Your data is yours.

Account: email, optional pseudonym, language preference, optional country.

Care: journal entries, mood logs, AI companion conversations, the memories your companion learns, anonymous circle messages you write, and bookings you make with therapists or listeners.

Operational: anonymized error logs and uptime metrics. No advertising trackers.

We do not sell, rent, or share your data with advertisers, insurers, employers, or third-party AI trainers.

We do not read your journal or conversations to build a profile of you. Row-level security in our database makes sure even our team cannot browse your private records.

Access & export. Request a full machine-readable export of everything we hold about you from the Me page or by emailing privacy@saantvana.app.

Correction. Edit your profile, journal entries, mood logs, and memories at any time.

Erasure. Delete any record or your entire account from the Me page. Deletion is permanent and propagates within 30 days to all backups.

Withdrawal of consent. Disable AI memory, notifications, or any optional feature in Settings.

Grievance. Our Data Protection Officer responds within 7 days at privacy@saantvana.app.

Active account data is kept while your account exists. When you delete your account, identifying records are erased within 30 days. Aggregated, fully anonymized statistics (e.g. "this many users logged a mood today") may be retained indefinitely.

Data is encrypted in transit (TLS 1.3) and at rest. Access to production systems is restricted to named engineers under audit logging. We run automated vulnerability scans and follow responsible-disclosure practice — report issues to security@saantvana.app.

Saantvana is intended for users 16 and older. If we learn an account belongs to someone younger, we delete it.