Privacy Policy — Ancre
Last updated: 2 October 2026
1. Purpose
This policy explains what personal information Ancre collects, why, with whom it is shared, how long it is kept, and what rights you can exercise. It applies to anyone who uses the Ancre application, offered by Coaching Millénium.
2. Who is responsible for your personal information
Coaching Millénium
978, rue Frontenac, Trois-Rivières (Québec) G8V 1G5, Canada
Person responsible for the protection of personal information: Sébastien Boyer
3. What Ancre is, and what Ancre is not
Ancre is a personal reflection and introspection tool enriched by artificial intelligence. Ancre is not a coaching service — the artificial intelligence performs no coaching activity — and does not replace support from a certified professional coach, nor any health care, nor any crisis intervention.
4. Information we collect
| Category | Description |
|---|---|
| Content you create | Answers to reflection sequences, journal, goals and follow-ups, optional first name |
| Technical identifiers | An installation identifier and — if you subscribe — your associated Google identifier, requested when you subscribe |
| Usage data | Statistics on interaction with the application (features used, progress through sequences) |
| Subscription data | Your subscription status and purchase history, handled by our billing partners |
| Approximate location | Only when the application directs you to support resources, and only with your permission |
| IP address | Received as a technical necessity when communicating with our servers. We do not keep the raw IP address; a pseudonymised fingerprint may be kept for the duration of the counting period, generally less than 24 hours, in order to prevent abuse |
We display no advertising and we neither sell nor rent your personal information to anyone. Google Analytics for Firebase collects certain usage data and certain technical identifiers for audience measurement and demographic analysis — Google itself classifies this data among the signals tied to its advertising features, and this information may be communicated to Google’s advertising services. In the European Economic Area and the United Kingdom, this collection takes place only with your consent, requested at first launch of the application. Elsewhere, it is active by default and rests on our legitimate interest in improving Ancre. In every case, you can turn it on or off at any time in the application’s Settings, under “Usage measurement” — and the application works exactly the same either way.
5. Why we collect this information, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Providing the guided reflection features enriched by AI | Performance of the service you request |
| Supporting your safety by directing you to appropriate resources | Performance of the service, and our legitimate interest in protecting the people who use Ancre |
| Processing your subscription | Performance of the subscription contract |
| Backing up your content if you subscribe, so that you find it again on a new device | Performance of the service, at your request |
| Measuring use of the application in order to improve it | Your consent (European Economic Area and United Kingdom) or our legitimate interest (elsewhere), depending on your jurisdiction |
6. How we protect your information
Your content stays on your device by default, protected by the separation your operating system enforces between applications. We limit what is transmitted to our technical partners to what is strictly necessary, and we design our integrations to minimise the identifying information that leaves — for example, the first name you choose does not accompany the requests sent to our artificial intelligence partners.
If you are a subscriber, what you write in Ancre (your answers, your journal, your goals, their check-ins and your first name) is encrypted on your phone before it is backed up online. The key only leaves your device encrypted: in your Google account’s vault, end-to-end encrypted by Google when your phone has a screen lock, and online, protected by your recovery key. Neither Coaching Millénium nor our providers can read your backup. In return, if you lose both your phone and your recovery key, no one can recover it. The dates and technical identifiers of items remain readable, to sync your devices. What you write is sent unencrypted to our artificial intelligence and moderation partners at the moment you write it: they could not analyse it otherwise.
7. With whom we share your information
We share your information only with the following categories of recipients, and only to the extent necessary to provide the service:
- Our technical hosting provider (currently Netlify) — carries your requests securely to our artificial intelligence partners. During that transit, it receives the submitted content and certain technical data, including your IP address.
- Our artificial intelligence partners (currently Anthropic and OpenAI) — to generate the reflection prompts and to provide a first level of detection of situations of risk.
- Our cloud infrastructure partner (currently Google, through Firebase) — for authentication, backup of subscribers’ content, and usage measurement.
- Our billing partners (currently RevenueCat and Google Play) — to process your subscription, where applicable.
- Additional technical providers supporting the operation of the application (for example, delivering updates or verifying the application’s authenticity) — with no access to the content of your reflections.
An up-to-date list of our processors, with their precise role, is available on request at the address given in section 2.
8. Transfers outside Quebec
Some of our partners are located outside Quebec, notably in the United States. These transfers are governed by contractual agreements providing for recognised protection measures, including standard contractual clauses where applicable.
Ancre+ subscribers’ content, backed up for recovery on a new device, is hosted in Quebec and does not leave it.
9. How long we keep your information
| Data | Retention period |
|---|---|
| Content on your device | Until you delete it, or uninstall the application |
| Online backup (subscribers) | During the subscription, then 180 days after it ends. You can delete it at any time from Settings. |
| Sign-in account (subscribers: your Google address, name and photo) | During the subscription, then 180 days after it ends, or 30 days after it ends if your backup is empty. An account created without the subscription being taken is deleted 30 days after it was created. |
| Information sent to our artificial intelligence partners | According to each partner’s retention policy, for the limited period necessary to prevent abuse. This information is not used to train their models. |
| Usage data | According to our analytics provider’s retention settings |
10. Your rights
You have the right to access your personal information, to have it corrected, to have it erased, to obtain a copy in a structured format, and to withdraw your consent where the processing depends on it.
You can exercise access, export and deletion directly from the application’s Settings. Deletion erases the content kept on your device and the online backup if there is one. The sign-in account associated with it is deleted automatically 30 days after your subscription ends; if you want it deleted sooner, write to us at the address below. Deleting your data does not cancel your subscription: cancelling is done in Google Play. If you no longer have access to the application, you can request deletion of your account and your online backup by writing to from the address of the linked Google account; we carry it out within 30 days.
Withdrawing your consent to usage measurement is done in the same place, under “Usage measurement”: a switch you can turn off at any time, as easily as you granted it.
For any other request, write to the address given in section 2 — we respond within 30 days.
If you believe your rights have not been respected, you may lodge a complaint:
- in Quebec, with the Commission d’accès à l’information;
- in the European Economic Area or the United Kingdom, with the data protection authority of your country.
11. Automated processing
Certain features of Ancre, notably those related to your safety, rely on automated analysis of the content you write. This analysis never leads to an automated decision imposed on you — it presents you with a question, and it is always your explicit choice that determines what follows.
The result of this analysis is not kept: it is used only during the current interaction and is recorded neither in your journal nor in our systems. The text you choose to save in your journal does, however, remain accessible in your journal, like any other content you enter there.
12. Minimum age
Ancre is intended for people 18 and over. We do not knowingly seek to collect the information of people below that age.
13. Changes to this policy
We may amend this policy. Any significant change will be communicated to you in the application before it takes effect, and the update date at the top of this document will be revised.
14. Contact us
Coaching Millénium — 978, rue Frontenac, Trois-Rivières (Québec) G8V 1G5, Canada
