Sanct Privacy Policy
Effective date: 23 August 2026
Who we are: Sanct Social Pte. Ltd. ("Sanct", "we", "us"), Singapore.
Contact: sion@sanct.social
Sanct is a private social app for small circles of friends. This policy explains, in plain language, what we collect, why, and what you can do about it. If anything here is unclear, email us — a person reads that inbox.
1. What we collect
Things you give us
- Account details: your name, email address, profile photo, and the username you choose. Sign-in is handled by Clerk (our login provider). If you sign in with Google, Google shares your name, email and profile picture with us.
- What you post: photos, captions, comments, reactions, stickers, and messages you send to friends.
- Mood and check-ins: the emotions you choose in your daily check-in, your reflections in the Sanctum, and the "memoji" you set. This is sensitive information about how you feel. We treat it with extra care (see section 3).
- What you tell Sancty: answers you type when Sancty (our panda companion) asks you something — for example why you stayed in on a Saturday, or whether you've eaten.
- Places: a location you attach to a post or your profile. We never track your location in the background.
- Contacts you choose to connect with: the friends you add inside Sanct.
Things we collect automatically
- Basic device and usage information (app version, device type, language, when you open the app, crash reports) so the app works and we can fix problems.
- Cookies/local storage needed to keep you signed in and remember your settings.
We do not collect your phone contacts, your precise background location, or your messages' content for advertising. Sanct has no ads.
2. Why we use it
- To run Sanct: show your posts to the friends you chose, deliver messages, keep you signed in.
- To make Sancty helpful: Sancty learns your routines inside Sanct (when you usually post, check in, or eat) so she can gently remind you or notice a change. She only knows what the app sees or what you tell her — nothing else.
- AI features: some features (for example reading the mood of a post, or Sancty's personalised replies for premium members) use an AI model provided by Anthropic (Claude), and a memory service (Honcho) that helps Sancty remember context about you. Your content is sent to these providers only to produce the feature you're using; they are not permitted to use it to train their models.
- To keep people safe: if something you type to Sancty suggests you may be at risk of harming yourself, the app shows you support options (a helpline, a close friend). A category of that alert (not your words), your username, the time, and the last known location on your profile are shown to Sanct's founder so a human can check on you. The text you typed is never stored and never shown to anyone. These alerts are deleted after 90 days.
- To contact you: service emails (verification, security, important changes) via Resend. We do not send marketing email without asking first.
- To protect Sanct: preventing abuse, spam and security incidents.
3. Sensitive data: moods, reflections, safety
- Your moods, check-ins and reflections are visible only to you and — where you choose to share a post — to the friends you picked. Your constellation of memories is yours alone; the system that reads it cannot be pointed at another user.
- Sancty's notes about your habits are private to you. They are never shown to friends.
- You can stop any Sancty reminder in one tap (her gear icon). When you do, she stops — and the related note is archived, not used again.
- Safety alerts keep only a category, never your words (see section 2).
4. Who can see what
- Friends you add: your posts, reactions, comments, your public profile, and your current memoji. Sanct has no public feed — strangers cannot find your posts.
- Sanct's team: only what is needed to run the service, fix problems, or respond to a safety alert. We do not read your messages for curiosity or marketing.
- Service providers who process data on our behalf, under contract: Clerk (sign-in), Supabase (database and photo storage), Anthropic and Honcho (AI features), Resend (email), Replit (hosting), Google (if you choose Google sign-in). Data may be processed in Singapore, the United States, or the EU.
- Law: we disclose data only when legally required, or to prevent serious harm.
We never sell your data.
5. How long we keep it
- Your account, posts and messages: for as long as your account exists.
- Mood check-ins and memories: for as long as your account exists. Past years are archived for you, never deleted by us.
- Safety alerts: 90 days.
- Backups: up to 30 days after deletion, then gone.
Delete your account and we delete your data within 30 days, except where the law requires us to keep specific records.
6. Your rights
Wherever you live, you can:
- See what we hold about you and get a copy.
- Correct it.
- Delete your account and data.
- Withdraw consent for optional features at any time (for example, turn off Sancty's reminders, or remove Google sign-in).
- Complain to your local data-protection authority (in Indonesia under the Personal Data Protection Law, in Singapore under the PDPA, in the EU under GDPR).
Email sion@sanct.social and we'll act within 30 days.
7. Children
Sanct is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a child is using Sanct, tell us and we will remove the account.
8. Security
Your data is encrypted in transit and at rest. Access inside Sanct is restricted by row-level security, so one user's data cannot be read through another user's account. No system is perfect; if a breach affects you, we will tell you.
9. Changes
If we change this policy in a meaningful way, we'll tell you in the app before it takes effect.
Sanct Social Pte. Ltd. · Singapore · sion@sanct.social