Thank you for using AniTok. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have under applicable law — including the EU General Data Protection Regulation (GDPR). This policy applies to both the AniTok mobile application (iOS and Android) and the AniTok website at https://anitok.framer.website. Please read it carefully before using AniTok.

1. Who We Are (Data Controller)

AniTok is developed and operated by:

Helena Moehl

Knoopstraße 1, 01326 Dresden, Germany

Email: helenamoehl0@gmail.com

Website: https://anitok.framer.website

For the purposes of the GDPR, Helena Moehl is the data controller for personal data processed through the AniTok app and website. AniTok is subject to applicable EU data protection law, including the GDPR and relevant German national data protection provisions.

AniTok is not affiliated with TikTok, Instagram, YouTube, X, Apple, Google, xAI, or any anime, film, or series rights holders.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• The AniTok mobile

application for iOS and Android

• The AniTok website at

https://anitok.framer.website

It covers all personal data collected, processed, and stored when you create an account, use the app's features, visit the website, or contact us. It does not apply to third-party services' own privacy practices, although we describe our use of those services in Section 6.

3. Data We Collect

3.1 Account and Identity Data

To use AniTok, you must create an account. During registration and authentication, we collect or receive:

•       Display name or name,

which you can edit at any time

•       Email address

•       Firebase Authentication user

ID (a unique technical identifier)

•       Login provider information

(email/password or Google Sign-In)

Regarding third-party login providers: When you log in with Google, the login provider may technically make certain profile information — such as your name or email address — available to the app during the authentication process. AniTok does not intentionally store third-party profile pictures. We only store the data listed above that is necessary for account functionality.

Avatar images: Users cannot upload images. AniTok offers built-in avatar images only. Your avatar selection and progress data are stored; no user-uploaded images are processed or stored.

3.2 App Content Data

Data you actively create and store within AniTok:

•       Watchlist entries — anime

titles, movies, or series you save

•       Content planner/calendar entries

— including date, time, platform,

content type, and notes or descriptions

•       Selected social media platforms (such

as TikTok, Instagram,

YouTube Shorts, and X)

•       Weekly posting goal

•       Posts-done counter

and posting progress data

•       Selected avatar ID and

avatar unlock or progress data

•       Account timestamps and technical data

required for account

and security functionality

All app content data is private to your account. AniTok has no public profiles, comments, chats, community features, or user-to-user sharing.

3.3 AI Feature Input Data (Optional)

AniTok includes an optional AI content idea generation feature. If you choose to use it, the following input data is sent to the xAI/Grok API:

•       Anime title, movie, or

series title or topic you enter

•       Selected social media platform

•       Selected content style

•       Any free-text additional

instructions or wishes you enter

Using this feature is entirely optional. You can use all other features of AniTok without ever using the AI feature. See Section 7 for full details.

3.4 Technical and Usage Data

AniTok and its technical infrastructure providers may process the following technical data:

•       Device type, operating

system version, and app version

•       Firebase Authentication session tokens

•       General technical diagnostics and logs

necessary for app stability and security

•       App usage analytics and performance data,

where applicable (see

Section 6.3 for details)

•       Timestamps of interactions required

for account and security functionality

3.5 Data We Do Not Collect

AniTok does not access or collect:

•       Camera or microphone data

•       Device contacts

•       Precise geolocation data

•       Device calendar data

•       Photo library or user-uploaded files

•       Payment data

•       Health data

•       Private messages

•       Public social media profile data

AniTok does not use push notifications at this time.

4. How We Use Your Data

We use the data we collect for the following purposes:

•       Account creation and management —

to register and securely authenticate you

•       Login functionality — to enable login

via email/password and Google Sign-In

•       Storing your watchlist, planner,

and progress data — so your

content is available across devices

•       Generating AI content ideas

(optional) — to send your input

to xAI/Grok and return suggestions

•       Tracking posting progress — to support

your personal content planning workflow

•       Analytics and app improvement —

to understand general app usage and

improve performance (see Section 6.3)

•       Security and fraud prevention — to

detect and prevent unauthorized access

•       Responding to support enquiries — to

handle questions or requests sent by email

AniTok does not use personal data for advertising, retargeting, or building advertising profiles. AniTok does not sell personal data. The app is free and contains no ads, in-app purchases, or affiliate links.

5. Legal Basis for Processing (GDPR)

As the data controller is based in Germany, the GDPR applies. We rely on the following legal bases: 

Performance of a contract (Art. 6(1)(b) GDPR): Processing your account data, watchlist entries, planner data, and other app content is necessary to provide the AniTok service you signed up for.

Legitimate interests (Art. 6(1)(f) GDPR): We process technical and usage data to maintain security, prevent fraud, and improve the app. Our legitimate interest in providing a safe and functional service is balanced against users' privacy interests, given the limited scope of data involved. This basis also applies to the optional AI feature, where processing is limited to the input you actively choose to submit.

Compliance with legal obligations (Art. 6(1)(c) GDPR): We may process or retain certain data where required by applicable EU or German national law 

Note on the AI feature: The AI content idea generation feature is entirely optional. Processing of your input is necessary to provide the AI generation functionality requested by you when you actively press the generation button. Before using the feature, you are informed that your input will be sent to xAI/Grok for processing. You can choose not to use the AI feature at any time without affecting any other part of the app.

6. Third-Party Services

AniTok uses the following third-party services. Each acts as a data processor or independent controller for its own services. AniTok does not use these services for advertising or to sell user data.

6.1 Firebase Authentication (Google LLC)

Used to manage user accounts and login. Firebase Authentication processes your email address, display name, Firebase user ID, and login provider information. If a login provider makes additional profile information available during authentication, Firebase may receive it at the technical level; however, AniTok does not intentionally store profile pictures.

Privacy Policy: https://firebase.google.com/support/privacy

6.2 Cloud Firestore (Google LLC)

Used to store your app content data, including Watchlist entries, Planner/calendar entries, posting goals, progress data, and avatar data. Your data is stored in Google Cloud's eur3 multi-region location (Europe).

Privacy Policy: https://firebase.google.com/support/privacy

6.3 Firebase / Google Analytics (Google LLC)

AniTok uses Firebase and/or Google Analytics for basic app usage analytics, diagnostics, performance monitoring, and app improvement. This may include general device information, app version, interaction events, and technical performance data. Analytics data is not used for advertising, retargeting, or building advertising profiles, and is not sold to third parties.

Privacy Policy (Google): https://policies.google.com/privacy

6.4 Google Sign-In (Google LLC)

Allows you to log in with your Google account. Google may process your name, email address, and authentication information in accordance with its privacy policy.

Privacy Policy: https://policies.google.com/privacy

6.5 Sign in with Apple (Apple Inc.) — if and when available

If and when Sign in with Apple is available in AniTok, you may log in with your Apple ID. Apple processes authentication data in accordance with its own privacy policy. Apple may offer you the option to hide your email address from AniTok.

Privacy Policy: https://www.apple.com/legal/privacy

6.6 FlutterFlow

AniTok is built using FlutterFlow as the app development platform. FlutterFlow was used to configure app screens, app logic, custom widgets, and API calls — including the xAI/Grok API call for the optional AI feature. Depending on the technical setup, FlutterFlow may process limited technical data related to app development, deployment, or API configuration. AniTok does not use FlutterFlow for advertising profiles, retargeting, or selling user data.

Privacy Policy: https://www.flutterflow.io/privacy-policy

6.7 Framer (Framer B.V.)

The AniTok website is hosted on Framer. Framer may process technical data such as IP addresses, browser information, device information, timestamps, page views, and server logs as part of website hosting and security. AniTok does not intentionally set advertising or tracking cookies on the website. Framer may set functional or technical cookies necessary to provide the hosting service.

Privacy Policy: https://www.framer.com/legal/privacy-statement

6.8 xAI / Grok API (xAI Corp.)

Used exclusively to power the optional AI content idea generation feature. See Section 7 for full details.

Privacy Policy: https://x.ai/legal/privacy-policy

7. AI Content Idea Generation Feature

This feature is entirely optional. You can use all features of AniTok without ever using AI content idea generation.

When you choose to use the AI feature:

• Your input — including anime/movie/series

title or topic, selected platform,

content style, and any additional free

text instructions — is sent to the

xAI/Grok API via a FlutterFlow-configured

API call, over an encrypted connection

• The API call is made directly from

the app to the xAI/Grok API (api.x.ai)

• xAI processes your input and returns

generated content ideas to the app

•  Generated ideas are displayed in the app

and can be copied to your clipboard; they are

not automatically saved to your account

and cannot currently be saved within the app

AniTok does not intentionally store your AI prompts or AI-generated responses in Firestore. However, xAI and any technical infrastructure involved in processing the API call may process or retain data — including prompts, responses, and related metadata — according to their own terms of service and privacy policies. AniTok cannot guarantee the deletion or non-retention of data processed by xAI. Requests concerning data already processed by xAI may need to be addressed to xAI directly.

⚠ Warning: Do not enter personal, sensitive, confidential, or third-party confidential information into the AI prompt field. Do not enter information that is unlawful to share or process. Any text you enter into the AI feature is transmitted to xAI for processing.

Review the xAI Privacy Policy before using this feature: https://x.ai/legal/privacy-policy

8. Cookies and Website Data

The AniTok mobile app does not use browser cookies. It uses secure, encrypted session tokens issued by Firebase Authentication to maintain your login session on your device.

The AniTok website is hosted on Framer. Framer may set functional or technical cookies or similar technologies as part of website hosting. AniTok does not intentionally set advertising or tracking cookies on its website. For more information, please refer to Framer's privacy policy.

9. Data Sharing

AniTok does not sell, rent, or trade your personal data

Your data is shared only in the following limited circumstances:

• Technical service providers — Google LLC

(Firebase Authentication, Cloud Firestore,

Google Analytics where applicable),

Apple Inc. (authentication, where available),

Framer B.V. (website hosting), xAI Corp.

(optional AI feature), and FlutterFlow

(app development and API infrastructure)

may process your data as necessary

to provide their respective services.

•  Legal requirements — We may

disclose personal data if required

by applicable law, court order,

or governmental authority, or to protect the

rights, property, or safety

of users or the public. 

We do not share your personal data with advertisers, data brokers, or any other third parties beyond those listed above.

10. International Data Transfers

Your Firestore data is stored in Google Cloud's eur3 multi-region location (Europe). However, some service providers are based outside the EEA or may process data outside the EEA: 

Google LLC (Firebase, Firestore, Google Analytics, Google Sign-In) — based in the United States. Google relies on Standard Contractual Clauses (SCCs) approved by the European Commission and other appropriate safeguards.

Apple Inc. (Sign in with Apple, if and when available) — based in the United States. Apple transfers authentication data in accordance with applicable data protection law.

xAI Corp. (optional AI feature) — based in the United States. When you use the AI feature, your input is transferred to xAI in the US for processing.

FlutterFlow — may process limited technical data outside the EEA as part of its development and infrastructure services.

Framer B.V. — based in the Netherlands (EEA), but may use infrastructure that processes data outside the EEA.

We take reasonable steps to ensure that international transfers of personal data are subject to appropriate safeguards in accordance with the GDPR, including Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms.

11. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy: 

• Account and identity data — retained

for the duration of your account.

Deleted upon account deletion.

• Watchlist and planner data — retained until

you delete the relevant entries or your account.

• Posting goals, progress data, and

avatar data — retained until deleted

by you or upon account deletion.

• AI prompt and response data — not

intentionally stored by AniTok in Firestore. xAI

and technical infrastructure providers may

retain such data according

to their own policies.

• Technical logs and analytics data —

retained only as long as necessary for

security, debugging, fraud prevention,

and legal compliance. Retention periods

depend on the settings and policies

of the relevant technical providers.

•  Deleted account data —

deleted or anonymized within a

reasonable period following account

deletion, unless legal obligations,

system backups, or security logs

require limited continued retention.

12. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

•       Right of access (Art. 15 GDPR)

— You can request a copy of

the personal data we hold about you.

•       Right to rectification (Art. 16

GDPR) — You can ask us to

correct inaccurate or incomplete data.

•       Right to erasure (Art. 17 GDPR) — You

can ask us to delete your personal data.

•       Right to restriction of processing (Art. 18

GDPR) — You can ask us to restrict how

we process your data

in certain circumstances.

•       Right to data portability (Art. 20 GDPR)

— You can request your

data in a structured, commonly

used, machine-readable format.

•       Right to object (Art. 21 GDPR)

— You can object to processing

based on legitimate interests.

•       Right not to use the AI feature — The AI

feature is optional. You can

choose not to use it at any time

without affecting the rest of the app.

To exercise any of these rights, please contact us at helenamoehl0@gmail.com. We will respond within 30 days.

Please note that rights relating to data already processed independently by xAI (via the optional AI feature) may need to be addressed to xAI directly, as AniTok does not control that processing.

You also have the right to lodge a complaint with a supervisory authority. If you are located in the EU, you may contact your national data protection authority. As AniTok is operated from Germany, the competent German data protection supervisory authority may also be relevant. EU residents can find their local authority at edpb.europa.eu.

13. Account and Data Deletion

You can delete your AniTok account and all associated data at any time. Account deletion is permanent and cannot be undone. 

In-app deletion: Open the AniTok app and go to Settings → Delete Account. The deletion process removes your Firestore user data and app content, and then deletes your Firebase Authentication account. 

Deleting your account permanently removes:

• Your account information (display name,

email address, user ID, login provider data)

• All Watchlist entries

• All Planner/calendar entries,

notes, and descriptions

• Posting goals and posting progress data

• Avatar selection and avatar progress data

• All other app content linked to your account

By email: You may also request account deletion by emailing helenamoehl0@gmail.com with the subject line "Account Deletion Request". Please include the email address linked to your account. We will confirm once the deletion is complete. 

Account Deletion website page: A dedicated Account Deletion page is available at: [INSERT ACCOUNT DELETION URL]. This page provides step-by-step instructions and the option to submit a deletion request by email.

Please note that some data may remain temporarily in system backups, technical logs, or where retention is required by applicable law. Such residual data will be deleted or anonymized within a reasonable period.

14. Children’s Privacy

AniTok is not directed to children under the age of 13. Where local law requires a higher age of digital consent, minors below that age may only use AniTok with the consent of a parent or legal guardian.

AniTok does not knowingly collect personal data from children without required consent. If AniTok becomes aware that it has collected personal data from a child without the required parental or legal consent, it will take steps to delete that data promptly. If you believe a child has provided personal data without appropriate consent, please contact us at helenamoehl0@gmail.com.

15. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encrypted data transmission using HTTPS/TLS

•  Firebase Authentication's secure

session management and token handling

• Firestore security rules restricting data

access to the authenticated account owner

• Regular review of our security practices 

No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a personal data breach posing a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected users, in accordance with our GDPR obligations.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

•  Update the "Last Updated"

date at the top of this policy

•  Post the revised policy at

https://anitok.framer.website/privacy-policy

• Notify you through the app or by

email if the changes are material

Your continued use of AniTok after the effective date of a revised Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the revised policy, please discontinue use of the app and delete your account.

17. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Helena Moehl

Knoopstraße 1, 01326 Dresden, Germany

Email: helenamoehl0@gmail.com

Website: https://anitok.framer.website 

We aim to respond to all privacy-related enquiries within 30 days.