Anom Privacy Policy

Effective date: 8 September 2026
Last updated: 2 October 2026

How Anom handles your data

A plain-language summary of the policy below.

• What we keep: your account, your profile if you fill it in, and the people and reminders you add, so the app works and you can restore everything on a new phone.
• Voice and card scans: sent to our server, turned into a contact card, then deleted. We keep no copy of the recording or the photo.
• What we never do: sell your data, share it for advertising, show ads, or use it to train AI models. Anom contains no advertising or analytics software.
• Your phone: Anom reads your phone contacts and calendar only if you allow it. Phone contacts are not uploaded unless you import one, and no calendar events are read.
• Where it is kept: with a small number of service providers, listed in section 5, who encrypt it in transit and at rest.
• You are in control: export or delete anything from inside the app. Deleting your account deletes it and all its data, including contact photos, from our servers immediately; backup copies are purged within 30 days.
• Questions: support@anom.app

1. Who we are

Anom is a personal CRM and dialer app for Android and iOS that helps you remember the people you meet and follow up with them. It is published by Mohammad Khalaf, Amman, Jordan.

Questions about this policy or your data: support@anom.app. We answer every message ourselves.

2. The short version

• Your data is yours. We store it so the app works and so you can restore it on a new phone.
• We never sell your data, never share it for advertising, and show no ads.
• Voice recordings are used only to fill in a contact card, then deleted. We keep no copy, and neither does the service that transcribes them.
• You can export or delete everything, at any time, from inside the app.

3. What we collect

Your account

When you sign up with email we store your email address and a securely hashed password (we never see the password itself). If you sign in with Google, we receive your Google account's email address and name from Google; we do not receive your Google password or any other Google data. Google also offers your profile picture; Anom does not use or store it. If you sign in with Google, Google's sign-in library also collects device and usage information for Google's own purposes, under Google's privacy policy; Anom itself uses no analytics. If you sign in with Apple, we receive only your email address and name from Apple. If you turn on the biometric lock, your phone's own fingerprint or face check unlocks the app. Anom never sees or stores your biometric data or your password for this; it simply asks your phone (Android or iOS) whether you passed.

Your profile (optional)

Whatever you choose to add to "My profile": name, role, company, phone, email, LinkedIn, a tagline and a photo. This exists so you can share your own card; it is not used for anything else.

The people you add

The heart of Anom is the information you record about people you meet: name, role, company, phone numbers, email, photo, where and how you met, who introduced you, notes, action items, follow-up dates, birthday, and how recently you were in touch. You enter this yourself — by typing, by scanning a business card, or by speaking.

This is information about other people. You are responsible for having a legitimate reason to keep it — typically because they gave you their details in a business or social setting. See section 7.

Voice recordings

When you use Anom AI to capture a contact by voice, the recording is sent to our server and transcribed by Groq (Whisper) or, if Groq is unavailable, by DeepInfra running the same Whisper model. Neither keeps a copy of the audio or the text, and neither uses it to train models. The transcript is then turned into the fields of a contact card by Anthropic's Claude; Anthropic does not use it to train its models and deletes it within 30 days (longer only if its automated safety systems flag it or the law requires). If Anthropic is unavailable, Groq performs this step instead. The recording is processed in memory on our server and deleted the moment processing finishes; we keep no copy. The transcript is not stored separately from the contact card it produced.

Business card photos

When you scan a card, the photo is sent to our server, where the text on the card is read (Google Cloud Vision) and then turned into contact fields (Anthropic's Claude, with Groq as fallback). It is processed in memory and deleted the moment processing finishes; we keep no copy. If you choose to attach a photo to a contact, that photo is stored with the contact.

Phone contacts (only if you allow it)

• "Show phone contacts" reads your phone's address book to display those contacts alongside your Anom contacts. They are not uploaded to our servers unless you choose to import one.
• "Save new contacts to phone" writes the contacts you create into your phone's address book.

Anom does not read your call history.

Calendar (only if you allow it)

If you turn on "Add to Calendar" for a reminder, Anom creates an event in your phone's calendar. To let you choose which calendar to use, Anom reads the list of calendar names on your phone — nothing else. No events are read, and nothing from your calendar is uploaded.

Notifications

Reminders are scheduled locally on your phone. We do not send marketing notifications.

Technical data

Crash reports. If Anom crashes or hits an error, a report is sent to Sentry (stored in the European Union) containing the device model, OS version, app version and the error itself — never your contacts, notes, recordings or photos; we strip anything that could identify a person before it leaves the phone. Anom contains no advertising or analytics software. Our server keeps standard request logs (time, request type, sizes — never the content of a recording, a card, or a contact) for up to 30 days.

The website and the waitlist

If you join the waitlist on anom.app, we store your email address with Resend, our email provider, and use it only to send you news about Anom and to let us know you joined. Every email has an unsubscribe link, and unsubscribing removes you from the list. When you request account deletion through the website form, the address you enter is emailed to us and stored nowhere else.

The website has no advertising or analytics trackers.

What we do not collect

Your precise location, your call history, your messages, your browsing, contacts you have not chosen to show or import, or any data from other apps.

4. How we use it

Only to run Anom for you:

• to store your contacts and reminders and keep them backed up so you can restore them on another device;
• to transcribe voice notes and scanned cards into contact cards;
• to schedule the reminders you set;
• to show you who is "going cold", computed on your phone from when you last reached out inside the app;
• to answer your support requests.

We do not use your data to train AI models, build profiles for advertising, or send you marketing.

5. Where it goes — our service providers

We use a small number of providers to run Anom. Each processes data only on our instructions.

Because our providers are outside Jordan, your data is stored and processed abroad. We choose providers that encrypt data in transit and at rest and that commit to not using it for their own purposes.

We do not share your data with anyone else, except if the law requires it.

6. How we protect it

• Everything travels over encrypted connections (HTTPS/TLS).
• Data at rest is encrypted by our storage provider.
• Each account can only access its own data (row-level security on the database).
• Optional biometric lock on your phone.
• Keys and secrets live on our server, not inside the app.
• Contact photos are stored at addresses that cannot be guessed and are known only to the app; an upcoming update moves them behind private, expiring links.

We do not claim end-to-end encryption: our provider stores the data on our behalf and we can access it to provide the service and support. No system is perfectly secure; if we ever learn of a breach affecting your data we will tell you promptly.

7. Information about other people

Anom lets you keep notes about people you meet. When you do, you are responsible for that information:

• collect it lawfully and fairly — for example, because they gave you their card or agreed to stay in touch;
• keep it accurate and only as long as you need it;
• respect any request from them to be removed, which you can do by deleting the contact.

We process this information solely on your behalf, to run the app for you.

8. Keeping and deleting data

• Your data stays as long as your account exists.
• Delete anything in the app: delete a contact or reminder and it is removed from your phone and from our servers.
• Delete your account: Settings → My profile → Account → Delete account. Your account and all its data, including contact photos, are deleted from our servers immediately, and from the phone at the same time. Copies in our provider's encrypted backups are purged on their normal rotation, within 30 days.
• If you no longer have the app: request deletion at anom.app/delete-account or by email to support@anom.app from your account's email address.
• Export: Settings → My profile → Account → Export my data gives you a full copy.

9. Your rights

Wherever you live, you can ask us to access, correct, export or delete your personal data, or to stop processing it. Most of this you can do yourself in the app; for anything else, email support@anom.app and we will respond within 30 days.

If you are in the European Economic Area or the United Kingdom, our legal bases are: performing our contract with you (running Anom); your consent for optional permissions such as phone contacts, calendar and the biometric lock, which you can withdraw at any time in your phone's settings; and our legitimate interest in keeping Anom secure and working (crash reports, server logs). When your data leaves the EEA or UK, we rely on our providers' standard contractual clauses and equivalent safeguards.

If you are in Jordan, you have these rights under the Personal Data Protection Law, and may raise a complaint with the competent authority. If you are in Saudi Arabia or the United Arab Emirates, the same rights apply under their personal data protection laws. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your supervisory authority.

10. Children

Anom is intended for adults. You must be 18 or older to create an account, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has created an account, contact us and we will delete it.

11. Changes to this policy

If we make a meaningful change we will tell you in the app or by email to your account address, and update the date at the top. Continuing to use Anom after a change means you accept it.

12. Contact

Mohammad Khalaf
P.O. Box 156, Amman 11118, Jordan
support@anom.app

Security problems and vulnerability reports also go to support@anom.app.