Privacy Policy

1. Who we are

Sanctify is a mobile application operated by True North Performance LLC (“Sanctify,” “we,” “us,” or “our”). This Privacy Policy explains how the Sanctify app collects, uses, processes, shares, and protects information about you when you use the app and its related services.

This policy covers the Sanctify mobile software. Any purchases you make through our online store are also subject to the store’s terms presented at checkout. If you do not agree with this policy, please do not use the app.

2. Information we collect

We only collect information needed to provide the app’s coaching, tracking, and protocol features. This includes:

• Account information — your name, email address, date of birth, biological sex, height, weight, and the preferences and goals you set during onboarding.
• Health and wellness data you enter — workouts and training, nutrition and meals, recovery and sleep check-ins, mood/energy reflections, body measurements, and the protocols and plans you choose to track.
• Apple Health (HealthKit) data — only if you grant permission, we read metrics such as sleep, heart rate variability (HRV), resting heart rate, blood oxygen, and respiratory rate to calculate your recovery and readiness. See Section 4 for how we handle this data.
• Photos you upload — progress/physique photos (used to estimate body composition) and photos or PDFs of lab results / bloodwork (used to read and explain your biomarkers).
• Device and diagnostic information — app version, device type, and crash and diagnostic reports used to keep the app stable.

Much of your data is stored locally on your device. Certain features (account sign-in, lab document storage, orders, push notifications, and AI analysis) also store or transmit data to the secure third-party services described in Section 6.

3. How we use your information

• To generate and personalize your protocols, plans, targets, and coaching guidance.
• To analyze the photos, labs, and data you provide and surface insights, trends, and recommendations (see Section 5).
• To calculate your performance, recovery, and biological-age metrics from the data you log.
• To send you reminders and notifications you have enabled.
• To operate, secure, support, and improve the app, and to meet legal obligations.

We do not sell your personal or health information, and we do not use it for third-party advertising.

4. Apple Health (HealthKit) data

If you connect Apple Health, the app reads only the metrics you authorize, and only to power in-app features such as your recovery and readiness scores. In accordance with Apple’s requirements:

• We never use HealthKit data for advertising or marketing.
• We never sell HealthKit data or share it with data brokers.
• We do not share HealthKit data with third parties except as needed to provide a feature you have requested, and never for their own marketing.
• You can revoke the app’s access at any time in the iOS Settings → Health → Data Access & Devices, or within the Health app.

5. AI processing of your data

Several features use artificial intelligence to analyze the information you provide. For example, when you photograph a meal, a progress photo, or a lab report, or when you chat with the in-app coach (“Ari”), the relevant content — such as the image, document text, or your message together with the context needed to answer it — is transmitted securely to our AI processing provider (OpenAI) to generate the result, which is then returned to you and stored with your account.

Our AI provider processes this data on our behalf to deliver the feature. We have data-processing arrangements intended to ensure your content is not used to train third-party public models. AI outputs (such as food estimates, body-fat estimates, and lab interpretations) are informational and are not medical advice or a diagnosis.

6. Third-party processors we use

We use trusted service providers (“sub-processors”) to run the app. They process your data only to provide their service to us and under their own security and privacy commitments:

• Google Firebase — account authentication, push notifications, file storage, and crash/diagnostic reporting.
• Supabase — secure cloud database and file storage (including the lab documents you upload).
• OpenAI — AI processing of your photos, lab documents, and messages to generate analysis and coaching (see Section 5).
• Stripe — payment processing if you make a purchase. Card details are handled by Stripe; we do not store full card numbers.
• Apple — App Store distribution, HealthKit, and push-notification delivery.

7. How we store and protect your data

Data on your device is stored within the app’s protected storage. Data held in the cloud is stored with the providers above using encryption in transit and at rest and access controls that limit your records to your account. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard safeguards.

8. Data retention

We retain your information for as long as your account is active or as needed to provide the app. You can delete your data at any time (Section 9). When you delete your account or your data, we remove or de-identify it, except where we must retain limited records to meet legal, security, or accounting obligations.

9. Your rights and choices

• Access & export — you can request a copy of your data.
• Correction — update your profile and entries in the app at any time.
• Deletion — delete your data from within the app’s settings, which removes your locally stored data; you may also request deletion of cloud-stored data by contacting us.
• Revoke permissions — turn off Apple Health access, notifications, camera, or photo permissions at any time in iOS Settings.
• Withdraw consent — stop using the app at any time.

To exercise any of these rights, contact us at support@truenorthperformance.co.

10. Children's privacy

Sanctify is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, notify you in the app. Your continued use of the app after an update means you accept the revised policy.

12. Contact us

If you have questions about this Privacy Policy or your data, contact:

True North Performance LLC
Email: support@truenorthperformance.co
Support: truenorthperformance.co/support