Privacy Policy
An Lịch is built with privacy as a first-class feature, not an afterthought. This policy describes what we collect, why, and your control over it.
1. Who we are
Operator: An Lịch team. Contact: support@anlich.app. We're an indie team based in Vietnam, not affiliated with any larger entity.
2. Data we collect
Account information
- Email address (for sign-in and security)
- Display name and optional avatar
- Locale preference
Content you create
- Virtual crush profiles you create
- Messages you send to virtual companions
- Letters you draft (never auto-sent)
- Wall posts (anonymized publicly)
- Coach profiles describing real-world crushes
Privacy-preserving identifiers (Secret Match)
For Secret Match, we store ONLY a SHA-256 hash of your normalized phone or social handle, salted with a global server secret. We never store the plain text. We cannot derive the original from the hash.
Technical data
- Device platform (iOS), app version, locale
- Approximate region from IP for rate limiting (not stored long-term)
What we do NOT collect
- Location (no GPS access requested)
- Camera or microphone (no permissions requested)
- Photos (no library access requested)
- Contacts (no address book access)
- Advertising identifier (no IDFA, no ATT prompt)
3. Why we collect it
- Provide the core service (chat, letters, wall, secret match)
- Authenticate you securely (account)
- Comply with content moderation rules (PII detection, self-harm screening)
- Detect abuse and rate-limit attacks
- Restore your data on a new device after sign-in
4. How long we keep it
Account-linked data: until you delete the account. After deletion, we permanently remove within 30 days. Backup retention up to 90 days under encryption. AI request logs: 30 days.
5. Subscriptions and one-time purchases
Apple processes all payments. We never see or store your card details. Receipt validation happens server-side via Apple's official receipt API. Subscription auto-renews until cancelled in iPhone Settings.
7. Third parties
- Apple — payments, push notifications, app distribution
- OpenAI — text generation for virtual crushes (no training)
- Google Cloud — voice synthesis when you enable daily voice notes
None of these third parties receive personally identifiable information beyond what's strictly required (e.g., a hashed user id for log correlation).
8. Your rights
Under GDPR, CCPA, and Vietnam Cybersecurity Law you have the right to: access your data, correct it, delete it, export it, restrict processing, object to processing, and withdraw consent. Email support@anlich.app to exercise any right. Response within 30 days.
9. Children
An Lịch is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has registered, contact us immediately.
10. Changes
If we materially change how we handle data, we will notify you in-app and by email at least 14 days before the change takes effect.