This page explains what Ankyro collects, why, who sees it, and what you can do about it. Ankyro is based in Singapore. We follow Singapore’s Personal Data Protection Act (PDPA). If you live in the EU or the UK, the GDPR also protects you, and we follow it too.

Who is responsible

Ankyro, Singapore, is responsible for your data. Write to hello@ankyro.com about anything on this page. That address also reaches our data protection officer.

What we collect

Your answers in the chat: who needs cover, ages, where you live, where you’re moving, your budget.
Health details, only if you choose to share them, because insurers ask for them.
Your email address, and your name and phone number if you give them.
What you send us on WhatsApp after you buy: messages, receipts, medical reports and other documents for claims.
Documents an insurer asks for, such as a passport photo, sent through a secure link.
Basic technical data, such as your browser and the pages you visit, kept in server logs for security.

Why we use it

To find and compare plans that fit you.
To prepare your application and send it to the broker and the insurer you choose.
To send your claims, answer your questions and remind you before renewal.
To keep the site secure and fix problems.

We use your data because you asked us to do these things. For health details, we ask for your explicit consent first. You can take it back at any time, but then we can’t apply or claim for you.

Who sees it

The licensed broker who checks and files your application.
The insurer you choose. Never insurers you didn’t choose.
The companies that run parts of Ankyro for us: website hosting, data storage, the AI model that reads your answers and documents (Anthropic, the maker of Claude), email, and WhatsApp (Meta). They may only use your data to provide their service to us, under a written contract.
Authorities, only if the law requires it.

Anthropic does not use your data to train its models.

How the AI is used

Ankyro uses AI to read policies, compare plans, fill in forms and sort documents. The AI never decides alone. A licensed broker checks every application, and the insurer makes every decision on cover and claims.

Data sent abroad

Some of the companies above store data outside Singapore, for example in the EU or the US. When that happens, we use contracts that keep your data protected to the standard of the PDPA and the GDPR.

How long we keep it

If you don’t buy: 12 months after your last message, then we delete it.
If you buy: for as long as your policy runs, plus 6 years, because insurance and tax law require records.
Files sent on WhatsApp: moved to our encrypted storage as soon as they arrive.
Server logs: 30 days.

How we protect it

Your data is encrypted when it moves and when it’s stored. Only the people who need it to help you can see it.

What we never do

Sell your data.
Use your health details for advertising.
Share your details with insurers you didn’t choose.

Cookies

We don’t use advertising or tracking cookies. If we ever add analytics, we’ll update this page and ask you first where the law requires it.

Your rights

You can ask to see, correct, download or delete your data, or stop us using it, at any time. Write to hello@ankyro.com. We reply within 30 days. If you’re not happy with our answer, you can complain to Singapore’s Personal Data Protection Commission, or to the data protection authority where you live.

Children

You must be 18 or older to use Ankyro. A parent can include a child in a family plan.

Changes

If we change this page in a way that matters, we’ll tell you by email before it takes effect.

Privacy.