SANA is committed to protecting the privacy and security of our users, especially members of vulnerable immigrant communities. This Privacy Policy explains what data we collect, how we use it, and your rights. We collect only what is absolutely necessary — and we will never sell, share, or monetize your personal information.
01
Information We Collect
Phone Number (Required)
- Used only for account authentication via SMS verification
- Stored securely in Firebase Authentication
- Never shared with third parties
- Never used for marketing
Emergency Contacts (Optional)
- Names and phone numbers you choose to save
- Stored securely in Firebase (Google Cloud), encrypted in transit and at rest
- Only accessible to your account
- Never shared with any third party
Location Data (Temporary)
- Used only when you actively use the map feature
- Never tracked in the background
- Never stored permanently
- Used only to show nearby resources
AI Assistant Queries (Optional)
- When you use the SANA AI Assistant, your question is sent to Anthropic (Claude API) via an encrypted proxy server
- Queries are not stored by SANA after the response is delivered
- Query frequency is tracked for rate-limiting purposes only (no content stored)
- Subject to Anthropic's Privacy Policy: anthropic.com/privacy
Usage Analytics (Anonymous)
- Which features you use (e.g., "viewed script", "searched resources")
- App crashes and errors, device type, and OS version
- No personal identifying information — cannot be linked back to you
Subscription Data (SANA Plus)
- If you purchase SANA Plus, your subscription status is managed entirely by Apple
- We receive only confirmation of your subscription status (active/inactive)
- We never receive or store your payment details, credit card information, or billing address
- Payment processing is governed by Apple's Privacy Policy
02
What We Do NOT Collect
- Immigration status
- Personal documents (passport, visa, ID copies)
- Background location tracking
- Browsing history
- Social media profiles
- Financial or payment information
- Contacts from your phone (only what you manually add)
- Photos or media files (camera is used only to scan documents; images are never stored)
03
How We Use Your Information
Phone Number
- Verify identity at login, prevent unauthorized access, send one-time codes
Emergency Contacts
- Display them when you need them; enable quick calling in emergencies
Location Data
- Show resources near you; calculate distances to consulates and legal aid centers
AI Queries
- Answer your questions about immigration rights and legal resources
- Rate-limit free tier usage (query count only, not content)
Analytics
- Understand which features are most useful, fix bugs, improve the app experience
04
Data Storage & Security
Cloud Storage (Firebase – Google)
- Phone number (hashed) in Firebase Authentication
- Emergency contacts stored in Firestore, encrypted in transit and at rest
- Anonymous usage analytics via Firebase Analytics
- Data hosted in US-based Google Cloud data centers
AI Queries (Anthropic)
- Queries routed through SANA's encrypted Cloud Function proxy
- Not stored on SANA servers after response is delivered
- Subject to Anthropic's data retention policies
Security Measures
- All data encrypted in transit (HTTPS/TLS) and at rest
- Firebase security rules prevent unauthorized access to any user's data
- No sensitive data stored on SANA's own servers
- API keys never exposed in the app — all AI requests route through server-side proxy
05
Data Sharing
WE DO NOT SELL YOUR DATA. Period.
We have never sold, and will never sell, your personal information to any third party.
We use the following trusted service providers solely to operate SANA:
| Provider |
Purpose |
Data Shared |
| Firebase (Google) |
Authentication, database, analytics |
Phone number (hashed), contacts, anonymous usage |
| Google Maps |
Map display and resource locations |
Temporary location data only when map is active |
| Anthropic |
AI Assistant responses |
Your question text when you use the AI Assistant |
| Apple |
Subscription billing (SANA Plus) |
Subscription status confirmation only |
We NEVER share data with:
✗ Immigration authorities (ICE, CBP, USCIS)
✗ Law enforcement (unless legally required by a valid court order)
✗ Advertisers, data brokers, or marketing companies
✗ Any government agency for surveillance purposes
06
Your Privacy Rights
- Access: View all data we hold about you; export emergency contacts anytime
- Delete: Remove individual contacts or your entire account — immediate and permanent
- Location: Deny location permission anytime in device Settings — app still works via manual search
- AI Consent: Revoke AI Assistant consent anytime in MiSANA → Privacy settings
- Analytics: Opt out in MiSANA → Privacy → Share Usage Data
- Subscription: Cancel SANA Plus anytime in iPhone Settings → Apple ID → Subscriptions
07
Data Retention
- Account data: Until you delete your account
- Emergency contacts: Until you delete them or your account
- Location data: Immediately discarded after each map session
- AI query content: Not retained by SANA after response delivery
- Analytics: Aggregated anonymous data retained indefinitely
When you delete your account:
All data is permanently deleted within 24 hours. Backups are purged within 30 days. There is no recovery after deletion.
08
Children's Privacy (COPPA)
SANA is not intended for children under 13. We do not knowingly collect data from children and will delete any such account immediately upon discovery.
Parents or guardians: contact us at sananuevayork@gmail.com
09
International Users (GDPR)
For users in the EEA, UK, or Switzerland — you have the right to access, rectify, erase, restrict, port, and object to processing of your data. Data may be transferred to the US (Firebase, Anthropic) under standard contractual clauses.
To exercise your rights: sananuevayork@gmail.com
10
California Privacy Rights (CCPA)
We do not sell your personal information. California residents may request to know, access, delete, and port their data, and may not be discriminated against for exercising these rights.
CCPA requests: sananuevayork@gmail.com
11
Changes to This Policy
We will notify you of material changes via in-app notification and update the Effective Date above. Continued use of SANA after changes constitutes acceptance of the updated policy.
12
Security Recommendations
- Enable device passcode or biometric lock
- Keep your iPhone updated to the latest iOS version
- Never share your SMS verification codes with anyone
- Log out of SANA on shared or borrowed devices
- Review your emergency contacts periodically