Your journal. Your choices.

What stays on your device

You can discover anime and keep a library without an account. Saved titles, favorites, ratings, progress, notes, Taste preferences, and filter presets are stored locally. Anime searches and recommendation ranking run on your device. Signing in opens a separate account library; it does not automatically upload the guest library.

Device libraries may be included in your operating system’s backups. Exports are readable files saved wherever you choose. Recent local restore copies help recover mistakes; the app keeps up to three for up to seven days, removing expired copies when it next checks them.

Accounts and optional cloud copies

Creating an account sends your email, password, and authentication requests to Supabase. Account identifiers, sign-in activity, and your chosen profile details let us authenticate you, keep libraries separate, and operate sharing. Passwords are handled by the authentication service; never send one to support.

Cloud backup and automatic sync are optional. A manual cloud backup includes notes. Including notes in automatic sync is a separate choice. Cloud copies contain the library information you choose to transfer so you can restore it or use it across devices. They are access-controlled, but are not end-to-end encrypted.

The app does not send your private notes to an AI service. It has no advertising or third-party analytics SDK, and we do not sell personal data or use it for targeted advertising.

Sharing and community activity

Profiles start private. You choose whether to make your profile public, publish a note, or share selected library information. A published note or shared title is a separate copy; editing your private journal does not automatically update that copy. Public information may appear on profiles and in followers’ feeds. Anime comments are shared in their discussions.

We store follows, blocks, likes, reports, notification preferences, and community-rule acceptance to provide these features and protect the service. Follow lists, blocks, reports, and private cloud libraries are not public profile content. People searches are sent to the account service; AniGem has no search-history feature.

Reports and relevant public content may be reviewed by the operator. Moderation records track decisions, and email reminders contain counts rather than reported text. You can withdraw your public copies, remove comments, change profile visibility, unfollow, or block people. Others may retain screenshots or copies of material they already saw.

Services and network information

Supabase provides authentication, private cloud storage, and social records. Resend handles account emails and the support inbox. Railway hosts this website and the catalog service; Fly.io remains in use by existing app update and confirmation links during the transition. Cloudflare provides DNS, and GoDaddy registers the domain. Apple provides distribution and any TestFlight feedback you choose to send.

These services process network and operational information such as IP addresses, request paths, browser or device information, timestamps, and errors. Supabase’s gateway also records approximate location derived from IP addresses, such as country, region, and city, for service operations and security. AniGem does not request device location permission. These public web pages have no analytics, advertising, forms, or third-party media; our web server’s access logging is disabled, which does not disable providers’ own infrastructure records.

Posters and episode thumbnails load from their source hosts. Those hosts receive your IP address and the requested image path, without your AniGem login credentials. Opening a streaming-provider link brings you to that provider’s app or website and its own terms and privacy practices. AniGem does not play or host anime video.

Authorized service operators can process data to run and secure the service. Account infrastructure is currently in the United States; providers may also process data in other countries. Transfers and access are subject to applicable law and provider safeguards. We may disclose information when legally required or to address abuse and protect people’s rights.

How long information stays

Account details, the latest cloud library, profile, shared content, social relationships, and community-rule acceptance remain while your account or the relevant feature needs them, until you remove them or delete the account. There is no automatic deletion solely because an account is inactive.

Open reports remain available for review. Closed reports and moderation decision records become eligible for deletion after 90 days. Online inbox events and engagement receipts also expire after 90 days; the inbox is limited to 200 events per account. Daily cleanup processes bounded batches, so a backlog can take additional runs. Deleting a target or account removes its associated report and audit identifiers sooner. Finished report-email delivery records have a separate 90-day cleanup window; count-only batch totals can outlive an account.

Support conversations remain while needed to answer a request and handle follow-up. You can ask us to remove a closed conversation. The support inbox does not yet automatically purge resolved cases; messages moved to trash remain recoverable for 30 days. Account-email delivery records and provider backups follow Resend’s retention controls, rather than the account database’s deletion transaction.

Infrastructure logs and provider-managed copies have separate retention. A dashboard’s visible log window is not a promise that all underlying copies are erased. We cannot guarantee immediate deletion from every provider backup; a privacy request can include follow-up with the relevant provider. Any data we must retain for a specific legal obligation is restricted to that purpose. We do not retain ordinary deleted user content as a moderation archive.

Your controls and account deletion

Use Settings → Account for cloud controls and account deletion, and Settings → Backup & restore for local exports. Turning off automatic sync stops future automatic transfers; it does not remove an existing cloud copy or a public post. Use the cloud-copy deletion or publication controls separately.

Delete account requires a recent sign-in and confirmation. Once the service confirms success, your online account, sessions, cloud library, profile, shared content, and associated social records are deleted. This is deletion, not temporary deactivation. Other people’s independently authored comments remain; replies to your deleted comment no longer retain its parent link.

The next app update also removes that account’s library, notes, restore copies, and sync files from the device that confirms deletion, with a retry if local cleanup fails. The current TestFlight build 1 retains its local copy. Account deletion does not remotely erase other devices, guest or other-account libraries, device backups, exported files, support mail, or copies retained by other people. Remove those copies separately; contact support if you need help.

You may request access, correction, a copy, or deletion of personal data, and exercise other applicable privacy rights by emailing support. We verify requests proportionately; never include a password, recovery code, or confirmation link. Depending on your location, you may also have rights to object, restrict processing, withdraw consent, or complain to a privacy regulator. Requests are handled within applicable legal time limits, without requiring you to give up statutory rights.

Teen users, security, and changes

AniGem is intended for teens and adults, with a minimum age of 13 or a higher age required where you live. If you are not old enough to agree to the Terms yourself, a parent or guardian must agree with you. We do not intentionally collect information from children under 13. A parent or guardian who believes a child has provided information can contact support so we can investigate and remove it. The app’s store age rating and content restrictions may be higher than this minimum.

We use HTTPS, account access controls, and protected app storage to reduce risk. No system is completely secure. Please report suspected account or privacy problems to support. Material changes to this policy will be dated here and communicated as appropriate; new uses requiring permission will need that permission before they start.