Privacy Policy

This Privacy Policy explains how Ilatech Software FZE (“Akrasia”, “we”, “us”) collects, uses, shares, and protects your personal data when you use the Akrasia mobile app and the akrasiaapp.com website (the “Service”).

Data Controller: Ilatech Software FZE, Ajman Free Zone, Ajman, United Arab Emirates. Contact: privacy@akrasiaapp.com.

Akrasia is a self-awareness app that helps you notice patterns in your behavior. By its nature, we process personal and sometimes sensitive information. Please read this policy carefully.

1. Applicable Law

Because the Service is offered globally, different data protection laws may apply depending on where you are: UAE users — Federal Decree-Law No. 45 of 2021 (PDPL); EEA/UK users — GDPR / UK GDPR; Türkiye users — Law No. 6698 (KVKK); all users — Apple App Store and Google Play privacy requirements.

2. Personal Data We Collect

Data you provide directly: account information (email, name; if you sign in with Apple or Google, we receive email, name, and profile photo where available); photos you take when using the “magic moment” feature; behavioral inputs (notes, check-ins, goals, tracked areas, mood/state markers and similar self-observation data).

Data collected automatically: device and usage data (device type, OS, app version, usage statistics); approximate location — the app does not collect GPS/precise location, but our analytics and attribution services may derive an approximate (country/city-level) location from your IP address (see Section 5); your device's push notification token.

Payment data: payments are processed through third-party providers (RevenueCat, Stripe). We do not see or store your full payment details such as your card number; we receive only limited information such as your subscription status.

3. Your Photos and AI Analysis

Akrasia's core feature is generating a behavioral insight from a photo you take. The photo is uploaded to our secure cloud storage (Supabase Storage) and associated with your account.

For analysis, the photo is sent to Anthropic, a third-party AI provider, via its API (Claude). This means the photo itself is transmitted to Anthropic.

Under Anthropic's commercial API policy, Anthropic does not use inputs and outputs submitted via the API to train its models. Inputs/outputs are retained for a limited period for abuse prevention and legal compliance, then deleted.

Your photos are not saved to your device's gallery; they are kept only in our cloud storage and you can delete them at any time (see Section 8).

4. Purposes and Legal Bases

We process your data for the following purposes (GDPR Art. 6 basis in parentheses): account creation and authentication (performance of a contract); photo analysis and insight generation (contract); weekly summary and pattern detection (contract); sending push notifications (consent); product improvement and analytics, including approximate location (legitimate interest); subscription management (contract); compliance with legal obligations (legal obligation).

5. Third-Party Service Providers

We work with the following third parties, each accessing only the data necessary for its purpose: Supabase (database, authentication, storage — account, behavioral data, photos); Anthropic / Claude (photo/text AI analysis — photos, related text); RevenueCat / Stripe (subscription and payment — payment status, subscription info); PostHog (product analytics — usage events, IP-derived approximate location); Branch (referral attribution — device/attribution data, IP-derived approximate location); Resend (transactional email — email address); Expo (push notification infrastructure — push token).

About approximate location: PostHog and Branch may, by default, derive an approximate country/region/city-level location from your IP address. This is not precise (GPS) location.

6. International Data Transfers

The data controller is located in the UAE, and our service providers may operate servers in different countries (notably the US and EU). Your personal data may therefore be transferred outside your country. For these transfers, we seek to provide appropriate safeguards as required by applicable law (for example, Standard Contractual Clauses under the GDPR).

7. Data Retention

We retain your personal data for as long as necessary for the purposes described in this policy or as required by our legal obligations. When you delete your account, your data is deleted or anonymized from our systems within 30 days. Data remaining in backups is deleted within the backup cycle.

8. Your Rights

Depending on your jurisdiction, you may have the right to access your data and receive a copy (an “Export my data” feature is available in the app), request rectification, request erasure (“right to be forgotten”), restrict or object to processing, withdraw consent (for consent-based processing such as notifications), and lodge a complaint with the relevant supervisory authority.

To exercise these rights, contact privacy@akrasiaapp.com. We will respond within 30 days.

9. Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, and misuse (encryption, access controls, row-level security, etc.). However, no internet service is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Akrasia is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that someone under 18 has provided us with data, we will delete it.

11. Crisis / Help Resources

Akrasia does not automatically scan your notes for crisis or risk. The app's Settings section includes a list of crisis/help resources (helplines) you can reach out to yourself when needed. This list is for informational purposes only and is not a substitute for professional help.

12. Changes & Contact

We may update this policy from time to time. For significant changes, we will notify you in the app or by email. The current version is always published here.

For any privacy questions, requests, or complaints: privacy@akrasiaapp.com — Ilatech Software FZE, Ajman Free Zone, Ajman, UAE.