Privacy Policy
Santuary AI (by AI Babu) · Last updated 17 July 2026
1. Overview
Santuary AI is a local, privacy-first companion and mental wellness journal published by AI Babu ("we", "us"). It is designed around a strict zero-data profile architecture. This policy explains what information the app processes, what limited information leaves your device, and the choices you have.
The short version: your journal reflections, CBT thought restructuring logs, habit lists, meal logs, and companion chats are processed and stored entirely on your device and are not uploaded to us. There are no user sign-ups, accounts, or profiles, making your local records 100% unlinkable. The only information that leaves your device is standard, optional advertising data and subscription purchase validation metrics.
2. What stays on your device
The following categories of data are processed and stored 100% locally on your device (using encrypted database models) and are never transmitted to us or stored on our servers:
- Journal entry titles, text contents, and voice recordings;
- CBT thought records, including descriptions of stressful situations, negative thoughts, and cognitive reframings;
- Mood entries, average scores, and mapped emotional triggers;
- Nutrition details, food lists, calories, and macronutrient parameters;
- Habit trackers, routine lists, resisted urges, and slip trigger logs;
- Chat histories and conversation transcripts with the local AI companion.
This data remains in the app's local sandbox storage on your device. You can secure this data behind device biometrics (Face ID or passcode) in settings. All local database records are deleted when you delete the app or choose to delete data in the settings page.
3. Information that leaves your device
a) App store and model downloads
To run the companion offline, the app downloads a language model file during initialization. The download is processed by standard content-delivery networks, which may log technical indicators (like IP address and network details) for request delivery and security. This is not used to identify you.
b) Optional "Share Anonymized Journeys" feature
If you choose to opt-in to the Share Anonymized Journeys feature, the app securely transmits your sanitized CBT coping records (specifically the situation description, negative thought, cognitive distortion categories, and reframed thoughts) to our server database. To protect your privacy:
- All personal identifying tokens (such as specific names, numbers, or emails) are programmatically removed prior to upload.
- Because Santuary AI does not use user accounts, sign-ups, or profile configurations, these shared records are completely unlinkable to your identity.
- This data is contributed solely to help other users facing similar struggles find matching reframing examples (Community Coping Echoes).
c) Optional Geographic matched insights
If you use the Geographic Matching feature, we perform a coarse IP-address-based lookup (at the country/general region level) to prioritize showing matching anonymous reframing logs from users within your region. No GPS/fine location prompts or permissions are required.
4. Advertising & consent
The free tier of the app is supported by ads served through Google AdMob. Google's Mobile Ads SDK may process mobile advertising identifiers, coarse network parameters, ad impressions, and interaction data to serve ads. You can manage your ad consent and parameters in your device's operating system settings.
5. Purchases & subscriptions
If you purchase a Pro subscription, the transaction is handled entirely by Apple (App Store) or Google (Play Store). We never see or store your payment details. We use RevenueCat as our subscription gateway to verify and activate Pro privileges. RevenueCat processes transaction status and device/receipt identifiers under its own privacy policy. We use it solely to grant you access to Pro features (e.g. premium themes, removing ads).
6. Children
Santuary AI does not collect or request any personal identifiers. It is not designed to solicit information from children under the age of 13. If you believe any personal data was shared, please contact us.
7. Security
We recommend enabling biometric locks (Face ID or Touch ID) in the app settings to protect your local data vault from unauthorized access. Your database is encrypted using device-level security protocols.
8. Changes
We may update this Privacy Policy as features evolve. We will revise the "Last updated" date at the top of this policy and notify you in-app where appropriate.
9. Contact
If you have questions, contact the AI Babu team at hello@aibabu.tech.