Privacy Policy for Sanctuary
Last Updated: November 3, 2026
1. Introduction
Welcome to Sanctuary ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and share your information when you use our mobile and web applications (the "App").
2. Information We Collect
A. Personal Information You Disclose to Us
We collect personal information that you voluntarily provide to us when you register for the App. This includes:
- Account Data: When you sign in via Google or Apple, we collect your email address, full name, and any profile picture URL supplied by your sign-in provider.
- User Content: We store the text you submit for generating prayers or spiritual advice (e.g., "I am feeling anxious about work").
- Preferences: We store your app settings, such as "Focus Areas," "News Interests," church connection, and saved favorites. These choices and prayer or guidance content may reveal religious beliefs or other sensitive information you choose to provide.
- Trivia Progress: Signed-in play can sync question completions, outcomes, dates, and timing to your account. Guest game progress stays on the device unless you choose to add it to your account.
- Purchases: Subscription providers process purchase history and entitlement status so we can provide and restore Sanctuary Pro access. We do not receive your App Store or Google Play payment-card details.
- Content Reports: We retain the issue descriptions you submit so we can review content and respond to problems.
B. One-Time Guidance Requests
When you use the public "/try" experience, your situation and email address are sent to our AI and email delivery providers to generate and deliver your guidance. We do not save the original situation or generated response in Sanctuary's application database. Our email delivery provider processes and may retain the delivered message according to its own security and retention practices. If you separately opt in to marketing, we store your email address and consent record; requesting guidance alone does not subscribe you to marketing.
C. Information Automatically Collected
- Device Data: We may collect information about your device, browser type, and operating system.
- Usage Data: We collect first-party activity events, such as content views, game opens, starts, completions, and share initiation, to understand and improve the App. Trivia measurement can include a session ID, entry source, set date, and a pseudonymous account- or installation-derived key. Pseudonymous data can still relate to an account or device. Acquisition measurement also retains campaign tags, a browser visitor/session ID, store-link click IDs and app first-open observations. A browser campaign record expires after 30 days. Android uses Google Play’s install referrer to connect a store link to a first app open; iPhone campaign download reporting is aggregate through Apple. We do not include quiz answers, prayer or guidance content, email addresses or raw account IDs in these acquisition records. Web analytics may also use Google Analytics/Tag Manager and Meta Pixel.
- Push Subscriptions: When you enable notifications, we store browser or native push tokens, supported notification features, preferences, and a time zone to deliver the notifications you choose.
3. How We Use Your Information
We use your information for the following purposes:
- To Provide Services: To generate personalized prayers, devotionals, and news outlooks using Artificial Intelligence.
- To Manage Accounts: To allow you to login, save your history, and manage your profile.
- To Send Notifications: To send you daily reminders (only if you opt-in).
- To Improve the App: To analyze usage trends and fix bugs.
4. Sharing Your Information
We do not sell your personal information. We only share information with the following third-party service providers to help us run the App:
- Authentication & Database: We use Supabase to securely store user data and handle logins.
- AI Generation: Text inputs (e.g., your situation for advice) are sent to AI providers (such as OpenAI) to generate responses. These inputs are not used to train their public models.
- Email Delivery: We use Resend to deliver one-time guidance and other transactional messages.
- Subscriptions: RevenueCat and the Apple/Google stores process subscription purchases, restoration, and account entitlements.
- Native Notifications: Expo and platform push services process notification tokens and delivery.
- Mobile Campaign Measurement: In supported app versions, Meta’s SDK can measure app installs and activation using technical device and advertising information. On iPhone it starts only after tracking permission is granted; on Android it respects advertising-identifier opt-out. The SDK does not receive prayer, guidance, quiz answers, or raw Sanctuary account IDs from our code. Advertising measurement is separate from first-party usage reporting.
- Analytics: Sanctuary uses first-party usage measurement; the web application may also use Google Analytics/Tag Manager and Meta Pixel to measure campaign visits and funnel events. These providers receive technical browser/device information and campaign information under their own privacy policies. We honor Global Privacy Control for Meta Pixel.
5. Your Rights
Depending on your location, you may have the right to request access to, correction of, or deletion of your personal data. You can delete your account and data at any time via the "Profile" page in the App.
6. Contact Us
If you have questions about this policy, you can contact us at: support@sanctuaryapp.us