Introduction
Hi there! We're Loopin Technologies, the team behind Anshin. We're based in Chennai, Tamil Nadu, India, and we built this app to help families stay prepared for the unexpected.
Here's the most important thing to know about us: we store directions, not keys. We don't store your passwords. We don't access your accounts. We simply help you write down WHERE things are, so your family knows where to look when they need to.
This policy explains what information we collect, how we protect it, and what happens to it. We've tried to keep it simple and clear—no legal jargon where we can avoid it.
Information We Collect
Account Information
When you sign up, we collect:
- Your phone number (verified via OTP)
- Your email address
- Your name
The Details You Add
When you add entries (like bank account details or insurance info), we store:
- The type of entry (bank, insurance, property, etc.)
- The metadata you provide (account numbers, policy numbers, branch names)
- Any notes you add
Important: We never ask for or store your passwords, PINs, or login credentials. If you try to add these, we'll remind you that Anshin is for directions, not keys.
Your Trusted Contacts
For each trusted contact you add, we store:
- Their name
- Their phone number
- Their email address
- Their relationship to you
Technical Information
To keep the app running smoothly, we also collect:
- Device information (type, operating system)
- Push notification tokens (to send you alerts)
- App usage data (which features you use, how often)
- Error logs (to fix bugs)
How We Protect Your Information
Your information is precious, and we treat it that way. Here's how we keep it safe:
- Encryption: All your data is encrypted using AES-256-GCM, the same standard used by banks and governments.
- Per-User Keys: Each user has their own encryption key. Even we can't read your data.
- Secure Storage: Your data is stored on Supabase's secure infrastructure.
- No Shortcuts: We never take shortcuts with security. Every feature goes through security review.
Third-Party Services We Use
We work with trusted partners to provide our service. Here's who they are and what they do:
Supabase (Database)
Stores your encrypted data. Servers located in Singapore. Certified for SOC 2 Type II compliance.
MSG91 (SMS)
Sends OTP messages for verification. Based in India. Used only for authentication.
Resend (Email)
Sends email notifications. Servers in the USA. Used for account updates and unlock notifications.
Sentry (Error Monitoring)
Helps us find and fix bugs. Servers in the USA. Receives only technical error data, never your personal details.
RevenueCat (Subscriptions)
Manages premium subscriptions and payment status. Servers in the USA. Receives your subscription status and transaction IDs—never your stored entries or personal details.
When We Share Information
We take sharing your information very seriously. Here's when it happens:
With Your Trusted Contacts (After Verification)
This is the whole point of Anshin. When we verify that you've passed away or become incapacitated, we share your stored information with the trusted contacts you chose. This only happens after our verification process (more on that below).
When Legally Required
If a court orders us to share information, we must comply. But we'll always try to notify you first if legally allowed.
What We Never Do
- We never sell your data to anyone
- We never use your data for advertising
- We never share your data with third parties for marketing
The Unlock Process
Your trusted contacts can only access your information through our careful verification process:
In Case of Death
- Your trusted contact initiates an unlock request
- We send you a notification and wait 12 hours (in case the request is a mistake)
- Your trusted contact uploads a death certificate
- Our team manually reviews and verifies the documents
- If verified, access is granted for 7 days (with option to extend)
In Case of Incapacity
- Your trusted contact initiates an incapacity request
- They get immediate access to Health Insurance and Term Insurance entries only (for urgent medical decisions)
- Access lasts 48 hours and then expires automatically
You can reject any unlock request during the notification window if you receive one in error.
Data Retention
Here's how long we keep your data:
- Active account: As long as your account is active
- Deleted entries: Permanently removed within 30 days
- Deleted account: All data removed within 90 days
- Audit logs: Kept for 7 years (legal requirement)
Your Rights
You have full control over your data. You can:
- Access: Request a copy of all your data
- Export: Download your data in a readable format
- Delete: Remove any entry or your entire account
- Withdraw consent: Stop using the app at any time
To exercise any of these rights, contact us at [email protected].
Children's Privacy
Anshin is designed for adults who want to protect their families. You must be at least 18 years old to use the app. We don't knowingly collect information from anyone under 18.
Governing Law
This privacy policy is governed by the laws of India. Any disputes relating to this policy will be resolved in the courts of Chennai, Tamil Nadu.
Changes to This Policy
We may update this policy from time to time. When we make significant changes, we'll:
- Send you an email notification
- Show a notice in the app
- Update the "Last updated" date at the top
Contact Us
Questions? Concerns about your data? We're here to help.
For any data-related questions or concerns, contact us at [email protected].
Company: Loopin Technologies
Chennai, Tamil Nadu, India