Privacy Policy

This policy explains what data Sanaita gathers, what it uses it for, who it shares it with, and what you can do about it. It applies to sanaita.com and to everything you do there with your account.

Who is responsible for your data: the Sanaita team, which operates this service under the domain sanaita.com. You can write to us at sanaita@sanaita.com regarding any privacy matter.

Your account data: name and email provided by your login provider (Google, and in the future Apple). The login only confirms who you are — it never gives access to Gmail or Drive by itself. If you load date, time, and place of birth, it is optional information that you decide to add.

Data of your roadmap: title, date, facilitator, discipline, notes, and the detail of each therapy, retreat, or course that you register — manually or reconstructed. Also the life milestones and health documents that you load, if you use those sections. It is information about your personal process, and we treat it as sensitive: nobody else sees it, not even your contacts in the network — the Sanaita network only serves to send and receive specific suggestions, never to look at another person's roadmap.

Files you upload: audio, documents (PDF, Word, text) and voice notes you attach to an entry or record as a reflection. They're kept in private storage, accessed through signed, short-lived links — no one but you can open them, because the file has no fixed address that could be copied and shared.

What we read when you press Reconstruct: only when you request it, with permissions that are separate from the login — Google asks you for Gmail and Drive separately, with read-only scope, and you can revoke them at any time from your Google account settings, without having to notify us. We search with keywords related to therapies and wellness, in the date window that you choose (up to 5 years in email). You can also share a chat export, a document, or an audio: they are processed to build entries and then deleted from the temporary tray as soon as you use or discard them.

Data of other people that you load: the name, phone number, or country of a facilitator or professional that you register in an entry is information that you choose to save. We take care of protecting it with the same care as the rest of your account, but the responsibility of having a basis to share it is yours — load someone's contact with good judgment. Only people in your network will be able to see the facilitators you load, and only if you so choose.

Payment and billing data: when you subscribe or buy credits, your card number is processed directly by Mercado Pago or Stripe — it never passes through our servers nor remains saved here. We save the status of your subscription, your available credits, and the history of what was charged, so that you have that record in your profile.

Product usage, feedback and errors: we keep which AI model was used each time you run an AI feature and how many tokens it consumed (to work out the cost and your balance), any messages or suggestions you send us through "Feedback", and an automatic log if the app breaks while you're using it — including the screen where it happened, so we can fix it. If you talk to us instead of typing, we transcribe the audio on the spot and don't keep it.

Cookies: we use technical cookies to keep you signed in, remember your language (sanaita_locale), tell whether you came to create an account or to sign in (sanaita_auth_intent, lasts 15 minutes) and, if you arrived through an invitation link or a gifted coupon, remember it until you sign up (sanaita_invitacion / sanaita_cupon, 30 days). We may also use our own analytics cookies or identifiers to understand how Sanaita is used — which screens are visited, which features are used — and improve the product. We don't use third-party advertising cookies or share that information to profile you for advertising purposes.

Who we share your data with: with no one. We do not sell them, nor transfer them, nor use them for advertising. For the platform to work, some data passes through providers acting as our processors, under their own confidentiality terms: - Supabase (database and storage, hosted in São Paulo, Brazil). - Vercel (application hosting). - Anthropic (Claude): processes the text of your emails, transcribed audios, documents, or conversations to build your entries and respond in Sankofa/Nanai — according to their current terms, it does not use it to train its models. - OpenAI: transcribes your audios to text, under the same criteria. - Google: authenticates your login and, with your separate permission, reads Gmail/Drive when you reconstruct; we also send some emails (such as a gift notice) from our own Google Workspace inbox. - Mercado Pago and Stripe: process payments.

Regarding the use of Google data: the use and transfer to Sanaita of information received from Google APIs comply with the Google API Services User Data Policy, including Limited Use requirements. In plain language: we only use what we read from your Gmail and your Drive to reconstruct your roadmap, never for advertising, we never sell it, and no human reads it unless you write to us about a specific issue and give us your explicit permission to look at it.

How long we keep your data: as long as your account is active. If you cancel it or stop using it, billing data is retained for the time required by tax regulations; the rest remains until you ask us to delete it (see "Your rights").

Your rights: you can access, correct, export, or request that we delete your data. Revoking access to Gmail or Drive is done directly from the settings of those accounts.

Changes to this policy: when something important changes, we update the date below and publish the new version right here. Continuing to use Sanaita after a change implies that you accept it; if at any point the law requires us to ask you to accept it again explicitly, we will ask you.

Contact: sanaita@sanaita.com.

Last updated: August 24th, 2026.