pulled you toward or away from your values.
• Choice points and passengers — short entries from the in-app exercises.

Account

You can use WithAnchor without creating an account. If you do create one to back up your data and use it across devices, we accept two methods:

• Apple Sign-In. We receive the name and email address you choose to share with us (Apple lets you hide your real email behind a relay). We do not receive your Apple ID password.
• Email one-time code. You enter an email address and we send a six-digit code to confirm it. We do not store passwords.

By default everything stays on your device, in iOS’s standard encrypted local storage. The app works fully offline.

When you sign in to back up your data, your entries sync to a managed cloud database we operate. The sync is over HTTPS. Access is enforced server-side so only you can read or write your own data.

We retain your synced data for as long as your account exists, so you can re-install the app or move to a new device and pick up where you left off. If you sign out, your local data is cleared from that device but your server data is preserved until you sign back in or delete your account.

Some of what you can enter into WithAnchor is sensitive — by its nature it relates to sexual behaviour and may relate to your mental and emotional state. Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), this is treated as Sensitive Personal Information. Under the EU and UK GDPR, it includes special category data when it concerns health or sex life.

We process this information solely to provide the service to you — to show you your own history, surface relevant techniques, and keep your account in sync. We do not infer any characteristic about you to share with anyone, and we do not use this information for marketing, profiling, targeted advertising, or to train artificial intelligence or machine-learning models. If we ever introduce a feature that would use this information for any new purpose, we will ask for your explicit opt-in consent first.

• We will not sell your personal information, full stop. Not to data brokers, not to advertisers, not to anyone.
• We will not share your personal information for cross-context behavioural advertising.
• We will not use the content you enter (your notes, reflections, slips, check-ins, journals) to train any AI or machine-learning model — ours or anyone else’s.
• We do not contain advertising SDKs, behavioural trackers, or device fingerprinting.

We use a small number of vendors to run the app. Each one is chosen to do its job with as little personal data as possible. We do not name every vendor in this policy to keep the competitive picture of our stack opaque, but each falls into one of the categories below and each is required to provide protection at least equal to what we describe here.

• Cloud database and authentication. A managed infrastructure provider stores your account and the practice data you choose to sync. Data is held in a region in the United Kingdom or the European Union or the United States.
• Anonymous product analytics. A privacy-conscious analytics provider receives funnel-only events (e.g. onboarding completed, session started, feature used). Events are not linked to your account and we do not send the content of what you wrote — no slip notes, check-in reflections, or journal entries.
• Crash and error monitoring. When something goes wrong in the app, we receive stack traces and device metadata so we can fix it. Personal identifiers, IP address, cookies and session replay are disabled.
• Apple (App Store, Apple Sign-In, push notifications). Apple handles in-app purchases through the App Store and provides the optional Apple Sign-In flow. We never see your Apple ID password and we never see your full payment details. Subject to Apple’s privacy policy.

We do not sell your data to anyone, and we do not allow it to be used for advertising.

The app does not request access to your microphone, camera, location, contacts, health data, motion sensors, calendar or photos. The only optional permission we ask for is push notifications, used solely to send the daily check-in reminder at the hour you choose. You can decline or turn it off at any time in iOS Settings.

We do not run advertising SDKs, behavioural trackers, or fingerprinting tools.

Edit your profile

Open Settings inside the app to update any of the answers you gave during onboarding.

Turn off the daily reminder

Turn the daily check-in off in Settings, or revoke the notifications permission from iOS Settings.

Sign out

Signing out clears your data from the device. Your server backup remains so you can sign back in and restore it.

Delete your account

Settings → Delete Account permanently removes your account and all linked data (sessions, slips, check-ins, choice points, passengers) from our servers. The deletion cascades immediately; we keep no shadow copy. A paid subscription is managed by Apple and is not cancelled by deleting your account — manage it from iOS Settings → Apple Account → Subscriptions.

Request a copy of your data

Email support@doffy.com from the address linked to your account and we will export your data as a JSON file within 30 days.

Rights under GDPR, CCPA and similar laws

If you are in the EEA, the UK, California, or another jurisdiction with statutory privacy rights, you have rights of access, rectification, deletion, restriction, portability and objection. Email us at support@doffy.com to exercise any of them. We do not sell or share personal information for cross-context behavioural advertising.

We may produce aggregated or de-identified statistics — totals and trends with no link back to any individual — to understand how WithAnchor is used and to share basic launch metrics with partners or investors. Once aggregated or de-identified in a way that cannot reasonably be re-identified, this information is no longer personal data and is not subject to this policy.

WithAnchor is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you are between 13 and the age of majority where you live, you should use WithAnchor with the consent of a parent or guardian. If you believe someone under 13 has given us personal information, contact us and we will delete the account.

All sync traffic is encrypted in transit using HTTPS. Account data at rest is protected by our infrastructure provider’s managed encryption. Local data on your device is stored using iOS’s standard encrypted storage; authentication tokens are held in the iOS Keychain.

No system is perfectly secure. If we discover a breach affecting your personal data we will notify you and any applicable regulator without undue delay and in line with our legal obligations (for the EU and UK, generally within 72 hours of becoming aware). If you believe an account has been compromised, email support@doffy.com and we will respond within one business day.

This marketing website does not set tracking cookies, does not run advertising scripts, and does not embed third-party analytics that profile you across the web. If we add any measurement tooling in future we will disclose it here first.

Our servers are hosted in regions chosen by our providers. Data may be transferred and processed outside the country you live in, including the United States. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms.

If we make a material change we will update the effective date at the top of this page and, where appropriate, notify you in the app. Continued use after a change means you accept the updated policy.

Doffy Labs LTD
66 Paul Street, London EC2A 4NA, United Kingdom
support@doffy.com

For the Terms of Service that govern your use of WithAnchor, see the Terms.