Privacy Policy

Anivow operates an addiction-recovery app for patients and Anivow Care, a workspace for addiction clinicians and treatment centers. The Privacy Officer can be reached at support@anivow.com.

Anivow is designed to record and display information declared by the user and content assigned by a professional. Anivow does not diagnose, predict a relapse, choose a treatment or assess urgency. In case of immediate danger, contact your local emergency services directly.

• account: email, username, display name, optional avatar and sessions;
• self-declared information: themes, goals, triggers, reasons, measurements, mood and notes;
• journey: chosen routine, activities, completions, reminders and history;
• voluntary content: notes, messages, contact requests and reports;
• Snow: the message sent and recent history, only after separate consent;
• professional relationship: invitation, consents, assigned program, messages and shared information;
• subscription, notifications, support reports and minimized technical logs.

The app does not request GPS location, contacts, the microphone, HealthKit or IDFA advertising data. The region configured on the device may be used to display appropriate public resources without transmitting GPS coordinates.

Optional measurement on the public website is disabled without consent. It uses only page categories, language, general referrer and campaign categories, and an ephemeral session identifier. No form content, Care information or clinical information is added to it.

The Care portal keeps Supabase session tokens in the browser's local storage to keep you signed in. This storage is used for authentication and security; it is separate from optional measurement. Signing out removes the session saved in this browser. MFA codes and the setup key are not saved by the Anivow interface in this storage. On a shared device, sign out after use.

Clinicians and directors may voluntarily verify their email using a temporary single-use link. We keep the verified address and the verification date for their account. The link token is stored as a hash, expires after 30 minutes and is deleted once confirmed. This verification is not required to access Care and is not requested from patients.

Data needed for the account is used to provide, secure and administer the service. Connecting to a professional, Snow, notifications and optional analytics are subject to the choices presented in the app. Declining analytics does not prevent you from using the service.

Optional analytics are off by default. After separate consent, they record an account identifier, the name of a feature used, the time and a few bounded attributes such as a duration or an outcome. They can indirectly reveal the use of a wellness feature and are therefore treated as potentially sensitive. They contain no free text, mood, profile, goal, trigger, tracked category, contact, location or report.

Snow receives only the message you send and recent history of that conversation, after your versioned consent. Profiles, programs, tracking, relapse records, notes, contacts, payments and clinical information are not sent to it. Snow produces a reflective reply; it does not recommend an action, rank severity or make any decision about you.

Connecting to a clinic requires an invitation and an explicit action by the patient. The authorized clinic can see the information made available within that framework, including the assigned program, completions and the self-reports configured for the team. Private Snow conversations and unshared journals are not displayed. Accesses to the Care workspace and to patient records are logged. Disconnecting ends new access without deleting the patient's personal history, subject to the clinic's retention obligations.

• Supabase / AWS Ohio: authentication, database, storage and functions;
• Anthropic, United States: Snow replies and optional help drafting generic templates in the Program Builder when these functions are enabled;
• RevenueCat and the Apple/Google stores: subscriptions and purchases;
• Expo and Apple/Google: delivery of the notifications you choose;
• Sentry: sanitized diagnostics, with no report text and no PII sent intentionally.

Information may be processed outside Quebec and Canada and become subject to the laws of those jurisdictions. These flows are recorded in a technical privacy impact assessment whose accountable and legal approval is still required. During this review, Anivow limits the data transmitted and the access granted. We do not sell personal information and do not use it for targeted advertising.

• Snow: 90 days; the chat is deleted immediately when consent is withdrawn;
• optional analytics and onboarding events: 180 days at most; deleted immediately when consent is withdrawn;
• interventions: a period you choose between 30 and 730 days, 365 days by default;
• support reports: 90 days;
• notification content: minimized after 7 days and the row deleted after 30 days;
• account and main history: for the life of the account, unless the law requires otherwise.

Deleting the account triggers the deletion of the data and files controlled by Anivow, followed by a server-side check. Stores and providers may keep certain data under their own obligations. Documents already exported or shared remain under the control of their holder.

You may request access, correction and, where the law provides, portability or deletion of your information. You may separately withdraw the Snow, analytics and professional relationship consents in the app. For a request, a complaint or a question: support@anivow.com. We will verify the requester's identity and respond within the applicable deadlines. You may also contact the Commission d'accès à l'information du Québec.

Anivow uses encryption in transit and at rest, access controls, row-level security rules, logs and revocable sessions. Incidents are recorded in the internal register; individuals and authorities are notified where the law requires. No system can guarantee zero risk.

The service is for people aged 16 or older. Write to support@anivow.com if you believe an account belongs to a younger person.

A material change results in a notice and, where required, renewed acceptance in the app. The applicable version is shown at the top of the page.