Privacy Policy

Last updated: September 30, 2026

This Privacy Policy describes how Sanctus ("we", "the app") collects, uses and protects the information of users ("you") when you use our mobile application. By using Sanctus you accept the practices described here.

1. Data controller

Sanctus, reachable at sanctus.app.dev@gmail.com. If you have questions about how your data is handled, write to us there.

2. Data we collect

Account data

• Email: for authentication and essential communications (verification, password recovery).
• Name: to personalize the experience (greetings, prayers).
• Unique identifier (UID): assigned by Firebase Authentication to identify you without exposing your email.
• Authentication provider: email/password or Sign in with Apple.

Spiritual-use data

• Journal reflections: free text you write, emotional labels (mood/tag) and Lectio Divina responses.
• Saved phrases: the passages from the Gospel, its Context or the story of the saint of the day that you choose to save to your notes, with the date and the passage reference, and the note you write about them. They are only used to show them to you in your journal; they are not used for analytics or advertising.
• Daily activity: completion marks for prayer, Lectio, Gospel and reflection, your streak of consecutive days and points accumulated per liturgical season.
• Preferences: notification times, language, configured quick actions.

Subscription and purchase data

• Subscription status, purchase history and renewal date through RevenueCat and the Apple App Store / Google Play stores.
• Referral code and conversions in the referral program.

Technical data

• Anonymous device identifiers, language, time zone and operating system type through Firebase.
• Usage logs of the AI features (without sensitive content) to prevent abuse of the service.
• Advertising identifier (IDFA on iOS, AAID on Android) and app usage events (install, activation, sign-up) through Meta Facebook App Events, to measure ad performance and optimize acquisition campaigns.

We do not collect: precise geographic location, contacts, photos from your gallery, microphone audio or health data.

On iOS, access to the advertising identifier (IDFA) requires your consent through the App Tracking Transparency (ATT) system. You can revoke the permission in the system Settings at any time.

3. Purposes of processing

• Create and maintain your user account.
• Sync your progress across devices.
• Manage your subscription and prevent fraud.
• Generate personalized content with artificial intelligence (prayers, saint biographies, Gospel context).
• Send scheduled notifications that you configure yourself.
• Improve the service through aggregate (not individual) usage analysis.
• Comply with legal obligations and respond to requests from competent authorities.

4. Legal bases (GDPR)

• Performance of a contract: to provide the app's service and process your subscription.
• Consent: to send push notifications, generate content with AI and, on iOS, for ad tracking (ATT) and the use of the IDFA with Meta.
• Legitimate interest: abuse prevention, security, product improvement and measurement of advertising campaigns (including the advertising identifier on Android, where the platform does not require an equivalent ATT dialog).
• Legal obligations: billing, fraud prevention.

5. Artificial intelligence

Some Sanctus features generate content using artificial intelligence models (Anthropic Claude). The generated texts (prayers, saint biographies, Gospel context, personalized reflection) are produced automatically and may contain inaccuracies. AI-generated content does not replace the pastoral guidance of a priest, spiritual director or other professional.

The inputs you send to the AI features (for example, prayer intentions) are processed on Anthropic's servers in the United States. Anthropic does not use this data to train its models by default. See Anthropic's policy for more details.

If you find AI-generated content that is offensive, inaccurate or inappropriate, you can report it by tapping the "AI-generated" icon in the app.

6. Data processors (third parties)

• Google LLC (Firebase Authentication, Firestore, Cloud Functions, Cloud Storage): hosting, authentication and database. Data stored in the United States.
• RevenueCat, Inc.: subscription management. Receives your identifier (UID) and purchase information.
• Anthropic, PBC: AI content generation.
• Apple Inc. / Google LLC (App Store and Google Play): payment processing and app delivery.
• Resend, Inc.: sending transactional emails (verification, password recovery).
• Meta Platforms, Inc. (Facebook App Events): measurement of installs and app events (e.g. sign-up completed) and optimization of acquisition ads. Receives device/advertising identifiers (subject to platform permissions) and aggregate usage events. See Meta's privacy policy.

7. International transfers

Your data may be transferred to the United States and other countries where our providers operate. These transfers are made under the European Commission's standard contractual clauses (SCCs) or equivalent mechanisms that guarantee an adequate level of protection.

8. Data retention

• While your account is active: we keep your data to provide the service.
• When you delete your account: we delete your profile, reflections, saved phrases and activity data immediately. Encrypted backup copies are deleted within a maximum of 30 days.
• Legal records: invoices and transaction records are kept in accordance with applicable tax law (up to 5 years in Mexico, 10 years in some EU countries).

9. Your rights

You have the right to:

• Access: request a copy of your data.
• Rectification: correct inaccurate data.
• Erasure: delete your account and data (in the app or via /delete-account).
• Portability: receive your data in a structured format.
• Objection and restriction: object to certain processing based on legitimate interest.
• Withdraw consent: at any time, without affecting the lawfulness of prior processing.

To exercise these rights, write to us at sanctus.app.dev@gmail.com. If you believe we have not handled your request, you can file a complaint with the data protection authority of your country (INAI in Mexico, AEPD in Spain, CNIL in France, etc.).

10. Minors

Sanctus is intended for people over 13 years of age (16 in the European Union). We do not knowingly collect data from children under that age. If you are a parent or guardian and believe a minor has created an account without your consent, write to us at sanctus.app.dev@gmail.com to delete the account.

11. Security

We use encryption in transit (HTTPS/TLS) and at rest (Firebase encryption), multi-factor authentication for administrative access, and periodic security reviews. However, no system is 100% impenetrable; we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy from time to time. We will notify material changes through a prominent notice in the app or by email. The date at the top indicates the latest revision.

13. Contact

For any privacy question: sanctus.app.dev@gmail.com.