Privacy Policy
Last updated: October 10, 2026 · Published by anosphereApp LLC · Questions: privacy@anosphereapp.com
The short version
• anoSphere is your own account on the anoSphere network. Your keys are made on your phone and stay on your phone. We never hold them and cannot move your money.
• The app sends nobody anything behind your back: no analytics, no usage tracking, no crash reports, no advertising, no third-party software inside the app.
• What leaves your phone is what you yourself submit to the network: your own transactions, your own encrypted recovery records, your own encrypted storage, your own messages (encrypted end to end), and a market card if you choose to list one.
• anosphereApp LLC publishes the app. It does not run the network and holds none of the records the network keeps. The only information we ourselves hold is the email you send to our support addresses.
• The network keeps its records permanently and append-only. Nothing on it is ever silently erased — that is what makes your money safe and your account recoverable. This policy says exactly what that means for you.
1. What anoSphere is, and who runs what
anoSphere is a phone app for the anoSphere network. With it you create your account on the network (your “anoPod”), send and receive Anos (the network’s money, kept on the public Anos ledger), keep an encrypted storage box, talk in private rooms, list a market card, and — if you ever lose your phone or your keys — get your account back through the network’s account recovery process with the help of a moderator.
anosphereApp LLC (“we”, “us”) publishes the app. We do not run the anoSphere network: its ledger is kept by independent validators, its storage computers are run by the network’s participants under the network’s rules, and its rules are set by the network’s community. We hold no account of yours, no photo, no record and no key. The app is a client: it signs what you authorize on your phone and sends it to the network you choose to use.
2. What stays on your phone and nowhere else
• Your keys. Every key — your chain keys, your anoPod encryption key, your receiving key, your room keys — is generated on your phone and kept in the phone’s protected storage. Nobody receives a copy. (The one exception you choose yourself: the recovery escrow in section 4.)
• Your fingerprint or face unlock. The app asks the phone to confirm it is you before money-class actions. The phone answers yes or no; the app never sees or stores biometric data, and nothing biometric ever leaves the phone.
• The nine facts you type when you join (your first and last name, your father’s first and last name, your mother’s first name and maiden name, your city, your country, your date of birth). They are run through a one-way formula on your phone and then wiped. Only the first portion of the resulting scrambled fingerprint is published (section 3) so that a moderator can ever locate your account at a recovery. The facts themselves are never stored and never sent.
• Your messages in readable form. Room messages are encrypted on your phone before they leave it (section 3).
• Your room names, your read marks, your blocked list, your settings — all phone-local. The network never learns which rooms you have read or whom you have blocked.
• Your price notes and your storage box in readable form — encrypted on your phone before they leave it.
3. What leaves your phone, and why
Everything below travels over an encrypted connection (TLS) to the network’s one front door, and the app refuses any other server certificate. Every item is sent by your own action, after the app has told you what it is for.
• Your transactions (amounts, your account’s public identifier, the other account’s identifier, the time; stakes; the escrow of a guarded transfer) go to the Anos ledger. Who can read them: everyone — the ledger is public and permanent; it shows account identifiers, not names. Why: this is how money moves on the network.
• The first portion of your identity fingerprint (a one-way scramble of the nine facts) is published on the ledger once, when you join. Who can read it: everyone, but it cannot be turned back into your facts. Why: so that a moderator can locate your account if you ever need recovery.
• Your front selfie, your phone number, your email address and one “phone-a-friend” contact are your ID records: encrypted on your phone before upload, stored on the network’s storage computers. Who can read them: a moderator, only at a real recovery case you (or someone claiming to be you) opened, to compare the claimant against your enrolled photo. Why: so that you can get your account back without passwords, and so that a thief cannot.
• One photo of a government ID document (your ID card, driver’s licence or passport — your pick) is your security record: encrypted on your phone before upload. Who can read it: nobody looks at it, checks it or verifies it; it can be opened only after an approval by the network’s community, inside a recovery case. Why: the proof of last resort if your keys are lost.
• Your protection album (only if you choose the guarded protection for an account: a second selfie and the document photo), encrypted and stored on the network’s storage computers. Who can read it: your own phone never can — deliberately, so a thief with your phone sees nothing; moderators review it at every assisted transfer from a guarded account. Why: so that a large transfer from a guarded account is checked against your own recorded face and document.
• Your storage box (“My storage”) and your price notes, encrypted on your phone with your own anoPod encryption key and stored on the network’s storage computers; versions are kept. Who can read them: only you. Why: so that your own files survive the loss of a phone.
• Your room messages (text), encrypted end to end on your phone with the room’s key, relayed and stored by the network as bytes it cannot read. Who can read them: only the members of the room, on their phones.
• Your market card (if you list one: buying or selling Anos, an amount, a price) goes to the public market listing. Who can read it: everyone, by its nature.
• A recovery request (if you ever open one: the nine facts re-typed on a new phone, sealed to the recovery room). Who can read it: the moderator handling your case. The recovery also includes a live video call over an everyday calling tool of your choice, outside this app.
• A report (if you report a message, a knock or an invite) is a message you compose and send to support@anosphereapp.com through your phone’s own mail or share sheet; nothing is attached automatically. Who can read it: we do — it is the one kind of information about you that reaches the publisher.
4. The recovery escrow — your own emergency spare
When you join, your recovery material (including an emergency spare of your anoPod encryption key, your break-glass key and your backup bundle) is encrypted and placed with the network’s keyholder computers. These keys are labelled, and the labels say the rules: the ID-record key can be released automatically at a real recovery case; everything else is released only after a human decision approved by the network’s community. This is how you — and only you — get your account back. It is not a way for anyone to spend your money: no spending key of yours is ever held by the publisher.
5. What we never do
• No analytics, no usage statistics, no telemetry, no crash reports. The app checks for news only while it is open; nothing is sent in the background.
• No advertising, no advertising identifiers, no device identifiers.
• No third-party software inside the app that could see your data.
• No access to your contacts, your location, your photo gallery or your other apps. The camera is used only when you take your enrolment photos or scan a QR code, and only what you capture is used.
• No selling, renting or trading of anything about you, ever.
6. Permissions the app asks for
• Internet — to talk to the network’s front door.
• Camera — for your enrolment photos (selfie and ID document) and for scanning QR codes. You can refuse; the app tells you what will not work.
• Biometric — to let the phone confirm it is you before money-class actions. The phone, not the app, holds your biometric data.
7. The public ledger, and how long things are kept
The Anos ledger is public and permanent: every confirmed transaction stays on it for ever and can be read by anyone, under account identifiers rather than names. Your encrypted records (your ID records, your security records, your protection album, your storage box) are kept append-only: new versions are added, nothing is removed. The network is designed so that nothing is ever silently erased; that is what makes it trustworthy with money and what makes your account recoverable years later. The publisher keeps none of these records and cannot alter or remove them.
8. Deleting your account from your phone
In the app, Me → Keys → Delete my account deletes every key and record anoSphere keeps on this phone and abandons the account in place; the app offers you a rescue-file export first. After this, the phone can no longer act for the account. The network’s records are not deleted (section 7), and the account stays recoverable later through the recovery process. If you no longer have the app, see Deleting your anoSphere account or write to support@anosphereapp.com.
9. Who may see your records, and lawful requests
Your ID records and your security records are opened only inside the network’s recovery process, as described in section 3; moderators and the community approval are the only roads. Your protection album is reviewed only at assisted transfers from a guarded account. Nobody can read your messages or your storage box. If a lawful request from a public authority reaches the publisher, we can provide only what we actually hold — the email you sent us — because we hold nothing else; the public ledger is public already, and the network’s encrypted records can be opened only through the process above.
10. This website
This website is hosted on Firebase Hosting, which may log standard data (such as your IP address and browser type) when you visit, under its own policies. If you email us, we receive your message and your address and keep them only as long as needed to answer and for basic security and legal needs. The app stores (Apple App Store, Google Play) and GitHub (where the app’s code is published) collect information under their own policies.
11. Children
anoSphere is for adults. It is not intended for anyone under 18, and we do not knowingly let anyone under 18 join. If you believe a child has written to us, please contact us.
12. Languages and changes
The app speaks English and Thai. This policy is written in English; the Thai version is a translation of it, and where the two differ the English text is the policy. If this policy changes, the new version is published on this page with its date, and the app’s About screen points here.
Contact
Privacy questions: privacy@anosphereapp.com · Support and reports: support@anosphereapp.com · Published by anosphereApp LLC (D‑U‑N‑S: 143351010).