Privacy policy

Last updated November 10, 2026.

The short version

Anchor Plural collects nothing. There is no account, no server, no analytics, no advertising, and no AI. Everything you put in the app stays on your phone and in your own phone backups.

What the app stores, and where

Members, front history, notes, journal entries, polls, your safety plan, the message you wrote for a counselor, photos you chose for members, and your settings. All of it is stored inside the app’s own folder on your phone. Nothing is sent to us or to anyone else: the app has no server.

If you use iCloud Backup or back your phone up to a computer, the app’s data is included in that backup the same way every app’s data is, under Apple’s terms, not ours. If you delete the app, its data is deleted with it.

The weekly safety backup, if you leave it on, is a copy of the same data kept inside the app’s own folder, so an update or a mistake can be undone. It is not visible to other apps and leaves the phone only if you export it.

Export creates a file and hands it to the share sheet. Where it goes after that (AirDrop, Files, iCloud Drive, a message) is your choice and is governed by that service’s terms.

Things the app can do only if you turn them on

• Lock. Face ID, Touch ID, or your passcode, checked by iOS. The app never sees your face, fingerprint, or passcode; it only learns whether the check passed.
• Weather. Your approximate location is sent to Apple Weather to fetch the current conditions, under Apple’s privacy terms. The app keeps a 30-minute cache of the forecast on the phone and nothing else.
• Coming up. The app reads the next few events from your Apple Calendar to show them on the first screen. It never changes your calendar and never copies events anywhere.
• Reminders. Local notifications scheduled on the phone. They say only “Who’s here?” and never name a member.
• Widget, Live Activity, and Siri. These run on your phone and read a small snapshot of who is fronting, shared only with the app’s own widget. Anyone who can see your Lock Screen can see what you choose to show there.

Crisis lines and links

The “I need to talk to someone” screen opens your phone’s Messages or Phone app with a crisis service’s number, and the message you wrote prefilled. Nothing is sent until you tap send in that app. Once you send it, your conversation is with that service, under its own privacy terms. Anchor Plural is not affiliated with any crisis service and never sees what you send.

The “more lines” link opens findahelpline.com in your browser, under that site’s terms.

This website

This site is a few static pages. It sets no cookies, runs no scripts, and loads nothing from third parties. It is hosted on GitHub Pages; like any web host, GitHub receives your IP address when you load a page, under GitHub’s privacy statement. The address anchorplural.com forwards here through Vercel, which receives your IP address for that one step, under Vercel’s privacy policy.

Children

The app is not directed at children under 13 and collects no information from anyone.

Changes

If this policy changes, the date at the top changes and the new text is published at this address before it takes effect. Since the app collects nothing, the only changes we expect are new optional features that use a phone capability, described here before they ship.

Contact

Questions, or a wrong crisis number: write to support@anchorplural.org.

If you write to us, we receive your email address and whatever you put in the message, and we use them only to answer you. Mail to that address is passed to our mailbox by a forwarding service, ImprovMX, and the mailbox is hosted by Google; each handles it under its own privacy terms. Ask and we will delete your messages.