Privacy

Your records are stored in Supabase Postgres in Singapore (ap-southeast-1). The app runs on Vercel; functions execute in Singapore (sin1), so requests and server logs also pass through Vercel.

Some data still leaves Singapore. Google handles sign-in and Stripe handles payments from infrastructure outside Singapore. PostHog, our analytics provider (more below, under "Cookies & analytics"), runs from the United States. Supabase and Vercel may also access systems from elsewhere for support and operations. Where that happens we rely on those providers' own data processing terms, which bind them to a standard of protection comparable to what the PDPA requires of us. Your Anguardia records themselves are not moved out of Singapore.

We use PostHog for product analytics, hosted on PostHog Cloud in the United States — the one processor above running outside Singapore, noted under "Where it lives."

On the app, PostHog never sees what you write. We send it a handful of named events — that you signed up, created your first follow-up, started checkout — tagged with your account ID, never your name, email, or the content of a capture, task, or dossier.

On the marketing site, PostHog also records page views and how visitors scroll and click before signing up. All page text is masked in that recording, and it never runs on the app — the one place your real data would be on screen. Marketing-site browsing uses an anonymous ID that is never linked to your account, so how you found us is not connected to your signed-in activity.

PostHog sets cookies and local storage entries to do this. Browser privacy tools that block third-party analytics — ad blockers, Brave Shields, Do Not Track extensions — will stop it working, and nothing else on the site depends on it. Deleting your account, as described below, also removes the PostHog record tied to your account ID.

Your account's data is visible only to your account. Anguardia is single-seat: no teams, no roles, no sharing with other users. Cross-account isolation is checked by automated tests on every change.

Anguardia is not end-to-end encrypted. Data is encrypted in transit (TLS) and at rest by our database provider, but the operator (ShiftMalam) has technical access to the database and could read stored content.

That access is for diagnosing bugs and providing support — nothing else. We do not read your content as a matter of routine. We never sell it. We never use it to train AI models.

Why we say so: many products imply privacy they don't have. If you handle client data under a confidentiality obligation, decide with this in mind.

Under Singapore's Personal Data Protection Act you can ask us for a copy of the personal data we hold about you, and for an account of how it has been used or disclosed in the year before you ask. You can ask us to correct anything wrong. You can withdraw your consent to our handling of your data at any time — though for most of what we hold, withdrawing consent means closing your account, because the data is the product.

Email the address below. We will respond within 30 days, and if something will genuinely take longer we will tell you when to expect it rather than let it go quiet.

You do not need to ask us for a copy of your own records — the markdown export in Settings gives you everything, immediately, without going through us.

Your records stay while your account is open, because that is what the product is for. If you close your account or ask us to delete it, we remove your records from the live database within 30 days. Encrypted backups roll off on their own cycle within 90 days, and we do not restore a deleted account from them.

We keep basic payment and invoice records for as long as Singapore tax and accounting law requires us to, which is currently five years. That is a legal obligation, not a preference, and it survives deletion of everything else.