Privacy Policy

The Sacred Act is operated by The Sacred Act LLC, 584 Castro Street #3185, San Francisco, CA 94114. In this policy, “we”, “us” and “the app” mean that entity and The Sacred Act application for iPhone and Apple Watch.

You can reach a person at support@thesacredact.com.

Everything we collect exists to make your meditation. We do not sell your data. We do not use it for advertising, and we do not build advertising profiles. Your health data is used only to shape your practice and is never shared for marketing.

You can export everything, erase your practice while keeping your account, or delete your account outright — all from inside the app, with no support ticket and no waiting period.

Account information. Your email address, and, if you sign in with Apple, the Apple-provided identifier — including the private relay address, if you chose to hide your real one.

Your practitioner profile. Anything you choose to add: your name, how you would like to be addressed, pronouns, name pronunciation, and a profile picture.

What you share with the practice. The words you write or speak before a sit, the reflection you offer after it, the meditations composed for you, and your practice history — what you practiced, when, and for how long.

Anonymous first-run data. You can take your first meditation without creating an account. The app creates an anonymous session so that sit can be saved. If you later create an account, that session is linked to it and your first meditation carries over. If you never create an account, the data stays attached to an anonymous identifier holding no personal details.

Health and body data — only with your permission. Through Apple HealthKit, the app reads:

• Heart rate, resting heart rate, and walking heart rate average
• Heart rate variability (SDNN)
• Respiratory rate
• Sleep analysis
• Mindful sessions
• Workouts

That is the whole list. We do not read blood pressure, blood oxygen, clinical records, or anything else Health can hold.

With your permission the app also writes back to Health: your completed sits as mindful sessions, and meditation workouts. If you use the Apple Watch companion, it records live heart samples during a sit. The app uses HealthKit background delivery, which means iOS may wake it to receive new samples while it is not open.

Your voice — only when you choose to speak. When you speak rather than type, the microphone audio is used two ways. It is transcribed into text, and it is analyzed for vocal tone. Both are described in their own sections below.

Context — only what you allow.

• Location, while you are using the app, to derive the place you are in and the weather around you.
• Motion and fitness activity, to tell walking from driving from rest.
• Calendar. With calendar access granted, the app reads your upcoming events to understand the shape of your day. If you separately connect Google Calendar, we store a token that lets us read it.
• Photos. The app can save share cards you create to your photo library. It only ever adds — it never reads your library, and it does not use the camera.

Technical data. Crash and error reports, and the basic request logs needed to run and secure the service.

What we never collect. Payment details. Apple handles every purchase; we never see your card and we never receive it.

Everything above serves one purpose — your practice. We use it to:

• compose the meditation you are about to hear, and speak it in a voice;
• select the contemplative technique most likely to serve you now;
• reflect your practice back to you in the Mirror and your history;
• keep your practice available across your devices;
• operate, secure, and debug the service.

We do not use your information for advertising, we do not sell it, and we do not share it with data brokers.

Your meditations are composed by AI. The words you share and the context you have allowed — body signals, place, the shape of your day — are sent to the AI providers listed below to generate your meditation text and to synthesize the voice that speaks it. These providers process your input to return your meditation and are contractually limited to that purpose.

Your content is not used to train general-purpose AI models. At Hume, which analyzes your voice, we have turned on both zero data retention and the opt-out from model training, so your recordings are not stored there and are never used to improve their models.

When you speak to the app, two things happen to that audio, and we want both to be plain.

Transcription. Your speech is transcribed by Apple’s speech recognition. When your device is online, Apple performs this on its servers; when offline, it happens on the device. The resulting transcript becomes part of your practice.

Emotion recognition. Your voice audio is also sent to Hume AI, which analyzes vocal tone and returns confidence scores across 48 emotional dimensions. This is an emotion recognition system: it infers emotional state from how you sound, not from what you say. Those scores help the guide meet the state you are actually in. They are inferences, not facts about you, and they are never used for advertising, never sold, and never shared beyond the providers listed below.

You are never obliged to speak. Typing does the same work, and if you type, no audio is captured, transcribed, or analyzed at all.

We use these providers — “subprocessors” — to run the service:

Data is stored in the United States. Our database runs in Supabase’s us-west-2 region, our backend runs in Render’s Oregon region, and our time-series store runs in AWS us-east-1.

This section reflects Apple’s rules and our own commitments:

• Health data is read only with your explicit permission, granted in Apple’s own Health permission sheet.
• Health data is used only to shape and reflect your practice.
• Health data is never used for advertising or marketing.
• Health data is never sold.
• Health data is never shared with third parties except the subprocessors above that are strictly necessary to provide the service.
• You can revoke Health access at any time, in Settings or the Health app. The app continues to work without it.

If you choose to share a meditation, the app creates a link on share.thesacredact.com that anyone holding it can open. You can also hand a share card to Instagram Stories; that opens Instagram with the image and shares nothing else with Meta. Only share what you are comfortable being seen. Deleting the underlying meditation removes its share link.

We keep your practice data for as long as your account exists, because your history is the product — your past sits shape what is offered next.

When you delete your account, your data is deleted immediately, including any token you granted us for Google Calendar. Copies held in routine encrypted backups age out within 30 days.

Anonymous first-run sessions that are never linked to an account are deleted after 90 days of inactivity.

Inside the app, under Settings → Manage Data, you can:

• Export your data. A complete JSON file of your profile and every meditation, handed straight to the share sheet.
• Erase your practice data while keeping your account.
• Delete your account entirely. This removes your profile, your practice, your health samples, and any connected-calendar token. There is no support ticket and no waiting period.
• Revoke any permission — Health, location, motion, calendar, microphone, notifications — at any time.

Depending on where you live, you may also have rights to access, correct, port, or object to the processing of your personal data, and to lodge a complaint with your data protection authority. Write to support@thesacredact.com and we will respond within 30 days. Where the law allows us longer for a complex request, we will tell you why and when to expect an answer.

Where the app is available. The Sacred Act is currently offered only on the United States App Store. We do not offer or market it to people in the European Economic Area or the United Kingdom. If that changes, we will appoint the representatives those laws require and update this page before the app becomes available there.

If you are in California: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not process sensitive personal information for purposes beyond providing the service.

The Sacred Act is not directed at children and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, write to support@thesacredact.com and we will delete it.

Your data lives in your own account, protected by row level security — your records are readable and writable by you alone, enforced by the database itself rather than by application code. Data is encrypted in transit. No system is perfectly secure, but we design so that a fault in one place cannot expose another practitioner’s practice.

We will update this page when the app changes, and update the date at the top. For material changes we will tell you in the app before they take effect.

support@thesacredact.com

The Sacred Act LLC
584 Castro Street #3185
San Francisco, CA 94114