Anchor

1. Information We Collect

1.1 Account Information

When you create an Anchor account, we collect:

• Email address (required for authentication)
• First and last name (optional)
• Age range (optional, for analytics)
• Postal code and country (optional, for localization)

1.2 Sub-Profile Information

When you create sub-profiles for household members (e.g., family members), we collect:

• First name
• Age range (to enable age-appropriate privacy protections)
• PIN hash (encrypted, for profile switching)

1.3 Task & Content Data

• Tasks you create (description, due date, status, assignee)
• Asset inventory data (home, vehicles, pets, self-care interests)
• Task completion records (who completed, when)
• Custom task templates and catalogs

1.4 Usage Analytics (If You Consent)

With your consent, we collect analytics data through PostHog to improve Anchor:

• Page views and navigation patterns
• Feature usage (which features you use and how often)
• Error logs (sanitized to remove personally identifiable information)
• Session recordings (screen replays for debugging, automatically disabled for child profiles)

You can opt-out of analytics, error tracking, and session recording in your Privacy Settings.

2. How We Collect Information

• Directly from you: When you create an account, fill out forms, or enter tasks and content.
• Automatically: Through cookies and similar technologies when you use Anchor (see our Cookie Policy).
• From your device: Device type, browser, operating system (for compatibility and debugging).

3. How We Use Your Information

• Provide Services: To enable task management, reminders, and core app functionality.
• Personalization: To customize your experience based on preferences and usage patterns.
• Improve Anchor: To analyze usage, identify bugs, and develop new features.
• Security: To prevent fraud, unauthorized access, and ensure platform security.
• Communications: To send service notifications, updates, and respond to support requests.

4. Third-Party Services & Data Sharing

We use the following third-party services to operate Anchor:

4.1 Supabase (Database & Authentication)

• Purpose: Store user accounts, tasks, and application data
• Data Shared: All user-generated content (tasks, profiles, assets)
• Location: United States (AWS infrastructure)
• Supabase Privacy Policy

4.2 PostHog (Analytics & Error Tracking)

• Purpose: Usage analytics, error tracking, session recordings (if consented)
• Data Shared: User ID (pseudonymous), events, error logs, session recordings
• Location: United States (Google Cloud)
• PII Protection: Error logs are sanitized; session recording disabled for children
• PostHog Privacy Policy

4.3 Netlify (Hosting)

• Purpose: Application hosting and content delivery
• Data Shared: None (static hosting only)
• Netlify Privacy Policy

5. Cookies & Tracking Technologies

We use cookies and similar technologies (like localStorage) for authentication, preferences, and analytics. For complete details, see our Cookie Policy.

6. Your Privacy Rights

6.1 Colorado Privacy Act Rights

If you are a Colorado resident, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correct: Request correction of inaccurate information.
• Delete: Request deletion of your personal information (subject to legal exceptions).
• Opt-Out: Opt-out of targeted advertising (we do not engage in this) or sale of data (we do not sell data).
• Data Portability: Receive your data in a portable format.

To exercise your rights, contact us at admin@turtle-o.tech.

6.2 CCPA Rights (California Residents)

California residents have similar rights under the California Consumer Privacy Act. Contact us to exercise CCPA rights.

7. Sub-Profiles & Children's Privacy

7.1 Parent-Mediated Access Model

Anchor allows primary account holders (adults 18+) to create sub-profiles for household members, including children. This is a parent-mediated access model:

• Children access Anchor through the parent's device and account
• All data collected through sub-profiles is owned by the primary account holder
• Parents control all sub-profile data and can delete it at any time

7.2 Child Privacy Protections

When a sub-profile is identified as a child (age range under 18):

• Session recording is automatically disabled
• Analytics events are logged under the parent's account
• No direct marketing or targeted advertising

7.3 COPPA Compliance

We do not knowingly collect personal information directly from children under 13 without verifiable parental consent. Our parent-mediated model ensures parents control all data collection. If you believe we have inadvertently collected information from a child without consent, contact us immediately.

8. Data Security

We protect your information using industry-standard measures:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest (database-level encryption via Supabase)
• Row-Level Security (RLS) policies to isolate user data
• PIN-based sub-profile access (hashed and salted)
• Regular security audits and updates

However, no system is 100% secure. Please use strong passwords and protect your account credentials.

9. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide services
• Required by law (e.g., financial records, compliance)

When you delete your account, we delete your personal information within 30 days, except where retention is required by law.

10. International Users

Anchor is operated from the United States. If you access Anchor from outside the US, your information will be transferred to and stored in the United States, which may have different data protection laws than your jurisdiction.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on this page with a new effective date
• Sending a notification through the app or via email

Continued use of Anchor after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

• Email: admin@turtle-o.tech
• Company: Turtle-O Tech, Ltd.
• State: Colorado, United States