Legal

Privacy Policy

What we collect, why we collect it, and what we will never do with it.

Last updated: August 2026

A note on this document. This is a good-faith first draft written to accurately describe how AnPath actually works today. It has not been reviewed by an attorney and should be before AnPath operates fully publicly with paying users. If anything here does not match your experience of the product, tell us at support@anpath.app and we will correct it.

Who we are

AnPath ("AnPath", "we", "us") provides a private service that helps families organize the documents, accounts, contacts, and decisions that matter when someone dies or becomes incapacitated. This policy explains how we handle information you give us. Questions can go to support@anpath.app.

Information you give us

Almost everything we hold is information you typed in deliberately. That falls into a few categories:

  • Account information. Your email address and authentication credentials, plus your name and the state you live in if you provide them during onboarding.
  • Estate and vault content. The records you create inside the app — documents and uploaded files, financial accounts, debts, subscriptions, physical and digital assets, insurance policies, contacts, deadlines, and end-of-life wishes. Some of this is inherently sensitive. It is treated as yours.
  • Collaborator information. If you invite someone to your estate, we store the email address you invited, the role you assigned, and the status of that invitation, so we can deliver the invite and enforce permissions.
  • Support and contact messages. If you email us, we keep the message and our reply.

Information generated by using the service

  • Activity and audit records. The app keeps an activity log of changes made to your estate — who changed what and when. This exists so that you and your collaborators can see and undo changes. It is a feature you can read in Settings and on the Activity page.
  • Email delivery records. When we send you a deadline reminder, an invitation, or another transactional email, we record the delivery status so you can see whether it arrived.
  • Standard technical logs. Our hosting and database providers record ordinary request and error information as part of operating the service securely.

How we use it

We use your information to operate the service you asked for: to authenticate you, store and display your records, send the reminders and invitations you configure, enforce the permissions you set for collaborators, respond to support requests, and keep the service secure and working.

We do not sell your personal information, and we do not share your estate data with advertisers or data brokers.

Third parties

We rely on a small number of service providers to run AnPath. They process data on our behalf, under contract, only to provide their service:

  • Supabase — database, authentication, and file storage.
  • Our hosting provider — serving the application.
  • Our transactional email provider — sending invitations, reminders, and account notices.
  • Our AI provider — if you use the AI Assistant, the content of that conversation is sent to a third-party model provider to generate a response. Do not paste anything into the assistant that you would not want processed by an external provider.

Referral partners and outbound links

AnPath's Pro Services and document helper sections link out to third parties such as LegalZoom, Avvo, Martindale-Hubbell, CPAdirectory, notary services, and government sites including the IRS and state vital records offices. Clicking one of those links takes you to a site we do not control, and that site's own privacy policy governs what happens there. We do not automatically transmit your account information, vault contents, or estate data to any referral partner. If you choose to give a partner your information on their site, that is a separate relationship between you and them.

Legal disclosure

We may disclose information if we are legally required to — for example, in response to a valid legal process — or where we believe it is necessary to protect someone's safety or to investigate fraud or abuse of the service.

Where your data lives and how it's protected

Your data is stored in a managed Supabase (PostgreSQL) database with file uploads held in Supabase Storage. Traffic between your browser and our servers is encrypted using HTTPS/TLS, and data is encrypted at rest by our infrastructure provider. Access to your estate records is enforced at the database level by row-level security policies tied to your account and to the role you assigned each collaborator — not merely hidden in the interface. Our Security page describes this in more detail, including what we deliberately do not claim.

Sharing inside your estate

You control who sees your data. Collaborators you invite receive a role, and that role determines what they can view and change. Beneficiary-style roles can be limited to a narrower view. Removing someone's access removes their ability to read your records going forward. Because collaboration is the point of the product, anything you share with a collaborator has genuinely been shared with that person.

Retention and deletion

  • While your account is active, we keep your data so the service works.
  • Deactivation is reversible: your account is suspended and your data is retained so you can reactivate by signing back in.
  • Deletion is not reversible. Using the delete flow in Settings removes your account and its associated estate records, uploaded files, and authentication record. You are offered a data export before confirming. Limited records may persist briefly in encrypted infrastructure backups until those backups age out on their normal schedule, and we may retain minimal records where we are legally required to.

You can start either flow yourself in Settings → Account Management, or email support@anpath.app and we will help.

Your choices

  • Access and correct anything in your vault directly in the app at any time.
  • Export your data to CSV from the list views, or as part of the deletion flow.
  • Turn off deadline reminder emails in Settings. Essential account emails — invitations, password resets, security notices — cannot be turned off while your account is open.
  • Request access, correction, or deletion by emailing us. Depending on where you live, you may have additional statutory rights; tell us what you need and we will work with you.

Children

AnPath is not intended for anyone under 18, and we do not knowingly collect information directly from children. Adults may record information about minor family members in their own vault.

Changes to this policy

If we make a material change, we will update the date at the top of this page and, where the change meaningfully affects you, notify you by email.

Contact

support@anpath.app — we reply within one business day.