i.Who we are
Anzi is an independent app made by one developer, Ossama Fadili, who is also the seller named on Anzi's App Store and Google Play pages. That developer is the data controller for the little personal data described here. In this policy "Anzi", "we" and "us" mean Ossama Fadili. It covers the Anzi app for iPhone and Android and the website anzi.app.
We follow the EU General Data Protection Regulation (GDPR). Anzi is built to collect as little as possible: privacy is a core feature, not an afterthought. You can reach us at anzi@anzi.app.
ii.What stays on your phone
Anzi has no account and no cloud. Everything you put into the app is saved in its private storage on your phone:
- Purchases: the amount, what it was, where, the day, your rating (joy, meh or regret) and any later look-back
- Photos you attach to a purchase or a cool-down
- Return deadlines you set
- Cool-downs: what you wanted, the price, how long you chose to wait, and whether you bought it or let it go
- Settings: currency, language, check-in time, reminder times, app lock and Auto-log choices
- Simple counters (mornings, streak, app opens) that power your streak and a hidden diagnostics screen
We don't receive any of it, and the app sends none of it to us or to anyone else. Anzi never connects to your bank. Something leaves the app only when you choose to send it: Back up to a file, Export as CSV, Share diagnostics, a share card (a picture of your week, a purchase or your mornings, made on your phone, showing only what you leave switched on), or a share sheet you open yourself. It then goes only where you send it.
iii.Auto-log: payment notifications Android · Anzi Plus
Auto-log turns the payment notifications your bank or payment apps already show you into purchases you can add with one tap. It is off until you turn it on. It works only after you give Anzi Notification access in your phone's settings, and only while you have Anzi Plus. Until Anzi Plus goes on sale (planned for January 2027), Plus features are free for everyone.
Exactly what happens
- Android's notification access covers every notification on the phone, so Android hands each new one to Anzi's notification reader. All of this happens on your phone.
- A notification that doesn't show an amount of money (a currency sign or code next to a number) is ignored straight away and not stored.
- If it shows an amount and comes from an app you've switched on in Auto-log, Anzi keeps its title, text, app name and time in private storage until you next open Anzi. By default the switched-on apps are PayPal, Google Wallet, Samsung Wallet, Revolut, N26, Satispay, Wise, PostePay, BancoPosta, Intesa Sanpaolo and UniCredit. You can switch any of them off and others on.
- When you open Anzi, it picks out the amount and, where it can, the shop's name, and shows the payment on the Today screen. The notification's full text is deleted at that point.
- Money coming in, refunds, top-ups and failed or declined payments are skipped.
- If an app you haven't switched on shows an amount, Anzi notes only that app's name, never the text, so you can choose to switch it on.
- A found payment waits on Today until you tap Add or Not a buy. Anzi keeps a short ID of each notification it has offered so it never offers the same one twice. Anything still waiting is removed after 30 days, and when you turn Auto-log off.
Nothing Auto-log reads leaves your phone. Anzi has no server to send it to, and the Auto-log code makes no network requests. We, or anyone else, never see your notifications. They're never used for advertising or profiling, or to train AI. Auto-log is plain pattern matching on your phone, not an online AI service.
To stop it, switch Auto-log off in Anzi (this also deletes anything waiting), or remove Anzi's notification access in Android settings. If Anzi Plus ends, Auto-log stops reading.
On iPhone
iPhone apps can't read other apps' notifications, and Anzi doesn't try to. If you build an Apple Shortcut that opens Anzi with a payment's details, those details go from Shortcuts to Anzi on your phone, never through us.
iv.Notifications and reminders
Every Anzi notification is scheduled by the app on your phone (a "local notification"). There is no push server, and no device token or identifier is sent to us. They include:
- the morning check-in and reminders to log (13:30 and 20:00 by default; change or remove them in Settings)
- return reminders, two days before and on the last day of a return deadline you set
- "Still want it?" when a cool-down ends
- "Do you remember this?" memories, and the weekly and monthly summaries
Notifications can include an item's name and amount, and may show on your lock screen. Turn on Hide amounts in notifications in Anzi's Settings (it turns on by itself with the app lock) and they only say that something is waiting, never what or how much. You can also hide previews or turn notifications off in your phone's settings. Learn my times moves your reminders closer to when you usually log. It works this out on your phone from the times of your recent purchases.
v.Camera and photos
Anzi asks for your camera or photo library only when you add a photo. The photo is copied into Anzi's private storage. Anzi doesn't browse your library or save anything to your gallery. Deleting a purchase, a cool-down or all data deletes its photos too.
vi.App lock
If you turn on the app lock, your face or fingerprint is checked by your phone's operating system (Face ID, Touch ID or Android biometrics, with your passcode as a fallback). Anzi is only told "unlocked" or "not unlocked". We never receive or store biometric data.
vii.Home-screen widgets
If you add the Anzi widget, it shows a small summary such as today's total and your latest purchase. The app shares that summary with the widget on your phone. Anyone who can see your home screen can see it, so remove the widget if that matters to you.
viii.Backups and new phones
Your phone's own backup can include Anzi's data: iCloud or a computer backup on iPhone, and Google's backup on Android. On Android, photos are left out of the cloud backup because of Google's size limit. A direct transfer to a new phone still brings them along. These backups are stored in your Apple or Google account under their terms, and we can't access them.
Because we never have a copy, we can't restore your journal if you delete Anzi without a backup.
ix.Anzi Plus purchases
Anzi Plus is sold through the App Store and Google Play. Apple or Google take your payment and handle billing, renewals, cancellations and refunds. We never see your card or bank details.
To know whether Plus is active, the app asks the store directly from your phone. It receives the product you bought and the state of the transaction, and keeps that on your phone. We don't run a server that stores purchases. Apple and Google process your payment data as independent controllers under their own privacy policies (Apple, Google). Like every developer, we get the stores' sales reports and order records. We use them only for accounting, support and refunds.
x.This website
- Hosting. anzi.app is hosted by Vercel, which logs basic technical data (IP address, browser, page and time) to run and protect the site. We don't use these logs to track or profile anyone.
- Fonts. The site's fonts are served from anzi.app itself, so your browser doesn't contact Google or any other font service.
- Store links (anzi.app/go/…) send you to the App Store or Google Play based on your device type, with a campaign tag that the stores read. They set no cookies, and we store nothing about the visit.
- No cookies, no analytics, no ad pixels. No Google Analytics, no Meta Pixel, nothing like that.
xi.The pre-launch waitlist
If you joined the waitlist before Anzi launched, we hold your email address, the date you signed up and the page that brought you, with MailerLite (based in the EU). We use them only to send Anzi news. Unsubscribe with the link in any email, or ask us to delete your address.
xii.Legal bases (GDPR)
- Your journal and Auto-log. Your journal stays on your device and is processed by the app on your instructions; we don't receive it. Optional features such as Auto-log rely on your consent (Article 6(1)(a)), which you withdraw at any time by switching them off.
- Anzi Plus. Performance of a contract (Article 6(1)(b)), with Apple or Google handling payment. We keep the stores' sales records because tax and accounting law requires it (Article 6(1)(c)).
- Waitlist emails. Your consent (Article 6(1)(a)).
- Website logs and security. Our legitimate interest in running a safe website (Article 6(1)(f)).
- Emails you send us. Our legitimate interest in answering you (Article 6(1)(f)).
xiii.Who we share data with
We never sell or rent your data, and we never share it with advertisers. The few services involved are:
- Vercel: hosts anzi.app (US-based; transfers of EU data are covered by Standard Contractual Clauses). Vercel Privacy Policy
- MailerLite: stores waitlist emails and sends our emails (Lithuania, EU). MailerLite Privacy Policy
- Apple and Google: run the app stores, take payments for Anzi Plus and hold your phone's backups. They act as independent controllers.
xiv.Your rights
Under the GDPR you have the right to access, correct, delete, restrict and export your personal data, to object to its processing and to withdraw consent at any time. You can also complain to a data protection authority, for example the one in the EU country where you live or work.
Your journal is already in your hands. Settings → Back up to a file saves your whole journal (everything except photos) to a file you keep wherever you choose, and Import a backup brings it back on a new phone. Settings → Export as CSV gives you a copy of every purchase for a spreadsheet. Settings → Delete all data erases every purchase, rating, cool-down and photo. Deleting the app removes everything stored in it.
For anything we hold (waitlist emails, messages you've sent us), email anzi@anzi.app. We'll reply within 30 days, usually much sooner.
xv.How long data is kept
- In the app: until you delete it, or delete the app.
- Auto-log: notification text only until you next open Anzi. Found payments until you add or skip them, at most 30 days if you don't open Anzi.
- Waitlist: until you unsubscribe or ask us to delete it. Deleted addresses can stay in our provider's backups for up to 30 days.
- Emails to us: as long as needed to help you.
- Website logs: for the short period set by Vercel.
xvi.Security
Data in the app is protected by your phone's app sandbox and storage encryption, and by the app lock if you turn it on. The website runs on HTTPS with a strict security policy. No system is 100% secure, but the safest data is data that never leaves your phone, and that is how Anzi is built.
xvii.Children
Anzi is not meant for children under 16, and we don't knowingly collect data from minors. If you think a child has given us personal data, for example by joining the waitlist, contact us and we'll delete it.
xviii.Changes to this policy
When Anzi changes how it handles data, we update this page and the date at the top. If a change is significant, we'll also mention it in the app's update notes, and email waitlist subscribers.