AnchorPath Privacy & Confidentiality Policy
Effective July 25, 2026

AnchorPath (operated by Lab256 LLC) is a recovery-support platform. Because recovery information is deeply sensitive, we treat it with more care than ordinary app data. This policy explains what we collect, how we use it, and the rights you have.

1. What we collect, and how
Information you give us:
• Account details: your handle, email address, and — kept private and never shown publicly — your legal name and date of birth (used only to confirm you are 18+ and, where applicable, to connect you to your treatment organization).
• Recovery content you create: check-ins (mood and craving level), journal entries, your sobriety date, posts, comments and messages. Your journal and check-ins are private to you.
• Photos and videos you choose to upload — a profile photo, images in posts, and short videos. Videos include their audio.
• Emergency contacts you add to your support circle: the name and the phone number or email you type in. We never read your device's address book, and the app does not ask for access to it.
• A phone number, where you give us one — for example as an emergency contact, or if you are staff at a partner organization.
• Anything you write to us for help, such as an email to support.

Information collected automatically:
• Location, only when you use a feature that needs it. The app asks permission the first time. It is used to find recovery meetings near you, to attach your location to an SOS alert if you allow it, and to show the right crisis number for the country you are in. Denying it does not block anything — SOS still sends, without a location.
• A device push token, so we can send you a notification. It identifies the device, not you.
• A user ID we generate for your account.
• Crash reports and basic performance data, so we can find and fix faults. These are processed by Sentry (sentry.io) and are not used to identify you.

We do not run third-party ad networks, we do not track you across other companies' apps or websites, and we do not sell your data. The provider directory carries paid listings from treatment organizations; those are labelled "Sponsored", are a flat fee and never a payment per person referred, and no data about you is shared with them.
2. How we use it
• To run the app: your feed, communities, messages, milestones, and reminders.
• To support you: the AI companion (only after you agree — see section 3) and optional proactive check-ins.
• To keep you safe: crisis detection that surfaces the 988 Suicide & Crisis Lifeline.

3. Third-party AI processing
The AI companion is the only part of the app that sends anything about you outside AnchorPath, and it sends nothing until you have been shown this list on screen and tapped to agree. You are asked before your first message. Using the app is not treated as agreement.

Who receives it: Anthropic, PBC, the company behind Claude — https://www.anthropic.com/legal/privacy

What is sent, each time you write to the companion:
• The message you type, and the recent conversation you have had with it.
• Your first name, so it can greet you properly.
• Your sobriety date and day count, if you have set one.
• Your time zone and the current time.
• The title, time and place of any meeting in your groups in the next 24 hours, and whether you said you were going.
• Your last three check-ins — mood, craving level and any note — ONLY if you separately turn that on in Settings. It is off unless you turn it on.

How it is collected: the fields above are read from your account on our server at the moment you send a message, and transmitted over TLS to Anthropic's API. Nothing is collected from your device beyond the message you type and your time zone.

What is never sent: your journal entries, your private messages with other people, your email address, date of birth or phone number, and nothing about who else is in your groups.

How it is used and protected: Anthropic processes the message to generate the reply and returns it to us. Under Anthropic's commercial terms, inputs submitted through their API are not used to train their models. We do not sell your data, and we do not send it to any other AI service. We use it only to produce the companion's reply to you.

Withdrawing: Settings → AI companion → stop sending to the AI provider. The companion stops working immediately and nothing further is sent. Withdrawing also turns off check-in sharing.

Separately, staff at treatment organizations have message-drafting tools that send the text they are drafting to the same provider. That is staff-facing business correspondence and is not your recovery content.

4. 42 CFR Part 2 (federal confidentiality of substance-use records)
• Your legal name and date of birth are never shown to other users.
• Being a member of a private, organization-owned community (e.g. a treatment center's alumni network) is never revealed to non-members.
• A treatment organization can see your individual milestones ONLY if you explicitly turn on sharing for that organization in Settings — and you can turn it off at any time.
• Off-app notifications (email/SMS) are deliberately generic and never reveal that you are in a recovery program.

5. Your choices and rights
• Private profile, hide-your-days-sober, and per-organization sharing toggles in Settings.
• Delete your account at any time from Settings → Account → Delete account. Deletion is permanent and cannot be undone. Your private recovery data — journal, check-ins, sobriety history, SOS records and AI conversations — is erased, and your name, email, date of birth and photo are removed. Messages, posts and comments you sent to others remain in their conversations, shown as “Deleted user”, so the people you talked with keep their own history.
• Contact us at privacy@anchorpath.io with any question or request.

6. Not medical care
AnchorPath is a peer-support and wellness tool, not a medical or clinical service, and the AI companion is not a clinician. In an emergency call 911; in a crisis call or text 988.

7. Changes
We'll update this policy as the product grows and will note the effective date above.

Questions? privacy@anchorpath.io