Privacy Policy

At Sanctum, respecting your privacy is part of respecting your dignity. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices you have regarding your information whenever you use our website, mobile applications, and related services (together, the "Service").

We never sell your personal information, to anyone, for any reason.

By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Service.

We collect only the information we need to provide and improve Sanctum. Depending on how you use the Service, this may include:

Information you provide when creating an account: your name, username, email address, phone number, parish affiliation, and password.

Content you add or create: photos, posts, prayer intentions, comments, sacramental records you choose to add, and any other content you submit.

Payment information: when you make a purchase, tithe, or donation, payment details are processed by our payment providers, including M-Pesa through the Daraja API. We do not store full card or mobile money credentials on our own servers.

Information collected automatically: device type, IP address, browser type, pages visited, and interactions with the Service, collected to help keep Sanctum secure, reliable, and improving over time.

Messages and support requests: messages sent within groups, support requests, and any correspondence with us.

We only collect information that helps us provide the features you choose to use. We do not collect information simply because we can.

To provide, maintain, and improve the Service, including your feed, prayer wall, live streams, sacrament tracker, and marketplace.

To process transactions and send related confirmations, including marketplace orders and tithing.

To send account, security, and service notifications, and, where you have opted in, updates about your parish or diocese.

To moderate content in line with our Community Guidelines and to keep parish spaces safe and orderly.

To understand how the Service is used so we can fix problems and build features people actually need.

We only share information when it is necessary to provide the Service, meet legal obligations, or with your permission. We never sell your personal information.

With your parish or diocese, limited to what is necessary for verification, moderation, and the features you use, such as sacrament records visible to your own parish administrators.

With service providers who help us operate the Service, including hosting, payment processing, video streaming, and push notification providers, under agreements that limit their use of your information to providing those services.

When required by law, to comply with legal process, or to protect the rights, safety, or property of Sanctum, our users, or the public.

You can access and update most of your account information directly in Settings.

You can control the visibility of your profile, prayer intentions, and sacramental records through your privacy settings.

You may request a copy of your data or request deletion of your account by contacting us using the details below. We will respond within a reasonable time and in line with applicable law.

Where local law grants you additional rights, such as the right to object to certain processing or to lodge a complaint with a regulator, those rights apply in full.

We retain information for as long as your account is active or as needed to provide the Service. Sacramental and parish records may be retained longer where required for ecclesiastical or legal record-keeping purposes, consistent with your parish's own retention practices.

When you delete your account, we remove or anonymise personal information within a reasonable period, except where retention is required by law or legitimate business need.

We use industry-standard security practices, including encryption while your information is transmitted, to help protect your personal information. No system is perfectly secure, and we encourage you to use a strong, unique password and to report any suspected unauthorised access immediately.

The Service is intended for users aged 16 and above. Children under the applicable age may only use certain parts of the Service, such as parish-supervised sacramental preparation, with the involvement or permission of a parent, guardian, parish, or catechist, where required by law. We collect only the information necessary for that purpose.

Because Sanctum serves Catholics worldwide, information may be processed in countries other than your own. Where this occurs, we take steps to ensure your information continues to receive an appropriate level of protection.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means before the change takes effect.

Questions about your privacy? We'd be happy to help. Contact us anytime at privacy@sanctum.app.