This website uses cookies to ensure you get the best browsing experience.
I agree
We collect the account information you provide, including your email address and, if you choose to add them, a preferred name and a profile photo. Our authentication provider processes your password if you use email-and-password sign-in and assigns an account identifier. When you use My Daily Check-In, we store the date and time zone, the mood, intensity, and settledness you select, the emotions and body areas you choose, and any body-area notes or listening responses you write. Daily Check-Ins are stored with your account on our servers as well as on your device. We also keep your Terms of Use and Privacy Policy acceptance records, membership and trial records, and the membership event records described below. Technical service records are described under Technical Logs.
If you sign in with Google, Google can provide your Google account identifier, email address, email-verification status, name and profile-picture link to our authentication provider. If you sign in with Apple, Apple provides an account identifier and can provide your email address, including an Apple private relay address, and your name when you first authorize sign-in. Where available, an Apple authorization credential is securely exchanged for a token used to revoke the app's Apple authorization when you delete your Sanctuary account. Deleting your Sanctuary account does not delete your Google or Apple account.
Journal entries, Pathway reflections, Core Integration writing, reframing practices, personal Shattered Mirror reflections and Pathway progress are stored in the app on your device, separated by your Sanctuary account. The app does not send this writing or progress to our servers or provide us with a way to read it remotely. We do not provide server backup or cross-device synchronization for it. Device backup and restore behavior may depend on your device settings; do not rely on Sanctuary account sign-in to restore this writing on another device. Daily Check-In notes and listening responses are different: they are sent to our servers and stored with your account. We do not send private Journal, Pathway, reframing or Daily Check-In writing to payment or subscription providers.
We use account and sign-in information to authenticate you and maintain your account, Daily Check-In information to save and display your check-ins and history, consent records to record your acceptance of our current legal documents, and membership and trial records to determine your access. We use membership event records to maintain a history of membership changes and to investigate membership-access errors. We also use information needed to respond to support requests and operate and secure the service. We do not use your information for third-party advertising.
This version offers Sanctuary Free and a seven-day Sanctuary All Access trial for eligible accounts. The trial does not require payment information and does not automatically become a paid membership. We keep account-linked trial and membership information, including trial eligibility, start and end times, access status and relevant internal record identifiers. When we grant, change or end membership access for an account in a way other than a trial you start, we also keep a membership event record, which can include the plan, the access end date, the reason for the change, internal record identifiers, the processing result and timestamps. Apple subscription purchasing and Restore Purchases are not available in this version. We do not collect payment-card details through this version of the app.
We do not sell your personal data. We use Supabase for authentication, account data, Daily Check-Ins and private profile-photo storage. Google and Apple process their respective sign-in flows under their own privacy practices. Information you send when contacting support is used to respond to your request. We may disclose information where required by applicable law.
To operate and secure the service, our authentication provider records security events such as account creation, sign-in, token refresh, password reset and account deletion. These records include your account identifier, email address, IP address, browser or device information sent by the app and the time of the event. We use them to protect accounts, investigate misuse and troubleshoot sign-in. Our hosting provider keeps its service logs, which can include these security events and request details such as the request path and time, for seven days. We do not use IP addresses to determine your location, for advertising or to track you across other companies' apps or websites. This version of the app does not send crash reports, analytics or advertising data.
You can request permanent deletion in the app by opening My Profile from the profile header and choosing Delete My Account. You can also contact us for help with deletion. Our deletion process removes the Sanctuary sign-in account and its associated Daily Check-Ins, consent records and membership and trial records. Before sending the deletion request, the app removes the profile photos stored for that account and confirms they are gone; if it cannot confirm this, it stops and your account remains active.
After confirmed server deletion, the app removes the information it kept for that account on the device used for deletion: its Journal, Pathway progress, mirror, Moon Cycle, favorites, Daily Steps, the device copy of its Daily Check-Ins, the affirmations marked as held, its display preference, its scheduled reminders, and the Daily Check-In PDF files and any not-yet-saved profile photo that the app created for that account in its temporary file area. The app does not keep copies of its server responses in the device's web cache. When an updated version of the app opens, it removes any such copies kept by earlier versions; if it cannot remove them, it tries again the next time it is opened. It shows your profile photo without saving a copy of it to the device's storage. When you choose a photo, the app removes the temporary copy of the original image created during that choice, whether you use the photo, cancel or the photo cannot be used; your Photos library is not changed. If that removal fails, the app does not try again, and the temporary copy may remain on the device. Temporary copies left by earlier versions of the app cannot be linked to a particular account, are not removed by the app and may remain on the device. If the app cannot finish removing some of this information, it still signs out and tries again the next time it is opened. If the app cannot record that it needs to try again, it tries again only while it remains open, such as when someone next signs in; if the app is closed or removed before it succeeds, that information may remain on the device. On iPhone, information kept in the device's secure storage can remain even after the app is removed. In rare cases, if the device's date was set incorrectly and the app could not record that date when it saved a Daily Check-In, the device copy of that Daily Check-In may not be found and can remain on the device. Any PDF you save, share or send elsewhere is outside the app and is not affected by account deletion. Deletion does not erase information on another device or in device backups.
Security event records described under Technical Logs are kept as described there. Our hosting provider keeps daily backups of our account database for seven days, so deleted database records, including Daily Check-Ins and account records, can remain in those backups for up to seven days after deletion. These database backups do not contain profile-photo files. When an account is deleted, we remove the direct link to the account, the written reason and the subscription identifier from its membership event records. We keep the event identifier and the plan, date and processing details to maintain a history of membership changes, and these records are not automatically deleted. Deleting the Sanctuary account does not delete the Google or Apple account used to sign in.
You can update your preferred name and profile photo in My Profile, return to your saved writing, and request account deletion in the app. You can also contact us about your personal information or for deletion assistance. Trial expiry does not itself delete your saved writing or Pathway progress.
The App is not directed to children under 18, and we do not knowingly collect information from them.
We use reasonable administrative and technical safeguards to protect your information, but no method of storage or transmission is completely secure.
We may update this Privacy Policy from time to time. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
Questions about this Privacy Policy or your data, including deletion requests, can be directed to our office at (719) 319-8170 or sent to admin@soulfulsexologysanctuary.com.