Privacy Policy

Wired & Well Ltd is a digital wellness company based in the United Kingdom. We build tools — including Anchor — designed to support people's mental health and wellbeing, with a particular focus on neurodivergent experiences.

For the purposes of UK data protection law, Wired & Well Ltd is the data controller for personal data collected through our products and website.

You can contact us at: hello@wiredandwell.co.uk

We only collect what's needed to make the product work. Here's what that means in practice:

If you use Anchor without an account:

• All data (check-ins, journal entries, safety plan, mood board photos) is stored locally on your device using your browser's localStorage
• We receive no data at all — it never leaves your device

If you create an Anchor account:

• Your email address and chosen display name
• Your encrypted password (we never see it in plain text)
• Check-in data: mood scores, stress levels, and optional notes
• Journal entries you choose to save
• Safety plan content you complete
• The date and time records were created

Automatically collected:

• Basic analytics — page visits and feature usage (no personal identifiers)
• Error logs — to help us fix bugs
• Your approximate country (used only to show relevant crisis resources)

We use your data only for the following purposes:

• To provide and maintain Anchor — syncing your data across devices when you're signed in
• To show you your own history, trends, and progress
• To send transactional emails (account confirmation, password reset) — no marketing unless you opt in
• To improve the product — using anonymised, aggregated usage data only

We will never use your mental health data for advertising, profiling, or any purpose beyond making the product work for you.

Anchor uses Supabase to store account data securely. Supabase is an open-source database platform that stores data in EU-based servers. Data is encrypted at rest and in transit.

Row Level Security (RLS) is enabled on all tables — this means your data is technically inaccessible to anyone other than you, including Wired & Well staff. We have no ability to read your journal entries or safety plan content.

We do not sell, rent, or share your personal data with third parties for commercial purposes. Full stop.

The only third-party services that handle any data are:

• Supabase — database and authentication infrastructure
• Vercel — website and app hosting
• Microsoft 365 — email (hello@wiredandwell.co.uk)

Each of these is bound by their own data processing agreements and GDPR-compliant policies. We do not use advertising networks, data brokers, or analytics platforms that track individuals.

We may be required to disclose data if compelled by law, but we will always notify you if legally permitted to do so.

Under UK GDPR, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct any inaccurate data
• Erasure — delete your account and all associated data
• Portability — export your data in a machine-readable format (available in the Anchor app under Account → Download my data)
• Restriction — ask us to stop processing your data in certain ways
• Object — object to processing based on legitimate interests

To exercise any of these rights, email us at hello@wiredandwell.co.uk. We will respond within 30 days.

If you believe we have handled your data unlawfully, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Anchor uses minimal cookies — only those strictly necessary for the app to function (authentication session tokens). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

You can clear cookies at any time through your browser settings. This will sign you out of your Anchor account.

Anchor is designed for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, please contact us at hello@wiredandwell.co.uk and we will delete the account promptly.

Our separate product Spark is designed for young people aged 7–18, with additional safeguards and parental consent requirements. A separate privacy notice applies to Spark.

We may update this policy from time to time. When we do, we will update the "last updated" date at the top of this page. For significant changes, we will notify users by email.

Continuing to use Anchor after changes are posted means you accept the updated policy.

If you have any questions about this policy or how we handle your data, please get in touch.