Anchor Personal Data Processing Policy
Version: 1.1 · Issued: October 25, 2026 · Effective: August 19, 2026
This Policy describes how Anchor processes personal data, under Colombia's Law 1581 of 2012 and Decree 1074 of 2015, and — for data subjects in the European Economic Area — Regulation (EU) 2016/679 (GDPR).
Data controller: Jhanu LLC (EIN 36-5109774), domiciled at Cr 80 # 5 - 220, apto. 216, Cali, Colombia Contact for exercising rights: support@jhanu.com
In case of discrepancy between versions, the Spanish version prevails.
1. Scope
Applies to personal data processed on the Anchor platform: that of its Users, of Guests in live classes, and of the people appearing in videos uploaded by Users.
2. Roles of the parties
This is the clause that determines who answers for which data. Read it carefully.
-
Anchor is the Controller for account data: email, name, language, country, time zone, credentials and activity records. We collect these directly from the User in order to provide the service.
-
The User who uploads a video is the Controller for the personal data of the people appearing in it — their image, their sporting performance, and anything else the recording reveals. They hold the relationship with those people, they record or obtain the footage, and they are obliged to obtain and keep their prior, express and informed authorisation, or that of their legal guardians where they are minors.
For that data, Anchor acts as Processor: storing and processing it on behalf of the uploading User, on their instructions, and for no purpose of our own beyond providing the service.
-
Anchor does not verify those authorisations and cannot do so. By uploading a video, the User represents that they hold them under clause 5 of the Terms, and answers to the data subjects and to the authorities if they do not.
-
The Creator running a live class is the Controller responsible for informing attendees about the processing of their data in that context.
3. Data we process
Account data
| Data | Source | Why |
|---|---|---|
| Email address | The User | It is the account's identity; codes and links go there |
| Name | The User | Rosters, reports and Completion Records |
| Language | The User | Interface and email language |
| Country and time zone | The User | Billing and showing dates in local time |
| Password | The User | Stored only as a bcrypt hash; we do not keep the password |
| Email codes and links | Generated | Stored hashed, single-use and expiring |
Activity data
| Data | Why |
|---|---|
| Evaluations, scores and inputs | The product's function: measuring precision |
| Attempts and course progress | Tracking and Completion Records |
| Audit records: event, timestamp, IP address, user agent | Security, traceability and incident investigation |
Video data
Recordings uploaded by Users contain the image of identifiable people and their sporting performance. Anchor processes them as Processor, under clause 2.
Guest data in live classes
Only a participation identifier and their inputs. We do not ask Guests for a name or email.
We do not process card details: payment happens entirely on FastSpring's platform.
4. Purposes
Providing the calibration service; authenticating accounts; issuing and verifying Completion Records; managing subscriptions; sending operational email (confirmation, welcome, password reset); preventing fraud and abuse; and meeting legal, accounting and tax obligations.
We do not sell personal data and do not use it for third-party advertising.
5. Legal basis
- Performance of a contract: account, subscription and activity data.
- Consent: image data contained in videos, obtained by the uploading User; and non-operational communications, if any.
- Legitimate interest: security, fraud prevention and audit records.
- Legal obligation: accounting and tax retention.
6. Processors and third parties
| Provider | Function | Data received |
|---|---|---|
| Amazon Web Services (S3, CloudFront) | Video storage and delivery | Video files and their metadata |
| FastSpring | Payments, as merchant of record | Email, name, country and transaction data |
| Google reCAPTCHA | Anti-fraud protection at registration | Technical browser signals and IP address |
| Amazon SES | Sending operational email | Recipient address and message content |
| Amazon CloudWatch | Operational monitoring | Technical metrics, no user content |
| Google Firebase Cloud Messaging | Push notifications in the mobile app | The device's notification identifier and the text of each notice |
| Google Analytics | Visit measurement, only on the public pages of www.anchorjudging.com (not in the application) | Pages viewed, approximate location, device and browser, where the visit came from, and clicks on "Create account" or "Sign in" |
International transfers. These providers operate outside Colombia, including in the United States. By accepting this Policy you authorise that transfer, made to providers offering adequate levels of protection under their own compliance frameworks.
7. Security
Encryption in transit (TLS); passwords under bcrypt; email tokens stored hashed, single-use and expiring; attempt and hourly request limits; video access only through signed, short-lived URLs; audit records of sensitive events; automated backups. No system is infallible: we do not guarantee absolute security.
8. Data subjects' rights
You may access, update, rectify and delete your data, request proof of authorisation, be informed of the use made of your data, complain to the Colombian Superintendency of Industry and Commerce, and withdraw authorisation. Where GDPR applies to you, you also have rights of portability, restriction and objection.
How to exercise them:
- On the Platform: your profile lets you view and correct your data, and delete your account.
- By email to support@jhanu.com, stating your request. We reply within statutory deadlines (10 business days for queries, 15 for complaints, under Law 1581 of 2012).
If you appear in a video and did not upload it, write to us at support@jhanu.com: we will process the removal and notify whoever published it, without prejudice to your claim for lack of authorisation being directed at that User, who is the Controller under clause 2.
9. Retention and deletion
| Data | Retention |
|---|---|
| Account and content | While the account exists |
| Accounts registered and never confirmed | Deleted automatically after the published period |
| Email codes and links | Until used or expired, then purged |
| Videos | Deleted from storage when the session or the account is deleted |
| Completion Records | Indefinitely, keeping the holder's name |
| Audit records | Per the retention policy, with the email erased when the account is deleted |
| Accounting and tax information | For the applicable statutory periods |
On Completion Records. We keep the holder's name even after account deletion, because a record without a name attests to nobody — much as an educational institution does not annul a degree it issued. This is an express limitation on the right to erasure, accepted on account creation, and kept to a minimum: name, course, score, date and verification code. The email address is not kept in that record.
10. Minors
The Platform is not aimed at minors and does not allow them to create accounts themselves. However, minors can be expected to appear in competition footage. Whoever uploads such videos must hold the written authorisation of their parents or legal guardians, and answers for it. If we detect a minor's data processed without authorisation, we will delete it.
11. Cookies and local storage
We use no advertising cookies. The public pages of www.anchorjudging.com (the home page
and these legal texts, not the application) use Google Analytics to measure, in
aggregate, how many people visit them and where they come from; it sets its own cookies
(_ga, _ga_*), is not used for advertising or to identify anyone, and you can block
them in your browser or with the
Google Analytics opt-out add-on.
The application stores your session
(token) and your language preference in browser local storage, without which you would
have to sign in on every visit. Google's reCAPTCHA script, loaded only on the registration
page, may set its own cookies under Google's privacy policy.
12. Changes
We may update this Policy. Material changes will be notified to your registered email with reasonable notice.
13. Contact
Jhanu LLC · Cr 80 # 5 - 220, apto. 216, Cali, Colombia · support@jhanu.com