Privacy Policy

This Privacy Notice for Ancla Tech LLC ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at https://www.anclado.app, download and use our mobile application (OnePenny), or use Anclado — a portal of personal productivity and finance apps whose first app, OnePenny, helps users track expenses, scan and organize receipts, manage credit cards and loans, and monitor their overall financial health.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at legal@anclado.app.

Personal information you disclose to us. We collect personal information that you voluntarily provide when you register for the Services, express interest in our products, or otherwise contact us. Depending on how you interact with us, this may include: names, phone numbers, email addresses, mailing addresses, passwords, and contact or authentication data.

Sensitive information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information: financial data and credit worthiness data.

Payment data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the associated security code. All payment data is handled and stored by Stripe. You may find their privacy notice at https://stripe.com/privacy.

Application data. If you use our application(s), we may also collect the following if you grant access or permission: mobile device access (camera, storage, Face ID, Touch ID (biometric authentication), and other features — you can change these permissions in your device's settings at any time), and mobile device data (device ID, model, manufacturer, operating system, browser type and version, hardware model, internet service provider, and IP address). This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for internal analytics and reporting purposes.

Information automatically collected. Some information — such as your IP address and browser/device characteristics — is collected automatically when you visit our Services. This includes log and usage data (service-related, diagnostic, usage, and performance information such as your IP address, device information, browser type, activity in the Services, and device event information). This is primarily needed to maintain the security and operation of our Services and for internal analytics and reporting purposes. You can find out more in our Cookie Notice at https://www.anclado.app/legal/cookies.

Google API. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including to: facilitate account creation and authentication and otherwise manage user accounts; deliver and facilitate delivery of services to you; respond to your inquiries and offer support; send you administrative information about our products and services, and changes to our terms and policies; fulfill and manage your orders, payments, returns, and exchanges made through the Services; request feedback and contact you about your use of our Services; protect our Services, including fraud monitoring and prevention; evaluate and improve our Services, products, marketing, and your experience, including identifying usage trends and determining the effectiveness of our promotional campaigns; and comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with these third parties designed to safeguard your personal information — they cannot use it for anything other than what we've instructed, cannot share it with any other organization, and commit to protecting it and retaining it only for the period we instruct.

The third parties we may share personal information with, by category:

AI Service Providers — Google Cloud AI, Google Gemini, and Anthropic.

Cloud Computing Services — Supabase and Vercel.

Invoice and Billing — Stripe.

Website Hosting — Vercel.

Website Testing — TestFlight.

Transactional Email Delivery — Resend.

We may also need to share your personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. These help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice at https://www.anclado.app/legal/cookies.

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies ("AI Products"). We provide the AI Products through third-party AI Service Providers, including Anthropic and Google Cloud AI. Your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products.

Our AI Products are designed for the following functions: image analysis (reading a scanned receipt to extract its details), natural language processing, AI insights (the Financial Health Index's written recommendations), and AI bots (the "Ancla" support chat).

All personal information processed using our AI Products is handled in line with this Privacy Notice and our agreements with these third parties.

How to opt out. You can contact us using the contact information provided, or choose manual data entry instead of AI-powered receipt scanning and avoid using the AI-powered support chat.

We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law. No purpose in this notice requires us to keep your personal information for longer than one (1) month past the termination of your account.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if that isn't possible (for example, because it's stored in backup archives), we will securely store it and isolate it from further processing until deletion is possible.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from a minor, please contact us at legal@anclado.app.

You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw it at any time by contacting us at legal@anclado.app. This will not affect the lawfulness of processing before its withdrawal.

Account information. If you would like to review or change the information in your account, or terminate your account, you can log in to your account settings (https://www.anclado.app/settings) and update your account, or contact us. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases; however, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with applicable legal requirements.

Cookies and similar technologies. Most web browsers accept cookies by default. You can usually set your browser to remove or reject cookies; doing so may affect certain features of our Services. See our Cookie Notice at https://www.anclado.app/legal/cookies for more.

If you have questions or comments about your privacy rights, you may email us at legal@anclado.app.

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your preference not to have your online browsing activity monitored. No uniform technology standard for recognizing DNT signals has been finalized, so we do not currently respond to DNT browser signals or any other automatic mechanism communicating your choice not to be tracked online. If a standard is adopted that we must follow in the future, we will inform you in a revised version of this Privacy Notice.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we've processed it, correct inaccuracies, get a copy of, or delete your personal information, and withdraw your consent to our processing of it. These rights may be limited in some circumstances by applicable law.

Categories of personal information we collect, and whether we've collected each (based on the past twelve months): Identifiers (e.g. name, address, phone number, email, IP address) — collected. Personal information under the California Customer Records statute (e.g. name, contact information, financial information) — collected. Characteristics of protected classifications under state or federal law (e.g. age/date of birth, collected only for age verification — we do not collect gender, race, or other demographic data in this category) — collected. Commercial information (transaction and financial details) — collected. Biometric information — not collected (Face ID/Touch ID never leaves your device). Internet or network activity, geolocation data, audio/visual/sensory information, professional or employment information, and education information — none of these are collected. Inferences drawn from your information (the Financial Health Index) — collected. Sensitive personal information (financial information including account access details, and account login information) — collected.

We only collect sensitive personal information as permitted by law or with your consent, and do not process it for the purpose of inferring characteristics about you. We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve months. We have disclosed identifiers, California Customer Records information, protected-classification characteristics, commercial information, inferences, and sensitive personal information to our service providers (see "When and with whom do we share your personal information?") for a business purpose in the preceding twelve months.

We retain each of these categories for as long as you have an account with us.

Your rights may include: the right to know whether we're processing your personal data; the right to access it; the right to correct inaccuracies; the right to request deletion; the right to obtain a copy of what you've shared with us; the right to non-discrimination for exercising your rights; and the right to opt out of processing used for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects. Depending on your state, you may also have the right to access the categories of personal data being processed, obtain a list of third-party categories (or specific third parties) we've disclosed data to, obtain a list of third parties we've sold data to, review and correct how your data has been profiled, limit the use of sensitive personal data, and opt out of biometric or facial/voice recognition data collection.

To exercise these rights, contact us by visiting https://www.anclado.app/settings or by emailing legal@anclado.app. Under certain state laws, you can designate an authorized agent to make a request on your behalf — we may ask for proof they're validly authorized. Upon receiving a request, we'll verify your identity, using only the information provided in the request itself unless we need more to confirm it or prevent fraud.

Appeals. If we decline to act on your request, you may appeal by emailing legal@anclado.app. We'll inform you in writing of any action taken, including our reasoning; if your appeal is denied, you may complain to your state attorney general.

California "Shine the Light" law. California residents may request, once a year and free of charge, information about any personal information we disclosed to third parties for direct marketing purposes in the preceding calendar year, by writing to legal@anclado.app.

Yes, we will update this notice as necessary to stay compliant with relevant laws. An updated version will be indicated by a revised date at the top. If we make material changes, we'll notify you by prominently posting a notice or sending you a direct notification.

If you have questions or comments about this notice, email us at legal@anclado.app, or contact us by post at:

Ancla Tech LLC, 867 Boylston Street, 5th Floor, Boston, MA 02116, United States.

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we've processed it, correct inaccuracies, or delete it. To do so, please visit https://www.anclado.app/settings.