Anything Privacy Policy

DRAFT, pending owner review

Draft updated October 17, 2026. Operator: Silfra Labs LLC. Contact: support@silfralabs.com. Initial launch is for people in the United States, aged 13 and older.

Information we handle

We use your email, password hash or Google/Apple sign-in identity, account identifier, session records, age band, AI-sharing agreement and version, optional display or credential-holder name, subscription status, and settings. We store only an age band (13–15, 16–17, or 18+), never your birth year or birthday-timing answer. Passwords are hashed; payment-card information stays with the stores.

Learning records include topics, goals, interests, prior exposure, answers, confidence, notes and imported flashcards, feedback, practice schedules, assessments, appeals and credentials. Social records include accepted invitations, buddy progress, blocks and reports. Optional notifications use your Firebase device token. Public credentials and share links expose the information shown in their previews; holder names are optional. Avoid including sensitive personal information in learning text.

AI and search recipients

With your agreement, relevant topics, answers, notes, source excerpts and content are sent to Microsoft Azure OpenAI and Azure AI Foundry. Foundry may use third-party models hosted on Azure, including Mistral and DeepSeek. These services generate lessons, grade answers and independently check content. Microsoft Azure AI Content Safety checks learner text and generated material for harm. AI can make mistakes; Anything teaches sourced facts and never gives personal advice.

Tavily receives the topic text you type, along with relevant search queries derived from the course and concepts, to find sources. It is a separate web-search provider. Wikimedia provides images; when your device fetches an image, Wikimedia can receive its IP address and request information. Following a source link connects you to that website under its own policy.

We request agreement before AI use and ask again when the recipient-list version changes. If you decline, you can sign out or delete your account. The learning service needs this processing to work. Provider retention, abuse monitoring and access follow the applicable provider agreements and settings. We do not represent that all providers have zero retention or that every third-party model has identical terms.

Other service providers

Microsoft Azure hosts the API and PostgreSQL database in the US. Azure Communication Services Email delivers password-reset emails and aggregate content-report summaries to our support address. Optional Azure Application Insights collects operational request timings, failures and dependency information when configured; we do not intentionally attach learning text, credentials or crisis-detection results.

RevenueCat receives our account ID, store purchase information and subscription state to manage access. On the device, an account-scoped marker records only the entitlement tier of a completed purchase whose access is being checked. It survives app restarts until access is verified or the account is deleted; it contains no payment-card information or receipt. Apple App Store and Google Play process purchases, renewals, cancellations and refunds. Google and Apple process their respective sign-in flows; Apple authorization tokens may be retained encrypted to support revocation when an account is deleted. Firebase Cloud Messaging handles device tokens and optional review and buddy notifications.

Google AdMob serves banner, between-session and optional rewarded ads when eligible. Google may collect device and advertising identifiers, IP address and ad interactions. Google UMP manages consent and privacy choices. Every ad request is subject to available consent, a known age group and a maximum T content rating. We request non-personalized ads; this does not mean that Google receives no device information. Teens receive age-restricted TEEN treatment and no personalized ads. Subscription and ad-placement eligibility determine which ads are available. Privacy options appear in Settings when UMP requires them. OS tracking controls also apply.

We do not sell learner text or send learning answers or crisis-detection results to advertising systems. Crisis detection is an ephemeral resource signal, excluded from analytics and experiments. It is not a diagnosis or a monitored emergency channel. Other providers may independently retain text submitted for safety processing.

Young learners

Anything is 13+. A neutral birth-year check happens before account creation. For an under-13 response we create no account and send or store no birth year. Existing accounts without an age band are asked on their next launch. Teen accounts cannot send or receive ID-based friend requests or export reasoning traces; Learn with me uses a direct invitation link. Contact support if a child under 13 has an account so we can remove it.

Retention and deletion

Account and learning history remain while the account exists so you can resume learning. Sessions expire after 30 days. Password-reset tokens expire after 30 minutes; security attempt records are cleaned after one day. Referral sign-up IP records expire after 90 days. Learning and subscription records can otherwise remain until deletion; no automatic inactivity-deletion period is currently configured.

Settings → Delete my account removes the account, private imports, associated learning records and device tokens from the active database, and requests supported third-party account cleanup and Apple token revocation. Store subscriptions must be cancelled separately in the store. Deletion does not erase public source material, shared curricula independent of your account, emails already delivered, or records that Apple, Google or other providers must retain. Guest-pass abuse-prevention hashes may remain to enforce one pass per person. Operational usage records may remain without a direct account link.

Backup retention and provider-specific deletion periods depend on the production configuration; Jonathan must verify and fill in those periods before approving this draft. We do not promise immediate removal from backups. Contact support for deletion requests outside the app or questions about remaining records.

Your choices and rights

You can change account information and notification settings, remove an optional public holder name, revoke a public credential, block buddies, report content, and delete the account. Depending on your US state, rights may include access, correction, portability, deletion and an appeal of a rights decision. Email support@silfralabs.com with your request; we verify ownership without asking for your password. We do not discriminate for exercising applicable rights. State-specific response deadlines and appeal procedures need owner review before publication.

Security and changes

We use access controls, hashed passwords and sessions, and encrypted transport. No system guarantees perfect security. We will provide legally required incident notices. We will identify material policy changes here and obtain renewed AI agreement when its recipient-list version changes.