← ankrd

Privacy policy

Last updated: July 2026

Who we are

ankrd ("we", "us") operates the ankrd productivity app at ankrd.co.uk. For data protection queries, contact privacy@ankrd.co.uk. See also our Terms of Service.

What we collect

  • Account data: email address and password (stored hashed by our auth provider).
  • Content you create: tasks, ideas, events, notes, reflections, goals, projects (spaces), capture text, AI coach responses, scheduling fields (dates, times, durations), and task-breakdown suggestions.
  • Preferences: theme setting (light/dark).
  • Voice input: transcribed in your browser via the Web Speech API. We do not store raw audio — only the resulting text if you submit it.
  • Calendar sync: if you use subscribe-to-calendar, we generate a personal feed URL tied to your account. Scheduled items you choose to date are included in that feed.
  • On your device only: your email may be remembered in browser localStorage so you can log back in more easily after signing out. This is not sent to our servers.

Why we process it (lawful basis)

  • Contract: processing necessary to provide the ankrd service you signed up for (account, storage, AI parsing, focus, calendar export).
  • Legitimate interests: keeping the service secure and improving reliability, balanced against your rights.
We do not sell your personal data.

How we use AI

Capture text and related context (existing goals, projects) are sent to Anthropic server-side to parse items, generate focus reasons, daily quotes, reflection coaching, recurring-theme detection, and task-breakdown suggestions. Reflection content may include feelings or mindset — treat it as personal data, not as clinical or health records. AI output is stored in your account when you save captures.

Third parties (subprocessors)

  • Supabase — authentication, database hosting (region depends on your project configuration).
  • Anthropic — AI processing as described above. Our API key is never exposed to your browser.
  • Vercel — application hosting and delivery.
Where processors are US-based, we rely on appropriate safeguards (e.g. UK Extension to the EU–US Data Privacy Framework or Standard Contractual Clauses). Review each provider's data processing terms in your own account dashboards.

Cookies and similar technologies

We use essential session cookies to keep you logged in. These are strictly necessary for the service and do not require marketing consent. We do not use advertising or analytics cookies at this time.

Retention

We keep your data while your account is active. When you delete your account, we permanently remove your profile, spaces, goals, entries (including reflections and coach responses), and cached quotes. Calendar feed links stop working once the account is deleted.

Your rights

Under UK GDPR you can request access, correction, export, or deletion of your data. Export and account deletion are available in Settings. You may also lodge a complaint with the ICO (ico.org.uk).

Security

Data is encrypted in transit (HTTPS) and at rest via our hosting providers. Database access follows least-privilege principles with row-level security per user. Keep your calendar subscribe link private — anyone with the link can read your scheduled items.

Children

ankrd is not intended for users under 16. We do not knowingly collect data from children.