Privacy policy
- The Anvil app has no accounts and no servers of its own. Your photos, weights, streaks and settings are stored on your phone.
- The app connects to Hevy only if you give it your own Hevy API key, and downloads public strength tables from FitnessVolt.
- This website stores your email and waitlist answers so we can tell you when the beta opens and decide on pricing.
- We don't sell your data, show ads, or use analytics or tracking in the app.
Who we are
Anvil is an independent app and website run by [full name of the person responsible] ("we", "us"). We are the data controller for the waitlist data described below, and we treat ourselves as responsible for how the app handles your data too.
Operator and contact details
Name: [full name]
Address: [correspondence address], Bulgaria
Email: getanvil.app@gmail.com
Phone: [phone number, optional]
The website and waitlist
What we collect
When you join the waitlist we store:
- your email address;
- a record of your consent: when you gave it, the version of the consent wording you saw and the version of this policy;
- if you answer them, the optional survey questions: which phone you use, what you would pay, and which apps you use;
- where you came from: a campaign tag in the link (for example "tiktok") or, if there is none, only the domain of the site that linked to us, never the full address.
Why, and on what legal basis
We use your email to tell you when the Anvil beta opens and to send occasional updates. The legal basis is your consent (GDPR Article 6(1)(a)), which you give with the checkbox on the form. You can withdraw it at any time with the unsubscribe link in every email or by emailing us. We keep the consent record to be able to show that you agreed (Article 7(1)).
The optional survey answers are used for product planning: whether to build for iPhone, and whether and how much to charge. They are not a promise of any price. Their legal basis is also your consent; you can skip them.
The source of your visit is used to see which channels bring people to Anvil, based on our legitimate interest in knowing where our audience comes from (Article 6(1)(f)).
Where it's stored
We use these service providers, each under a data processing agreement:
- Supabase stores waitlist entries in its Frankfurt (EU) region. Supabase, Inc. is based in the United States, and it or its sub-processors may access the data to run the service, protected by the EU Standard Contractual Clauses.
- Cloudflare, Inc. (Cloudflare Pages) hosts the website and processes standard request data (IP address, browser, time) to deliver the site and keep it secure. Cloudflare keeps these logs only for a limited period, set out in Cloudflare's privacy policy; we don't receive or keep them ourselves. Legal basis: our legitimate interest in keeping the site secure.
- [email provider, e.g. Resend] sends the confirmation and beta emails.
Fonts are hosted on our own site, so visiting it sends nothing to Google.
How long we keep it
Until you unsubscribe or ask us to delete it, or until 12 months after Anvil's public launch, whichever comes first. If you unsubscribe, we keep only your email and the date you unsubscribed, so we don't email you again by mistake.
The website uses no cookies, analytics or advertising trackers.
The Anvil app
Anvil stores everything on your device. We, the developers, never receive your photos, weights, food data or workouts.
| Data | What Anvil does with it | Where it goes |
|---|---|---|
| Progress photos | Takes, stamps (day, date, weight) and shows them | Stays on your phone. If you turn on Backup, copies go to your phone's gallery folder "Anvil Backup", which your own gallery app may back up. |
| Weight | Check-ins, trend chart, ranks | On your phone. Written to Health Connect so your other apps can read it. Sent to Hevy only if you turn on "Send my body weight to my Hevy account", which is off until you turn it on. |
| Nutrition (from Health Connect) | Reads which meals you logged today and their calories, to run reminders, the streak and the app lock | Read on your phone. Only a daily summary is kept: which meals were logged and their calories. |
| Workouts (from Hevy) | Downloads your workouts to show your last session and calculate ranks | From Hevy to your phone, using your API key. |
| Hevy API key | Used to talk to Hevy on your behalf | Encrypted on your phone with a key that never leaves it. Never backed up. |
| Which app is open (Usage access) | Checks whether the app in front is one you chose to lock | Checked on your phone in real time. Not stored or sent anywhere. |
| Sex, for ranks | Picks the male or female strength table | On your phone. |
| Crash reports | If Anvil crashes, the error is saved so you can copy it | On your phone only. Nothing is sent automatically. |
Health Connect
Anvil asks for permission to read nutrition and weight and to write weight. You choose what to allow in Health Connect and can change it any time. Data read from Health Connect is used only to provide Anvil's features described above. It is not used for advertising, not sold, and not shared with anyone. Anvil's use of Health Connect data follows the Health Connect Permissions policy, including its Limited Use requirements.
Services the app connects to
- Hevy (hevyapp.com), only if you add your API key. Hevy handles that data under its own privacy policy.
- FitnessVolt (fitnessvolt.com), to download public strength-standard tables about once a month. No personal data is sent, though FitnessVolt's servers see your IP address like any website.
- Google Android backup, if it's on for your phone: your check-ins, weights, streak and settings are included in your Google account's device backup. Photos, food data read from Health Connect and your Hevy key are never included, under Google's privacy policy.
Permissions
Camera (photos), notifications (reminders), Usage access and display over other apps (the app lock), running in the background and starting after a reboot (so the lock and reminders keep working), and internet (Hevy and FitnessVolt). You can refuse or revoke any of them; the features that need them stop working.
Deleting your data
Uninstalling Anvil deletes everything it stored on your phone. Gallery backup copies, data written to Health Connect and data sent to Hevy stay in those places until you delete them there. Profile → Export photos and data gives you a copy of everything first.
Your rights
Under the GDPR you can ask us for a copy of your waitlist data, to correct it, delete it, restrict or object to its use, or receive it in a portable format, and you can withdraw consent at any time. Email getanvil.app@gmail.com and we'll reply within one month. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the data protection authority where you live.
Children
The waitlist and the app are for people aged 14 and older. If you're under 18, please use Anvil with a parent's or guardian's knowledge. If you believe a child under 14 has signed up, email us and we'll delete the entry.
Changes
If we change this policy, we'll update the date at the top. For important changes, such as adding accounts or cloud sync, we'll tell waitlist members and app users before they take effect.