Privacy

Last updated 8 October 2026

anzen is a set of safety tools for iPhone. It only works if you can trust it, so this page says plainly what it collects, why, and how long it keeps it.

The short version

• Your location is only shared while something you started is running: a call, Safe Route, a check-in, I feel off or I’m being followed. It stops when you say you’re safe.
• Your contacts can’t start tracking you, and can’t see where you are at any other time. They only hear from anzen if you need help, and again when you’re safe.
• No adverts, no tracking tools, and your data is never sold.

What we keep, and for how long

• Your account: your mobile number (to sign in), your first name, and the callers, contacts and code phrases you set up. Kept until you delete your account.
• Location during a session: kept for 30 days after the session ends, then deleted, unless you save it to your Evidence Locker.
• Calls: a record of each call (when it happened and how long it lasted) and its transcript, so your caller can pick up where it left off and you can look back at it.
• Evidence Locker: recordings, call transcripts and photos are encrypted on your phone and only open with Face ID. While a tool is running, some of this may also be stored on our server with a time stamp, so it isn’t lost if your phone is. It stays until you delete it.
• Messages to your contacts: the texts anzen sends on your behalf, and their replies.

Who helps us run it

anzen uses a few services to work. They only get what they need for that job:

• OpenAI and ElevenLabs provide your caller’s voice. During a call they receive the call audio and what your caller needs to know (such as your first name, the time and roughly where you are).
• Twilio places phone calls to you and sends texts to your contacts.
• Mapbox draws maps and finds street names and addresses.
• OpenStreetMap services, Open-Meteo and data.police.uk help plan walks, check the weather and find what’s open nearby. They receive locations, never who you are.
• Railway hosts our server.

Stopping an alert

Cancelling an alert only works with Face ID (or your passcode), so nobody holding your phone can do it. If you set a duress PIN, using it looks exactly like stopping an alert, but your contacts are still told and your location keeps being shared with them for an hour.

Your choices

• Every time your location is shared, it’s listed in the app under Privacy, so you always know.
• You can delete any item in your Evidence Locker at any time.
• Deleting your account removes your account, callers, contacts, code phrases, sharing history and Evidence Locker from your phone and from our server. This can’t be undone.

Not a replacement for 999

anzen makes calling the emergency services faster and points you to it. It never sits between you and the police. If you’re in danger, call 999.

Questions

If you have a question about your data, email [email protected].