Privacy Policy
Effective 28 August 2026 · Last updated: 8 September 2026
Our Commitment to Privacy
At Sanctuary, we believe in building a calm, rewarding walking companion that respects your privacy. We collect only what we need to make your experience magical, and nothing more. Your wellness journey is yours — we're just here to help your garden grow.
Data We Collect
Step Count Data: We sync step totals from Apple Health or Health Connect in bounded intervals. We do not collect GPS, heart rate, or sleep. Your step totals are sent to Sanctuary's Firebase backend, where they are used to grow your plants, calculate Spirit Energy and rewards, remove duplicate submissions, and detect fraudulent activity.
Account Information: Email address and display name for authentication and personalization. If you sign in with Google, Google may also supply a link to a profile photo it already hosts; we store and display that link as part of your account profile. Sign in with Apple does not provide a profile photo. We do not request access to your photo gallery, do not upload images from your device, and do not store the image itself.
Approximate Location: Sanctuary never requests precise or GPS location, and the app contains no location permission or geolocation library. Two forms of coarse location still apply: the country you explicitly select in Settings, which we store on your profile for display and reward eligibility; and an approximate region that Firebase Analytics may derive from network information such as your IP address, so we can see aggregate usage by region. Neither is precise location.
Game Progress: Your garden state, flowers balance, rewards history, and streaks to power your experience.
Device Information: Basic device identifiers for app functionality and security.
Profile and Consent Data: Your selected country, timezone, preferences, and the versions and time of your Terms and Activity Safety Notice acknowledgement. We do not ask for your date of birth or gender.
Usage, Analytics, and Diagnostics: App actions, sync outcomes, app version, device type, and diagnostic reports. What step information reaches Firebase Analytics depends on which version of the app you are running: versions before 1.0.6 may report the exact number of steps accepted and the exact Spirit Energy credited for each sync, while version 1.0.6 and later report only coarse activity-volume and credited-energy bands. No version sends your individual time-stamped Health Connect or HealthKit records to Firebase Analytics. Analytics and crash reports may use a pseudonymous Firebase account or app-instance identifier to diagnose affected sessions.
What We Don't Collect
How We Use Your Data
Exact step totals are sent to Sanctuary's Firebase backend and used to:
- Calculate Spirit Energy to grow your digital garden
- Track streaks and award milestone bonuses
- Enable reward redemptions
- Prevent duplicate step credit and reward abuse
What Firebase Analytics receives depends on your app version: versions before 1.0.6 may report exact steps accepted and energy credited per sync, while version 1.0.6 and later report coarse activity-volume bands instead. Neither sends your individual time-stamped health records. We use those analytics and Firebase Crashlytics diagnostics to improve performance and fix bugs.
We never sell your data to third parties. Period.
Service Providers and Security
We use Google Firebase and Google Cloud for Authentication, Firestore, Cloud Functions, App Check, Cloud Messaging, Remote Config, Firebase Analytics, Crashlytics, and secure hosting. Data is encrypted in transit and at rest, and access is restricted by authenticated, role-based security rules.
Health Connect or Apple Health supplies step-count records after you grant read access. We do not write to your health records. You can revoke access in your device settings.
Reward partners receive only the minimum information needed to validate and fulfil a voucher. We do not share your step data, email address, or personal profile with reward partners.
We may also disclose information when required by law or when reasonably necessary to protect users, our service, or legal rights.
Your Rights
You can exercise these rights through the controls and contact methods below:
- Revoke Sanctuary's health data access at any time in your device's Health Connect or Apple Health settings
- Request a copy of your data by emailing contactus@my-sanctuary.com
- Delete your account and associated personal data through Profile in the app, or from our account deletion page
Data Retention
We retain your personal data while your account is active so we can provide Sanctuary.
If you delete your account, we remove personal data within 30 days, except for limited records that must be kept for legal obligations, fraud prevention, security, dispute resolution, or voucher accounting.
Anonymous or aggregated statistics that no longer identify you may be retained for analytics and service improvement.
Age Eligibility
Sanctuary is intended only for people aged 18 or older. If you believe a person under 18 has provided personal information through the app, contact us so we can investigate and take appropriate action.
Questions?
If you have any questions about this Privacy Policy or our data practices, please contact us at:
contactus@my-sanctuary.com