Privacy Policy

Last updated: 31 July 2026

Sanctum is built to run entirely on your device. This policy explains, plainly, what that means for your data.

The short version: Sanctum collects no personal data. There are no accounts, no sign-up, and no cloud sync. Your app-usage data is read through Apple's Screen Time framework and stays on your device. We cannot see it.

Data we collect

No personal data. Sanctum has no user accounts, asks for no email to use the app, and does not collect your name, contacts, location, or messages. The app works fully offline.

Screen Time data

On iOS, Sanctum uses Apple's Screen Time (Family Controls / DeviceActivity) framework to block apps and show your insights. Under Apple's design, the raw usage data is sandboxed on your device — even Sanctum only ever receives the aggregate summaries it needs to render your insights, and never the underlying records. None of it is transmitted to us or to anyone else.

Blocking happens on-device through the system framework.
Your list of blocked apps, schedules, and session history are stored locally on your device.
We operate no server that receives your usage data. There is nowhere for it to go.

Purchases

Subscriptions and the lifetime purchase are handled by Apple's App Store and processed through RevenueCat, our in-app-purchase provider. When you subscribe, RevenueCat receives a purchase receipt and an anonymous, device-generated identifier so it can confirm your entitlement across reinstalls. This identifier is not linked to your name or email, and payment details are handled entirely by Apple — we never see your card information.

Analytics

Sanctum may use privacy-respecting product analytics (PostHog) to understand which features are used, so we can improve the app. Events are tied to an anonymous device identifier, never to your identity, and contain no Screen Time data. We do not sell data, and we run no advertising SDKs.

Children

Sanctum is a self-commitment tool for the person using it. It is not a parental-control or monitoring product and is not directed at children under 13.

Your rights

Because your data lives on your device, you are in control of it. Deleting the app removes its local data. To manage or cancel a subscription, use the App Store. For any privacy question, contact us at [email protected].

Changes

If this policy changes, we will update the date above and post the revised version here.