Sanātana App Privacy Policy

2.1 Account Information

An account is required to use the app. You can sign up with an email address and password, or sign in with Google or Sign in with Apple. Authentication is handled by Supabase. We collect:

• Email address — the address you sign in with
• Name — if you provide one, or if it is supplied by Google or Apple during sign-in
• User ID — an account identifier we generate, used to link your data to your account

Passwords are handled by our authentication provider. They are stored as salted hashes and we never see or store your password in readable form. If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's private relay address.

2.2 Birth Details (for horoscope and rashi)

The horoscope feature needs to know your rashi (zodiac sign). To work that out, we collect:

• Date of birth — required for the horoscope feature
• Time of birth — optional, for a more precise chart
• Place of birth — optional, entered by you as text

Place of birth is typed in by you. The app does not read your device location to obtain it, and does not request location permission at all.

2.3 App Activity

So that your practice is saved and synced across your devices, we store what you do in the app:

• Sadhana logs — the daily practices you tick off, and your streaks
• Meditation history — sessions, durations and completion
• Japa and mala counts, vrat logs and sankalpas
• Diya progress — intentions you set, fuel earned and how long your lamp stays lit
• Favourites and reading history — the texts, verses, aartis and teachings you save or open
• Achievements and Gyan Path lesson and quiz progress
• Audio analytics — which mantras, bhajans and aartis you play, and for how long
• Verse analytics — which verses you view
• Your preferences — chosen deity, language, dashboard layout, reminder times and notification settings
• Messages you send to the AI spiritual guide, and the responses

This activity data is tied to your account so that it can be shown back to you. It is used to run the features you are using and to personalise content in the app — not to build an advertising or marketing profile.

2.4 Crash Logs, Diagnostics and Device Identifier

Sanātana uses Firebase Crashlytics, a Google service, to find out when the app crashes so we can fix it. When a crash or serious error happens, Crashlytics collects:

• Crash logs — the stack trace and the state of the app at the moment it failed
• Diagnostics — device model, operating system version, app version, language, and whether the device was low on memory or storage
• A device identifier — a Crashlytics installation identifier used to group multiple crashes from the same device together

This data is sent to Google. It is the only automatic reporting in the app. Sanātana contains no advertising SDK and no product analytics SDK — we do not track your behaviour across other apps or websites.

2.5 Voice Input (Microphone)

The app can accept a spoken question instead of a typed one. Microphone access (android.permission.RECORD_AUDIO on Android, NSMicrophoneUsageDescription on iOS) is requested only for this.

• Speech is transcribed by your device's own speech recognition — Apple's on iOS, Google's on Android — under those companies' privacy policies, not by us
• We receive only the resulting text, and only if you then send it
• We do not record, store or transmit audio. No recording is kept on our servers
• You can refuse microphone permission and use the app normally with text input

2.6 What We Do Not Collect

• Location. The app does not request location permission and does not collect GPS or precise or approximate location
• Contacts, photos, calendar or files
• Payment or financial information. The app is free, with no in-app purchases and no subscriptions, so there is nothing to bill
• Health or fitness data from Apple Health or Google Fit
• Advertising identifiers (IDFA or Android Advertising ID)

4.1 Our Providers

We use a small number of providers to run the app. This is the complete list, and what each one receives:

• Supabase — hosting, authentication and the database. Receives your account details, birth details and all of your app activity, because that is where your data is stored.
  View Supabase Privacy Policy
• Google Sign-In — only if you choose to sign in with Google. Google confirms your identity to us and provides your email address and name.
  View Google Privacy Policy
• Sign in with Apple — only if you choose it. Apple confirms your identity and provides an email address, which is a private relay address if you asked Apple to hide yours.
  View Apple Privacy Policy
• Firebase Crashlytics (Google) — receives crash logs, diagnostics and a device identifier when the app crashes, as described in section 2.4. It does not receive your birth details, your practice data or your AI conversations.
  View Firebase Privacy and Security information
• Google Gemini — the AI model behind the AI features. It is never called directly from your device; requests go through a server-side proxy we operate, which holds the API key. What it receives is set out in section 4.2.
  View Google Privacy Policy
• Apple and Google speech recognition — only if you use voice input, and only to turn your speech into text on your device, under their own privacy policies. We receive the text, not the audio.

There are no other third parties. In particular, there is no advertising network, no ad SDK, no attribution or marketing SDK, and no product analytics SDK in the app.

4.2 What Is and Is Not Sent to the AI Provider

Sanātana has two kinds of AI feature, and they send different things. In both cases the request goes through our own server-side proxy rather than from your device to Google directly.

AI spiritual guide (chat)

• The messages you type — or dictate — are sent to Google Gemini so that a response can be generated.
• Because your message is sent as you wrote it, please do not include information you would not want processed by an AI provider.

AI horoscopes

• Sent: your rashi (zodiac sign), the panchang for the day — tithi, nakshatra and related calculations — and the date.
• Not sent: your date of birth, your time of birth, your place of birth, your name, your email address and your user ID.

6.1 Access and Portability

• Export your data yourself, in the app, from Settings → Account & Data → Export Data to JSON. The export covers your profile, sadhana logs, meditation history, diya progress, streaks, favourites, reading history and achievements. You can copy it to the clipboard or save and share it as a .json file
• If you can no longer open the app, email us and we will send you a copy of your data

6.2 Correction and Updates

• Update your profile information directly in the app settings
• Correct any inaccurate data

6.3 Deletion

• In the app: Settings → Account & Data → Delete Account. The request is recorded straight away and you are signed out
• On the web, if you can no longer open the app, from the account deletion page
• There is a 30-day grace period before anything is erased, so an accidental request can be undone
• Signing back in during those 30 days cancels the deletion and restores your account intact. The app tells you a request is pending and offers to withdraw it. You can also email us to cancel
• After the 30 days, deletion is permanent and cannot be undone
• Encrypted backup copies are removed within 90 days

6.4 Permission Controls

• Microphone: Revoke microphone access in device settings; voice input will be disabled but text input remains available
• Notifications: Disable push notifications in app settings or device settings
• Location: The app does not request or use location data