Effective Date: February 26, 2026
Last Updated: March 1, 2026

Anakrio (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, process, store, and protect your information when you use our website, platform, applications, and related services (the “Service”).

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for processing personal data is:

Anakrio
Location: Norway
Email: [email protected]

For users in the European Union (EU), European Economic Area (EEA), and Norway, processing is conducted in accordance with:

The General Data Protection Regulation (GDPR)
The Norwegian Personal Data Act
Applicable EEA legislation

2. Principles We Follow (GDPR Article 5)

We process personal data in accordance with the principles of:

Lawfulness, fairness, and transparency
Purpose limitation
Data minimization
Accuracy
Storage limitation
Integrity and confidentiality
Accountability

We collect only the data necessary to operate and secure the Service.

3. Information We Collect

3.1 Information You Provide

Account information (username, email address, encrypted password)
Profile information (bio, profile photo, optional details)
Content you post (messages, comments, uploads)
Communications with support

3.2 Automatically Collected Information

IP address
Device type and browser information
Log data
Security and fraud detection signals
Cookies and similar technologies

3.3 Third-Party Login Information

If you use a third-party login provider (e.g., Google), we may receive:

Email address
Basic profile information

We do not access more data than necessary.

4. Legal Basis for Processing (GDPR)

For users in the EU/EEA/Norway, we process personal data under:

Contractual necessity – to provide the Service
Legitimate interest – to improve security and prevent abuse
Consent – where required (e.g., non-essential cookies)
Legal obligation – where required by law

Where processing relies on legitimate interests, we conduct balancing assessments to ensure your rights are respected.

5. How We Use Your Information

We use personal data to:

Provide and maintain the platform
Authenticate users
Prevent fraud and abuse
Improve performance and security
Communicate service updates
Display contextual or non-personalized advertisements

We do not engage in invasive behavioral profiling.

6. Verified Badge & Identity Verification

If you voluntarily apply for a Verified Badge:

Government-issued identification may be temporarily processed.
Verification is conducted exclusively through manual human review.
No automated biometric profiling or facial recognition is used.

Identification documents are processed solely to:

Confirm authenticity
Prevent impersonation
Protect platform integrity

Identification documents are:

Never sold
Never used for marketing
Never used for advertising
Never stored long-term

All identification documents are permanently deleted immediately after verification is completed, regardless of outcome.

7. No Sale of Personal Data

Anakrio does not sell personal data.

We do not:

Sell user information
Trade or rent personal data
Share personal data for third-party marketing

For U.S. users, we do not “sell” personal information under the CCPA or similar state laws.

8. Advertising & Analytics

Advertisements may be:

Contextual
General audience-based
Non-personalized

If analytics tools are used:

Data collection is minimized
IP anonymization may be enabled
Retention is limited

We do not create cross-platform identity resale profiles.

9. Cookies & Tracking Technologies

We use cookies for:

Essential functionality
Security
Performance optimization
Advertising (where legally permitted and consented)

Users in the EU/EEA/Norway may manage non-essential cookies through consent tools.

Consent can be withdrawn at any time.

10. Data Retention

We retain personal data only as long as necessary for:

Providing the Service
Legal compliance
Security and fraud prevention

We apply storage limitation principles in accordance with GDPR.

11. Data Sharing & Processors

We may share personal data with:

Hosting providers
Security providers
Payment processors (if applicable)
Legal authorities (when required by law)

All processors are bound by data processing agreements and confidentiality obligations.

We do not share personal data for commercial resale.

12. International Data Transfers

Data may be processed within the EEA or in jurisdictions providing adequate protection.

Where transfers occur outside the EEA, we rely on:

Standard Contractual Clauses (SCCs)
Adequacy decisions
Other lawful safeguards

13. Your Rights (EU / EEA / Norway)

Under GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion
Restrict processing
Data portability
Object to processing
Withdraw consent

You may download a copy of your stored personal data directly through your account settings at:

https://anakrio.com/settings/information

You may delete your account at any time via:

https://anakrio.com/settings/delete

If you cannot access your account, you may contact [email protected].

You have the right to file a complaint with the Norwegian Data Protection Authority (Datatilsynet).

14. U.S. Privacy Rights

Depending on your state of residence, you may have rights to:

Request access
Request deletion
Correct inaccurate data
Opt out of certain processing

We do not sell personal information under applicable U.S. laws.

15. Security Measures

We implement appropriate technical and organizational measures including:

HTTPS encryption
Access controls
Monitoring systems
Data minimization practices

No system can guarantee absolute security.

16. Children’s Privacy

The Service is not intended for children under 13.

We do not knowingly collect personal data from children under 13.

If identified, such data will be deleted promptly.

17. How We Delete Data

Users may delete their account at:

https://anakrio.com/settings/delete

When deletion is requested:

The account is marked for deletion.
Access is disabled.
Personal data is removed from active systems.

User-generated content may be:

Deleted; or
Anonymized where necessary to preserve platform integrity.

Backup systems may temporarily retain encrypted copies for security and disaster recovery purposes.

Such backup data is automatically overwritten and is not accessible for normal platform operations.

Certain limited information may be retained where required for:

Legal compliance
Fraud prevention
Security investigations

We do not retain personal data indefinitely without lawful basis.

Before deletion, users may download their data via: