Privacy Policy.

Who we are.

Sanatori is made by Vidya Oy, a company in Finland, business ID 3282079-1. Our address is Konepajankuja 1, 00510 Helsinki, Finland. For the data in this policy that reaches us, we decide what happens to it, so in law we are its controller.

This policy covers this site, sanatori.app, the Sanatori Mac app, and accounts and plans made here.

To ask us anything about your data, write to:

hello@sanatori.app

The app keeps your data on your Mac.

Sanatori saves your intentions, schedule, break records and debriefs in local storage on your Mac. It reads macOS's elapsed idle time to find a pause before it shows a break prompt.

To avoid interrupting calls, presentations and video, Sanatori checks which apps keep the display awake and, on macOS 14 or later, which apps are using the microphone. It reads only that status and never records or accesses audio.

If you select calendars and grant macOS Calendar permission, Sanatori uses Apple's EventKit to show your agenda, hold scheduled breaks around events, and show meeting reminders if you turn them on. It saves your calendar selection with your settings and keeps event details in memory.

The app uses no tracking or analytics service, and sends none of this to us. To remove it, quit Sanatori and delete its app data.

Your account.

If you sign in here, we keep your email address, the code we email you to sign in, kept only as a hash and for no more than 10 minutes, and a record of each browser and Mac signed in: when it was last used, and for a Mac, the name it gives itself.

Signing in sets a cookie, sanatori-session, that keeps you signed in for 30 days, and a second, sanatori-signed-in, that only tells the page you are signed in. Signing out removes both.

We keep your account until you ask us to delete it. Write to hello@sanatori.app.

This site.

This site uses no analytics and no advertising.

While a test of the site's words is running, a cookie, sanatori-x, remembers which version you were shown and whether you saw it, for up to 90 days. It holds no ID and nothing about you.

Cloudflare serves this site. It sees your IP address, as any web server does, and keeps logs for a few days.

Buying a plan.

If you buy a plan here, Stripe, our payment partner, takes the payment, keeps your payment details and works out any tax from your address. We see your email address, your country, your plan, its price and its dates, not your card.

If you buy a plan in the App Store, Apple processes it through your Apple Account. Sanatori reads the entitlement on your Mac and does not receive payment details.

If you write to us, we use your message only to answer it.

Our reasons in law.

We use your email address to sign you in and to give you the plan you bought, and your messages to answer you.

We keep what the law requires, such as records of payments, for as long as it requires.

Who else handles it.

Cloudflare serves this site, keeps your account in its database in the EU, and forwards email sent to hello@sanatori.app.

Resend sends the emails with your sign-in codes.

Stripe takes the payments for plans bought here.

Apple takes the payments for plans bought in the App Store.

We do not sell your data, and we do not share it for advertising.

Where it goes.

Your account is kept in the EU. Cloudflare, Resend and Stripe may handle data in the United States and other countries. Where EU law applies, we rely on the EU's standard contract terms, or on the EU–US Data Privacy Framework, to protect it.

Your rights.

Wherever you live, you can ask us to show you what we keep about you, to give you a copy, to correct it or to delete it, and to stop using it for anything you object to.

We answer within a month and do not charge for it. We may ask you to show that the data is yours.

In the EU and the UK you can also complain to a data protection authority: in Finland, the Data Protection Ombudsman, or the one where you live.

In California and the other US states with privacy laws, you have these same rights. We do not sell or share your personal information, and you will not be treated differently for using your rights.

Changes.

If we change this policy, the date at the top changes. If a change matters to you, we tell you before it applies.