This website uses cookies to ensure you get the best browsing experience.
I agree
We collect the account information you provide (such as email address), your journal and reflection entries, basic usage data (such as which pathways you open) needed to operate the App, and, if you hold or purchase a membership, limited membership and billing information described below.
We use your information to provide and improve the App, maintain your account, determine and confirm your membership access, process membership purchases, renewals, cancellations, and status changes through the applicable payment or subscription provider, restore and reconcile purchases, prevent duplicate memberships, keep accurate membership records, protect the security of the service and prevent fraud, and respond to support requests.
We do not use your information for third-party advertising.
Your journal entries are private to your account. We do not read, review, or share individual journal content except as required to operate the service (for example, automated backups) or where required by law.
Your private Journal writing, reframing content, Pathway reflection responses, Core Integration writing, and personal Shattered Mirror reflections are never sent to any payment or subscription provider.
Payment and subscription providers receive only the limited membership information described in this policy.
Pathways Membership may be purchased, when available, through the Apple App Store on iOS, through Google Play on Android, or through our web checkout, where payments are processed by Stripe.
Which provider processes your information depends on where you purchase.
For a purchase through Apple, Apple may process App Store account information, transaction information, subscription status, and purchase, renewal, and refund information.
For a purchase through Google Play, Google may process Play account information, transaction information, subscription status, and purchase, renewal, and refund information.
For a purchase on the web, Stripe may process billing and contact information, payment-method information, transaction information, subscription information, and customer and billing identifiers.
Stripe processes eligible web purchases only; it does not handle purchases made through the Apple App Store or Google Play.
Apple Pay and Google Pay may be available through Stripe on supported web checkout surfaces; they are not available on every device or browser.
To keep native subscriptions in sync with your membership, we may use RevenueCat, a service provider that supports subscription and membership synchronization for purchases made through Apple or Google Play.
RevenueCat may process limited subscription-related information such as your application user or account identifier, store transaction or receipt identifiers, subscription product information, subscription and membership status, and renewal and expiration information.
RevenueCat is not the seller of your membership and is not the App Store or Google Play; Apple or Google Play remains the purchase channel for native purchases.
These descriptions are examples of the categories involved and are not exhaustive. Apple, Google, Stripe, and RevenueCat process information under their own privacy practices, which we do not control.
We do not receive or store your full payment-card number.
Web payments are processed through Stripe-hosted, tokenized payment processing, and native purchases are billed by Apple or Google.
We may retain limited provider identifiers and status information needed for membership access, billing support, subscription reconciliation, security and fraud prevention, and audit.
We may offer a Sanctuary-managed trial of Pathways Membership: 7 days of Pathways Membership access. No payment information is required to begin the trial. It does not automatically become a paid membership.
Our membership records may include limited information such as your Sanctuary account identifier, membership level, the billing provider you purchased through, the customer and subscription identifiers assigned by that provider, subscription state, trial dates, paid-through or current-period dates, membership access status, and the transaction or event identifiers we use to reconcile purchases.
Limited subscription identifiers may be used to connect a verified purchase to your Sanctuary account, restore your membership access, reconcile purchases across your devices, and prevent duplicate or conflicting membership records.
Sanctuary accounts are not merged automatically, and a subscription connected to one Sanctuary account is not freely transferred to another.
We do not sell your personal data.
We share limited information with service providers (such as our authentication, database, payment, and subscription providers) strictly to operate the App, under agreements that limit their use of your data.
Payment and subscription providers receive only the minimum information required to perform their role, and never your Journal or reflection writing.
We retain your account and journal data for as long as your account is active. You may request deletion of your account and associated data by contacting us.
Membership and billing records may be retained as appropriate for account administration, financial and legal obligations, security, and dispute or support handling, in accordance with applicable law.
Records held by Apple, Google, Stripe, or RevenueCat are governed by those providers and are not deleted by us.
You can review, update, or request deletion of your personal data at any time by contacting our office.
How you manage or cancel a membership depends on where you purchased it: a membership purchased through the Apple App Store is managed through Apple; a membership purchased through Google Play is managed through Google Play; a membership purchased on the web is managed through the Sanctuary web billing experience supported by Stripe.
One provider does not manage a subscription purchased through another.
The App is not directed to children under 18, and we do not knowingly collect information from them.
We use reasonable administrative and technical safeguards to protect your information, but no method of storage or transmission is completely secure.
We may update this Privacy Policy from time to time. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
Questions about this Privacy Policy or your data can be directed to our office at [OFFICE PHONE NUMBER].