Last Updated: October 5, 2026
anonopia is built with privacy at its core. You start anonymous, you control what you share, and all personal information is encrypted. We will never sell your data.
Welcome to anonopia ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services (the "Service").
We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.
Data Controller: anonopia
Contact: copa@anonopia.com
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Google Account (email, name) | Account creation and authentication | Contract performance |
| Profile Information (display name, age range, bio, photos) | Progressive identity sharing with connections | Consent |
| Q&A Responses | Facilitating meaningful conversations, and the "You both…" insights shown after a round | Contract performance |
| Mood & Intentions | Matching preferences (friends, romantic, exploring) | Consent |
| Donation Information | Processing voluntary donations | Contract performance |
| Waitlist sign-up (your email address) | Telling you when anonopia is ready for you | Consent |
| Data Type | Purpose | Retention |
|---|---|---|
| Location (GPS/IP) | Finding nearby players for local connections | Only a rough area (a 2 km square), never your exact position. Cleared 24 hours after you were last online. Your last area is kept privately for up to 30 days so your position stays steady between visits. |
| Cell Identity | Persistent anonymous identity within the game | Until account deletion |
| Device Information | Security, fraud prevention, bot detection | 30 days |
| Waitlist area and device type | Deciding where to launch first, and who to invite to test the iPhone app | Only your city or metro area and your country, worked out from your IP address when you join (or the city you pick from our list), never your exact location. We use your IP address for that lookup only and don't store it. We also note whether you signed up on an iPhone, an Android phone or a computer. Deleted with your waitlist sign-up. |
| Usage Analytics | Service improvement and debugging | 12 months (anonymized) |
| Your device's push token, or your browser's push address and keys | Sending notifications to your device or web browser, if you're signed in and allow them | Deleted about 30 days after we learn notifications are off for that device or browser. Signing out, deleting the app, or turning notifications off in your device's or browser's own settings may not reach us, and turning off individual notification types doesn't remove it. Until we learn, we may keep it with no set end date. We also delete it when your account is deleted. |
Our AI assistant "Copa" (powered by Anthropic's Claude) helps guide new users. Conversations with Copa are:
We use your information to:
We take data security seriously:
End-to-end encryption protects the text of your answers. Question text, timestamps, reactions, names, and anything you choose to share are not end-to-end encrypted — they remain protected the way all your other personal information is (encrypted at rest, restricted access).
We share data with trusted service providers who assist in operating our Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Authentication (OAuth) | Email, profile name | |
| Stripe | Payment processing | Payment details (handled directly by Stripe) |
| Anthropic | AI features: our assistant Copa, and the "You both…" insights shown after a Q&A round | Your messages to Copa. For insights, the question and both answers from a round once it's revealed. On end-to-end-encrypted connections, your device sends us your answer for this. Nothing is sent for insights if you or your connection have turned on Ultra Private. Anthropic doesn't use any of this to train its models. |
| Honeycomb | Performance monitoring | Anonymized usage metrics |
| AWS | Cloud infrastructure | Encrypted data storage |
| Mailchimp | Sending waitlist emails, such as your invitation to try anonopia | Your waitlist email address, area (metro area and country) and device type. Removed from Mailchimp when your waitlist sign-up is deleted. |
| Apple Push Notification service | Delivering notifications to the anonopia iPhone app, if you turn them on | Your device's push token and each notification we send to it: a short title and message, such as "A connection is now online", and the ids the app uses to open the right page. Notifications never include anyone's name or anything anyone wrote or shared. Apple can read them. |
| Firebase Cloud Messaging | Google's push service: delivering notifications to the anonopia Android app, if you turn them on | The same as Apple receives for the iPhone app, and Google can read it the same way. |
| Browser push services | Delivering notifications to your web browser, if you turn them on. Your browser picks the service, for example Google (Firebase Cloud Messaging) for Chrome, Mozilla for Firefox, Apple for Safari and Microsoft for Edge. | Your browser's push address and each notification, encrypted so that only your browser can read it. The service can see when we send a notification, how large it is and how urgent, and holds it until your browser is online to receive it. |
We work out your approximate area from your IP address on our own servers, so your IP address isn't sent to anyone for that. IP Geolocation by DB-IP.
When you connect with other players:
We may disclose your information if required by law, court order, or to protect our rights, safety, or the rights of others.
You have the following rights regarding your personal data:
Request a copy of all personal data we hold about you in a machine-readable format.
Correct any inaccurate personal data we hold about you.
Request deletion of your personal data. We will delete your account and all associated data within 30 days.
Request that we limit how we use your data.
Object to our processing of your data for certain purposes.
Withdraw consent at any time where we rely on consent as our legal basis.
Contact us at copa@anonopia.com with your request. We will respond within 30 days.
Account deletion isn't available in the app yet. To delete your account, email copa@anonopia.com.
| Data Type | Retention Period |
|---|---|
| Account Data | Until you delete your account |
| Q&A History | Until you or your connection deletes their account |
| Location Data | Rough area (2 km square): 24 hours after you were last online. Your last area, kept privately to steady your position: 30 days after your last location update. |
| Bot Conversations | Until account deletion |
| Push Tokens and Browser Push Addresses (with their keys) | About 30 days after we learn notifications are off for that device or browser. Until then, no set end date (see 2.2). We also delete them when your account is deleted. |
| Donation Records | 7 years (legal requirement) |
| Security Logs | 30 days |
| Waitlist Sign-ups (email, area, device type) | 12 months after you join the waitlist |
Your data may be transferred to and processed in the United States, where our servers are located. We ensure appropriate safeguards are in place, including:
anonopia is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we discover that a child under 18 has provided us with personal information, we will delete it immediately.
We use minimal tracking technologies:
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
If you have questions about this Privacy Policy or want to exercise your rights:
For EU residents, you have the right to lodge a complaint with your local data protection authority.
Back to anonopia