Privacy Policy

Last updated: 6 June 2026

This policy explains what personal data Anxio collects, how we use it, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). For data protection queries, contact hello@anxio.uk.

Data we collect

  • Account data: name, email, date of birth (to confirm you are 18+).
  • Wellbeing data: mood check-ins, journal entries, grounding-game reflections and self-care activity. This can include information about how you feel and is treated as special-category (health) data.
  • AI Companion messages: messages you send to the AI Companion and its replies.
  • Payment data: handled by Stripe. We do not store your card details; we keep a Stripe customer reference and subscription status.
  • Technical data: essential cookies and basic logs needed to run the service securely.

Why we use it and our lawful basis

  • To provide your account and the self-care tools — on the basis of our contract with you.
  • To process your mood, journal and AI data — on the basis of your explicit consent (UK GDPR Article 9), which you give before using these features and can withdraw at any time.
  • To take payment for Premium — on the basis of our contract with you.
  • To keep the service safe and meet legal obligations.

How your data is protected

Your mood and journal entries are private to your account and protected by database row-level security. We do not let staff casually browse private journals, and we never use your private journal content to train AI models. Data is hosted in the UK/EU region of our infrastructure provider.

Who processes your data

  • Supabase — database, authentication and hosting.
  • Stripe — payments.
  • Resend — transactional email.
  • Our AI provider — to generate AI Companion responses, on a zero-data-retention basis where available.

Selling data

We do not sell your personal data, and we do not use it for third-party advertising.

Retention

We keep your data while your account is active. You can delete individual entries at any time, or delete your whole account, after which your personal data is removed (some records may be retained where the law requires).

Your rights

You have the right to access, correct, export and delete your data, and to withdraw consent. Use the tools in Settings or see Data Rights. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We use essential cookies to run the service and optional cookies only with your consent. See our Cookie Policy.