Information Processed on Your Device

• Installed app names and package identifiers, used to display and organize your app library.
• Your essential apps, aliases, hidden apps, focus modes, schedules, limits, and Intention Gate settings.
• Purposeful opens, cancellations, overrides, temporary sessions, and local attention insights.
• Notification titles and previews from apps you explicitly select for digesting.
• Local export and import files that you initiate.

Accessibility and Notification Access

The optional Accessibility Service detects when a selected app comes to the foreground so Sanctuary can display an Intention Gate or daily-limit screen. It does not read screen content, passwords, messages, or keystrokes.

Optional notification access is used only to collect and dismiss notifications from apps you explicitly choose for scheduled digests. Digest content remains on your device.

Purchases and Platform Services

Optional purchases are processed by Google Play. We do not receive or store your payment card details. Google may process purchase and diagnostic information under its own privacy policy.

Retention and Deletion

Sanctuary records remain on your device until you remove them, clear the app's storage, or uninstall the app. Because we do not operate an account or cloud sync service for Sanctuary, Galadriel Labs cannot remotely access or delete your local records.

Children and Policy Changes

Sanctuary is not directed to children under 13. We may update this policy as the app changes; the effective date above will identify the latest version.

Contact

For privacy questions or requests, email privacy@galadriel.app or visit our Support Center.