Legal

Privacy Policy

Last updated 30 August 2026

This policy explains what information Antheia collects, why we collect it, who we share it with, and the choices you have. We've written it in plain language and kept it as short as we could without leaving things out.

At a glance

This table is a summary for convenience only. The full policy below governs.

01Scope

This policy applies to the Antheia website at tryantheia.com and the Antheia application (together, the Service). It describes how we handle information about visitors to our site and people who create an Antheia account.

It does not apply to third-party websites or services you reach through links or integrations. Those are governed by their own policies, and we encourage you to read them.

By using the Service you agree to the handling of information described here. If you don't agree, please don't use the Service.

02Definitions

To keep the rest of this document readable:

• "Personal information" means information that identifies you or can reasonably be linked to you.
• "Content" means the ideas you describe, the answers you select, and the app designs and code Antheia generates for you.
• "Usage data" means technical information generated automatically as you use the Service — for example which pages you view and what type of device you're on.
• "Service providers" means the companies we engage to help operate the Service on our behalf.
• "We", "us", "our" means Antheia. "You" means the person using the Service.

03Information we collect

Information you give us

• Account information. When you sign in with Google we receive your name and email address so we can create and identify your account. We never receive or store your Google password.
• Content. The ideas you describe, the answers you choose, and the designs Antheia produces for you. Content is saved to your account so that you can return to your work.
• Communications. If you email us or send feedback, we keep that correspondence and any information you include in it so we can respond and follow up.
• Payment information. If you subscribe to a paid plan, our payment processor collects your card details directly. We never receive or store your full card number. We receive a customer reference, the card's brand, last four digits, and expiry, your billing country, and the status of your subscription — enough to show you what you're paying for and to support you when something goes wrong.

Information we collect automatically

• Usage data. Pages and screens viewed, features used, actions taken, and the dates and times of those actions.
• Device and connection data. Browser type and version, operating system, screen size, language preference, and IP address (from which an approximate, city-level location can be inferred).
• Log data. Diagnostic records generated when something goes wrong, which help us identify and fix errors.
• Usage metering. For each design or app we generate for you, we record which AI models ran, how much work they did, how long it took, and what it cost us. We use this to apply your plan's allowance, to bill accurately, and to detect abuse.
• Cookies and similar technologies. See section 7.

Information from third parties

When you choose to sign in with Google, Google provides us with the basic profile information described above. What Google shares is governed by your Google account settings and Google's own privacy policy.

04How we use information

We use the information described above to:

• Provide the Service — create your account, generate app designs from your input, and save and display your work
• Maintain and improve the Service — understand which features are used, diagnose problems, and guide what we build next
• Keep the Service secure — authenticate you, detect and prevent abuse, fraud, and misuse, and protect the rights and safety of our users
• Communicate with you — respond to your messages, send service-related notices, and (where you've agreed, or where permitted) tell you about product updates
• Take payment — process subscriptions, apply your plan's usage allowance, issue receipts, handle refunds and failed payments, and keep the tax and accounting records we're required to keep
• Comply with legal obligations — meet requirements that apply to us and respond to lawful requests

We will not use your Content to train generalised, publicly available AI models.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under applicable law.

05Legal bases for processing

If you are in the European Economic Area or the United Kingdom, we process personal information on one or more of the following legal bases:

• Performance of a contract — to deliver the Service you've asked us for.
• Legitimate interests — to secure, maintain, and improve the Service, and to understand how it's used, where those interests aren't overridden by your rights.
• Consent — where we ask for it, such as for certain optional analytics or marketing. You can withdraw consent at any time.
• Legal obligation — where we're required by law to process or retain information.

06How we share information

We share information only as described below. We do not sell it.

• Infrastructure providers. Companies that host the Service, store data, and deliver it to your browser.
• Analytics providers. Companies that help us measure and understand how the Service is used.
• Communication providers. Companies that help us send service-related email and handle support correspondence.
• Payment providers. If you subscribe to a paid plan, a payment processor handles the transaction, verifies your card, guards against fraud, and holds the payment details we never see. It processes your information under its own privacy policy as well as ours.
• Professional advisers. Lawyers, accountants, and similar advisers, where reasonably necessary.
• Legal and safety. We may disclose information where we believe in good faith it's required by law or legal process, or where necessary to investigate abuse, enforce our terms, or protect the rights, property, or safety of our users, the public, or us.
• Business transfers. If Antheia is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We'll take reasonable steps to ensure it remains protected, and we'll notify you of any change in who controls your information.
• With your direction. We'll share information any other way you ask or agree to.

We require our service providers to use information only to perform services for us, and to protect it appropriately.

07Cookies and tracking

Cookies are small files stored on your device. We and our providers use cookies and similar technologies for the following purposes:

• Strictly necessary. To keep you signed in, maintain your session, and protect against security risks. The Service does not work without these.
• Preferences. To remember choices you've made so the Service behaves consistently.
• Analytics. To understand how the Service is used in aggregate, which pages are visited, and where people encounter problems.

Most browsers let you refuse, block, or delete cookies through their settings. If you block strictly necessary cookies, parts of Antheia will not function.

Some browsers transmit "Do Not Track" or Global Privacy Control signals. Where we're required to honour such a signal, we do.

08International transfers

Antheia is operated from, and information is processed in, countries that may differ from where you live — including the United States. Data-protection laws in those countries may not be equivalent to those in your own.

Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards recognised under applicable law, such as standard contractual clauses or a finding of adequacy. You can contact us for more information about the safeguards we use.

09Security

We take reasonable and appropriate measures to protect personal information. Data is transmitted over encrypted connections and stored with reputable infrastructure providers. Access is limited to those who need it to operate the Service, and authentication is handled by your identity provider rather than by passwords we store.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You play a part too: keep access to your email and Google account secure, since anyone who controls those can reach your Antheia account.

10Retention

We keep personal information for as long as we need it for the purposes described in this policy — in general:

• Account information — for as long as your account remains active.
• Content — until you delete it, or until your account is deleted.
• Usage and log data — for a limited period, after which it's deleted or aggregated so it no longer identifies you.
• Correspondence — for as long as needed to handle your request and keep a record of it.
• Billing, payment, and usage-metering records — for as long as tax and accounting law requires us to keep them, which is generally several years, even after an account is closed.

We may retain information for longer where we're required to by law, or where it's necessary to resolve disputes or enforce our agreements. Copies may persist for a short time in routine backups after deletion.

11Your rights and choices

Wherever you live, you can ask us to:

• Access the personal information we hold about you
• Correct information that's inaccurate or incomplete
• Delete your account and the Content within it
• Export a copy of the Content you've created
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

You can delete individual projects yourself at any time from your dashboard. For anything else, email privacy@tryantheia.com. We may need to verify your identity before acting, and we'll respond within the time required by applicable law.

Exercising these rights is free, and we will never treat you differently for doing so.

12Regional disclosures

European Economic Area and United Kingdom

In addition to the rights above, you have the right to lodge a complaint with your local data-protection supervisory authority if you believe we've handled your personal information improperly. We'd appreciate the chance to address your concern first — please contact us.

California

California residents have the right to know what personal information we collect and how we use and disclose it, to request deletion or correction, to request a portable copy, and to not be discriminated against for exercising these rights. We do not sell personal information, and we do not share it for cross-context behavioural advertising. The categories we collect and the purposes for which we use them are described in sections 3 and 4.

Other regions

If your local law grants you rights not listed here, we'll honour valid requests to the extent required. Contact us and tell us where you're located.

13Children's privacy

Antheia isn't directed at children, and we don't knowingly collect personal information from anyone under 13 (or under 16 in the European Economic Area). If you believe a child has provided us with personal information, contact us and we'll delete it.

14Third-party links

The Service may link to sites and services we don't control. We're not responsible for their content or privacy practices, and this policy doesn't cover them. Read their policies before providing them with information.

15Changes to this policy

We may update this policy as the Service evolves or as the law requires. When we do, we'll revise the "last updated" date above. If a change is significant, we'll take reasonable steps to notify you — for example by a notice in the Service or by email. Continuing to use Antheia after a change takes effect means you accept the revised policy.

16Contact us

Questions, requests, or complaints about privacy:
privacy@tryantheia.com

Anything else:
hello@tryantheia.com

We aim to respond to every privacy request promptly, and always within the period required by applicable law.