ENDE

Privacy Policy

Last updated: September 2026

1. Overview

The Anger App is designed with privacy as a core principle. All core features work entirely on-device. We do not sell your data to third parties.

2. Data We Collect

On-Device Only (Free Tier): Anger entries, journal logs, personal sequences, and usage data remain exclusively on your device. We cannot access this data.

Website Analytics: We use Google Analytics 4 (GA4) to understand how visitors use our website. This is gated behind your cookie consent. GA4 data is pseudonymised with a truncated IP and is not used to identify you individually.

Contact Forms: When you submit a contact or beta signup form, we collect your name and email to respond to your inquiry. This data is processed via Resend and stored securely.

Beta Feedback Survey: If you choose to submit the optional Beta Feedback Survey on /get-started, your responses are processed by Tally BV on our behalf. The survey iframe is only loaded if you have accepted cookies. The data collected includes:

  • NPS score and launch-readiness assessment
  • Usage frequency and per-module ratings (Anger Flow, Breathing, Meditation, Hypnosis)
  • Interest in future AI-based features (Need-Finder, Communication Helper)
  • Learning-module usage, look-and-feel feedback, and fulfilment assessment
  • Any free-text answers you provide
  • The email, first name, and platform you arrived with (passed via URL from your beta-signup link)

State of Anger 2026 Survey: If you choose to take part in the State of Anger 2026 survey on /anger-survey, your responses are processed by Tally BV on our behalf. The embedded survey is only loaded if you have accepted cookies; otherwise you can open it directly on tally.so. Responses are anonymous (no personal details are required) and results are published exclusively in aggregate form, never as individual responses. If you voluntarily provide your email address at the end of the survey, we use it solely to send you the finished report (Art. 6(1)(a) GDPR); you can withdraw at any time.

6-Week Email Course: If you sign up for the free 6-week email course, then after you confirm via double opt-in we store your email address, first name, start date, language, and course progress. The legal basis is your consent (Art. 6(1)(a) GDPR); your timestamped confirmation serves as proof (Art. 7 GDPR). This signup is its own thing, separate from the newsletter. During signup you can additionally, and voluntarily, consent to occasional tips and news. Only if you tick that separate box do we add you to the mailing list (see "Newsletter and tips" below). Your course runs independently of it. The emails are sent via Resend and the enrollment data is stored with Upstash. You can unsubscribe at any time via the link in every email; we then delete your enrollment. After the course finishes, the record is automatically deleted after about 90 days.

Beta reminder emails: When you sign up for the beta you can additionally, and voluntarily, consent to us emailing you the feedback survey and one single reminder. This consent is separate from the beta signup itself. Your beta place and your access details do not depend on it. It covers the emailing only; the survey itself is described under "Beta Feedback Survey" above. We send you one confirmation email. Only when you click the link in it do we add your email address and first name to a Resend audience created specifically for this purpose. That audience is separate from the beta participant list and from the newsletter audience, and it is the only one that receives the survey emails. The legal basis is your consent (Art. 6(1)(a) GDPR); your timestamped confirmation serves as proof (Art. 7 GDPR). You can withdraw your consent at any time, via the unsubscribe link in any of these emails or by writing to us. Without your confirmation we send you no survey and no reminder.

Newsletter and tips: If you consent to receiving occasional tips and news from The Anger App, we store your email address and your first name. The legal basis is your consent (Art. 6(1)(a) GDPR); your timestamped double opt-in confirmation serves as proof (Art. 7 GDPR). The contact details are managed in an audience at Resend. You can withdraw your consent at any time, via the unsubscribe link in any of these emails or by writing to us. After withdrawal your address is marked as unsubscribed and receives no further marketing email. If you also want it erased entirely (Art. 17 GDPR), a message to the address in our imprint is enough.

Embedded Videos (YouTube): Some blog articles, the Science page, the Resources page and the install guide offer optional videos. No connection to YouTube or Google is made when you open the page. Only if you click the play button is the video loaded from YouTube's privacy-enhanced player (youtube-nocookie.com); at that point YouTube (Google Ireland Ltd. / Google LLC, US) receives your IP address and device information. Your click constitutes consent for that individual video (Art. 6(1)(a) GDPR, §25 TDDDG).

Embedded Podcast (Spotify): The Resources page lets you listen to The Anger App podcast in place. No connection to Spotify is made when you open the page. Only once you load the player by clicking does Spotify (Spotify AB, Sweden) receive your IP address and device information, and it may then set its own cookies. Your click constitutes consent for that player (Art. 6(1)(a) GDPR, §25 TDDDG).

Book covers: The book covers on the Resources page are served from our own server. No third-party images are loaded when you view that page.

The Anger App Mobile App: The app is built so your personal content (anger entries, journal logs, personal sequences, panic-album images and usage data) stays on your device. A small number of services process limited data, and only for the specific function you use:

  • Guided audio downloads (Cloudflare R2): When you choose to download a guided meditation or hypnosis session, the audio file is delivered from our content-delivery network (Cloudflare R2). Cloudflare receives standard web-request metadata: your IP address, the requested file path and your device user-agent. The transfer is download-only; nothing from your device is uploaded, and no account is involved.
  • Subscriptions and purchases (RevenueCat): When paid plans are active, we use RevenueCat to manage purchases and unlock the features you bought. RevenueCat processes your purchase, receipt and entitlement data together with an anonymous RevenueCat identifier. No account, name or email address is created or shared. (Payments themselves are charged by Apple or Google; see below.)
  • Cloud backup (Android, Premium, once live): Automatic cloud backup is an optional Premium feature and works differently by platform. On Android, your encrypted journal is uploaded to Cloudflare infrastructure (EU region). It is encrypted on your device with a recovery code only you hold, so we cannot read it. On iOS, the app does not operate its own cloud backup: if you have Apple's iCloud Backup turned on in your device settings, iOS backs the app up as part of your whole-device backup under Apple's own iCloud terms, not ours. Free users keep manual encrypted export and import on both platforms, permanently. Backup stays off unless you enable it; the app is fully usable on-device only.
  • Founding and early-bird offer status (Cloudflare): When you open the paywall, the app asks a small service on our Cloudflare account how many founding and early-bird slots remain, so the offer you see is accurate. That request carries standard web-request metadata (your IP address) and nothing from your entries.
  • Daily reminders: Reminder notifications are scheduled locally on your device. No push token is generated and nothing is transmitted to us or any third party.
  • “Send feedback” button: If you tap Send feedback, the app opens your own email application with a message pre-filled with your app version, device model and OS version, addressed to our angerapp.io support address. The message is sent through your own email provider; we receive only what you choose to send.
  • Panic-album images: Any photos you add to your calming album are stored locally and are never uploaded.
  • Referrals: If you arrive through a referral or share link, we record the referral code so we can credit the person who referred you, and the reward is applied to your entitlement. We do not build a profile about you from it.
  • App stores (Apple / Google): The app is distributed, and payments are processed, by the Apple App Store and Google Play. Your store account and payment data are handled by Apple or Google under their own privacy policies.

AI Features: Only two features use an AI language model, and only when you actively use them: the website's Angry Message Translator today, and the app's Chat Training coaching conversation once it launches. Both send the text you enter in that session to a vetted external provider, currently Anthropic (Claude), under a full Data Processing Agreement and appropriate security measures, solely to produce your reply. Your input is not used to train AI models and is not tied to your name or an account. Chat Training is off by default and, because the conversation can touch sensitive feelings, is gated behind your explicit consent (Art. 9(2)(a) GDPR). The app's other features, including the Emotional Check-In and the NeedFinder, run entirely on your device with no AI and no network connection. These AI features are optional; please avoid entering details you would not want processed by an AI model.

3. Legal Basis (GDPR)

We process data under Art. 6(1)(a) GDPR (consent) for analytics, optional embedded content, the optional AI features and cloud backup; Art. 6(1)(b) GDPR (performance of a contract) for contact-form responses, guided-audio delivery, subscription and entitlement management and referral rewards; and Art. 6(1)(f) GDPR (legitimate interest) for the limited technical metadata needed to deliver files you request and to handle feedback you send us.

4. Data Retention

Contact form submissions are retained for up to 12 months. You may request deletion at any time by contacting privacy@angerapp.io. If you use the Android cloud backup and your subscription lapses, your existing backup stays readable for 30 days and is then permanently deleted from Cloudflare.

5. Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict, and port your personal data. Contact privacy@angerapp.io for any requests.

6. Cookies

We use cookies for analytics (GA4) only, and only with your consent. See our Cookie Policy for details.

7. International Data Transfers and Sub-Processors

We use the following sub-processors:

  • Resend (Resend Inc., US/EU): transactional email and audience management for contact forms, beta signup, the 6-week course, the beta reminder emails, and the newsletter audience. SCCs in place per GDPR Art. 46.
  • Tally BV (Belgium/EU): beta feedback survey on /get-started and the State of Anger 2026 survey on /anger-survey. EU-based, with a published DPA and sub-processor list at tally.so/help/gdpr. Embedded surveys only load if you accept cookies.
  • Google Analytics 4 (Google LLC, US): pseudonymised website analytics with truncated IP, only with your cookie consent.
  • YouTube (Google Ireland Ltd. / Google LLC, US): optional videos on blog articles, the Science page, the Resources page and the install guide, loaded via the privacy-enhanced youtube-nocookie player only after you click play. No data flows to YouTube before that click.
  • Spotify (Spotify AB, Sweden/EU): embedded podcast player on the Resources page, loaded only after you click. No data flows to Spotify before that click.
  • Cloudflare (Cloudflare, Inc., US): content-delivery network hosting guided-audio files for optional in-app download, plus the offer-status service and, once live, the encrypted Android cloud backup (EU region). Processes standard request metadata (IP address, file path, user-agent). Backup content is encrypted on your device and unreadable to Cloudflare and to us. SCCs in place per GDPR Art. 46.
  • RevenueCat (RevenueCat, Inc., US): in-app purchase and subscription management. Processes purchase, receipt and entitlement data plus an anonymous RevenueCat identifier; no account, name or email. Dormant until paid plans launch. SCCs in place per GDPR Art. 46.
  • Anthropic (Anthropic PBC, US): external AI language model (Claude) powering the website message translator and, once it launches, the app's Chat Training feature. Processes the text you submit in that session to generate a reply; does not train on your input; operates under a Data Processing Agreement. SCCs in place per GDPR Art. 46.
  • Upstash (Upstash, Inc., US): serverless data store. It holds anonymous counters, such as the vote tallies on the /roadmap page and internal usage counts, and, if you sign up for the 6-week email course, your course enrollment record (email, first name, start date, language and progress). Roadmap voting stores no personal data: only the item's identifier is sent, and whether you have already voted is remembered by your browser alone. SCCs in place per GDPR Art. 46.

Your personal app data (journal entries, anger logs, panic-album images) is stored locally on your device and is never transmitted to servers of The Anger App or any sub-processor.

8. Data Security

Your personal content stays on your device and is never sent to us. Where data must leave your device (downloading audio, managing a purchase, uploading an encrypted backup, or sending feedback) it travels over encrypted (TLS/HTTPS) connections. Transfers to sub-processors outside the EU are covered by Standard Contractual Clauses. Because we do not operate a central database of your personal app content, there is by design very little that could ever be exposed.

9. US Users / California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Opt-Out of Sale: The Anger App does not sell your personal information to third parties. This right is therefore not applicable.
  • Right to Non-Discrimination: We will not deny services, charge different prices, or provide a different level of service based on your exercise of CCPA rights.

To exercise your rights, contact us at privacy@angerapp.io. We will respond within 45 days as required by law.

10. Contact

Data Controller: Praxis Foundry LLC, represented by Dr. Johannes Hangl (Managing Member)
4030 Wake Forest Road, STE 349, Raleigh, NC 27609, United States of America
Email: privacy@angerapp.io

Privacy Policy · The Anger App