Privacy Notice

1. Who we are

Sanctum is operated by Jatin Madaan ("we", "us"). We are the data controller of the personal data we process about you through the Sanctum app and website.

2. Personal data we collect

• Account data: name, email address, authentication identifiers, profile preferences.
• Content you create: journal entries, prayer requests, favorites, family circle content, moods, tags.
• Usage data: pages viewed, features used, streak activity, device and browser information, IP address.
• Support data: messages you send us and metadata about those interactions.
• Billing data: collected and processed by Paddle, our Merchant of Record. We receive only the information needed to attribute a subscription to your account (e.g. subscription status, plan, billing period).

3. How we use your data

• Create and secure your account.
• Provide the Service (prayers, reading, journal, family circle, audio, plans).
• Attribute subscriptions and manage entitlements based on Paddle events.
• Provide customer support.
• Detect, prevent, and address fraud, abuse, and security issues.
• Improve the product and understand how features are used.
• Send transactional messages (e.g. sign-in codes, subscription updates). Marketing messages only with your consent.

4. Legal bases

• Contract: to provide the Service you have signed up for.
• Legitimate interests: to keep the Service secure, prevent fraud, and improve it.
• Consent: for optional features such as marketing communications, where required.
• Legal obligation: where we must retain or disclose data by law.

5. Sharing your data

We share personal data only with the following categories of recipients:

• Service providers / subprocessors: hosting, database, authentication, storage, and analytics providers acting on our instructions.
• Merchant of Record: Paddle.com Market Ltd., for sale of the product, subscription management, payments, tax compliance, and invoicing.
• Professional advisers: legal and accounting advisers, where necessary.
• Authorities: where required by law or to protect our rights or others' safety.

We do not sell your personal data.

6. International transfers

Your data may be processed in countries outside your own, including outside the UK/EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Retention

We keep personal data only as long as we need it to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, data is deleted or anonymised.

8. Your rights

Depending on where you live, you may have rights to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent. You may also have the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact us at jatinmadaan008@gmail.com. We will respond within one month.

9. Security

We use appropriate technical and organisational measures including encryption in transit, access controls, and audit logging. No system is perfectly secure; you are responsible for keeping your account credentials confidential.

10. Cookies

We use strictly necessary cookies and similar technologies (such as local storage) to keep you signed in, remember preferences, and protect the Service. Optional analytics or marketing cookies, if used, are enabled only with your consent where required.

11. Children

Sanctum is designed to help families pray together, but accounts are for adults. Parents and guardians are responsible for content they share with children through the family circle.

12. Changes to this notice

We may update this notice from time to time. We will update the "Last updated" date and, where appropriate, notify you in the app.

13. Contact

Jatin Madaan — jatinmadaan008@gmail.com. For billing-related privacy questions, you may also contact Paddle at paddle.net.