Sanctora
Effective 11 August 2026 · Last updated 12 August 2026
Sanctora (“Sanctora”, “we”, “us”) is operated by David Legacy Software, a registered trade name of Mason David Ventures L.L.C., North Carolina, USA.
Sanctora is a daily prayer and spiritual journaling app. This policy explains what we collect, why, who we share it with, and how you control it. We have tried to write it plainly rather than defensively.
The short version: your journal entries and your denomination are sent to third-party AI providers so the app can generate a personalized prayer response. Nothing you write is public unless you deliberately post it. We do not sell your data, and we do not use it for advertising.
| What | When | Required? |
|---|---|---|
| Email address | Account creation / sign-in | Yes |
| Name | Onboarding | Optional — you can skip it. Used to personalize prayers |
| Denomination or faith tradition | Onboarding | Optional — choose “Prefer not to say”. Used to tailor prayer language and scripture |
| Preferred Bible translation | Onboarding | Yes |
| Journal entries (text) | Each prayer session | Optional — the app is unusable without them, but you choose what to write |
| Voice recordings | Voice journal entries | Optional — only if you use voice input |
| Prayer requests | When you create them | Optional |
| Bible bookmarks, highlights, notes | When you create them | Optional |
If you sign in with Google or Apple, we receive your email address and, where you permit it, your name. We do not receive your password, contacts, or any other account data.
Denomination is treated as sensitive. In many jurisdictions religious or philosophical belief is a special category of personal data. We collect it only to personalize your prayer content, you can always decline to provide it by choosing “Prefer not to say”, and we describe below exactly where it goes.
| What | Purpose | Provider |
|---|---|---|
| Prayer streak, session timestamps, usage counts | Core app functionality | Sanctora / Supabase |
| Product analytics events (e.g. “journal entry created”) | Understanding which features are used | PostHog |
| Crash reports and diagnostic data | Fixing bugs and crashes | Sentry |
| Push notification token and device identifier | Delivering reminders you opt into | OneSignal |
| Subscription and purchase status | Managing your subscription | RevenueCat, Google Play, Apple App Store |
Our analytics events record that an action happened, not what you wrote. Journal text, prayer content, and Response Card content are never included in analytics events.
We do not collect your precise location, your contacts, your photos, your calendar, your browsing history outside the app, or your health records. We do not use advertising identifiers, and Sanctora contains no advertising.
Sanctora’s core feature generates a personalized prayer, a Bible story, matched scripture, and a word of encouragement after each entry. This cannot happen on your device. To produce it:
These requests are made from our secure server environment, not directly from your device, and your API traffic is encrypted in transit.
Anthropic and OpenAI act as data processors — they process this content to return a result to us and are contractually restricted in what else they may do with it. As of the effective date of this policy, neither provider uses data submitted through their commercial APIs to train their models by default. Their own terms and privacy policies govern their handling of that data:
If you are not comfortable with your prayers being processed by a third-party AI service, do not use the AI Response Card feature. You can journal without generating a Response Card, and your entry stays in your account.
We do not sell your personal information. We do not share it with advertisers. We do not use your journal content to train any AI model of our own.
We share data only with service providers who process it on our behalf:
| Provider | What they receive | Purpose |
|---|---|---|
| Supabase | Account data, journal entries, prayer requests, annotations, voice recordings | Database, authentication, file storage |
| Anthropic | Journal text, denomination, translation preference | Generating AI Response Cards |
| OpenAI | Voice recordings | Transcription |
| PostHog | Usage events, user identifier | Product analytics |
| Sentry | Crash and diagnostic data | Error monitoring |
| OneSignal | Push token, device identifier | Push notifications |
| RevenueCat | Purchase and subscription data, user identifier | Subscription management |
| Google Play / Apple | Purchase and subscription data | Payment processing |
We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger or acquisition — in which case we will notify you.
Community features. If and when you post to a community prayer wall, that post is visible to other users. Prayer wall posts are anonymous — your name is not attached. Do not include information in a public post that you would not want other users to see.
Your data is stored with Supabase and processed by the providers listed above. Data is stored and processed in the United States (Supabase region us-west-2, Oregon). If you are outside the United States, your information will be transferred there.
Security measures:
No system is perfectly secure, and we cannot guarantee absolute security.
We keep your data while your account is active.
You can:
Depending on where you live, you may also have the right to a copy of your data, to restrict or object to processing, to withdraw consent, and to complain to a data protection authority. To exercise any of these, contact us at privacy@davidlegacysoftware.com. We respond within 30 days.
California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we do not offer financial incentives for personal information.
EEA/UK users: our lawful bases are performance of a contract (providing the app), consent (voice recordings, notifications, and processing of your religious belief data), legitimate interests (security, analytics, product improvement), and legal obligation. You may withdraw consent at any time.
Sanctora is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact privacy@davidlegacysoftware.com and we will delete it.
We may update this policy. If we make a material change — particularly to how your journal content or denomination is processed — we will notify you in the app or by email before it takes effect. The “Last updated” date above always reflects the current version.
David Legacy Software, a trade name of Mason David Ventures L.L.C.
North Carolina, USA
Email: privacy@davidlegacysoftware.com