Burdened with glorious privacy.

Sanctum does not collect your personal data. The lines you keep, the topics and collections they're filed into, and your settings are stored on your iPhone. They are not sent to us. We have no servers that receive your lines, and we cannot see them.

There is one small exception, and we'd rather tell you than trick you: book and author lookups, explained below. And two things you may choose to do yourself: hand your words to another AI, or send a collection to a friend. Both are explained here too.

To work, Sanctum keeps the following on your iPhone:

• Your lines, exactly as you saved them, with the source and author if you add them.
• Topics and collections that organize your lines, including the ones you name.
• Your mood check-ins, one a day, if you make them.
• Your settings, such as your reminders and widget choices, and the name you give Sanctum to greet you by.

This data is shared only between Sanctum and its own widgets and Share extension on your device, through a private app group that other apps can't read.

Sanctum is made for iPhones with Apple Intelligence. It files each line into a topic and its collections on your iPhone, using Apple's on-device language model. If Apple Intelligence is turned off or still getting ready, it falls back to a keyword match built into the app. The same on-device model also decides whether a pasted piece reads as a quote, and what a line is from (a film series, a show). Either way, no text is sent off your device to be analyzed.

Sanctum never asks for your Photos, camera, microphone, contacts or location. It only ever sees the words you hand it.

One way to hand them over is Ask any AI: Sanctum gives you a prompt to copy. You paste it, with whatever you saved, into an AI of your choosing, like ChatGPT, Claude or Gemini, and paste the answer back into Sanctum. That conversation is between you and the AI you picked, under its privacy policy; Sanctum doesn't send anything to it, receive anything from it, or know which one you used. What you paste back is read on your iPhone and kept there like any other line.

Paste notes and Write it never leave your phone at all.

You can send a collection to someone as a small .sanctum file, by AirDrop, Messages, Mail, Files or any way you choose. The file holds the collection's name, its lines (words, author, source, topic and highlight) and the first name you gave Sanctum, as the sender. It does not hold your saves, dates, check-ins, settings or anything else.

Sanctum doesn't send the file anywhere itself: it hands it to the iOS share sheet, and from there it goes only where you send it. A collection someone sends you opens in Sanctum and is shown to you first; nothing is added until you tap Add, and nothing already in your library is changed.

When you add a line and type the name of a book, Sanctum asks Open Library, a free catalogue run by the non-profit Internet Archive, for the book's title, author and year. When a line has an author but no portrait yet, Sanctum asks Open Library for that author's photo.

For these lookups, only the book title or author name is sent, never the line itself, and with no account, key or identifier from Sanctum. Like any website, Open Library receives your device's IP address with the request. See the Internet Archive's terms and privacy policy.

Don't want any lookups? Leave the source and author empty, or add them while your phone is offline. Sanctum simply keeps what you typed.

When you use Sanctum in the Share sheet, only the text you choose to share is passed to Sanctum, and it's stored on your iPhone like any other line. Sanctum takes words only, never images, and can't read other apps' content on its own.

To show a line on your Home Screen, Lock Screen or in Control Center, Sanctum shares that line with iOS on your device. Lock Screen widgets can be seen by anyone who can see your phone, even when it's locked. You choose which widgets to add, and can remove them at any time.

Sanctum's actions in Shortcuts and Siri run on your device and only do what you ask them to.

Reminders are notifications scheduled on your iPhone. Sanctum asks for permission before sending any, and you can turn them off at any time in Settings > Notifications > Sanctum.

Sanctum keeps no copy of your library anywhere but your iPhone. It has no servers of its own, and nothing in the app writes to iCloud.

If you back up your iPhone with iCloud Backup or to a computer, that backup may include Sanctum's data too. It's kept by Apple, under your Apple Account and Apple's privacy policy. We never have access to it.

Even a god of mischief can't slip into your iCloud. Neither can we.

To keep a copy yourself, export your library to a file from your profile in the app (Back up & share my lines) and restore it later, on this iPhone or a new one. That file goes wherever you choose to save or send it, your iCloud Drive included, and Sanctum never sees it again until you open it.

• We don't require an account or collect your name or email.
• We don't show ads or use advertising identifiers.
• We don't use third-party analytics or tracking in the app.
• We don't sell, rent or share your information.
• We don't charge anything, so we never handle payment details.
• There's no feed and no followers, so nothing you keep is ever public.

A god of mischief would hide the fine print. We'd rather you read all of it.

If you choose to share analytics with app developers in your iPhone's settings, Apple may send us anonymous crash reports and usage statistics. These don't include your lines. You can change this in Settings > Privacy & Security > Analytics & Improvements.

This website has no analytics, ads or tracking cookies. It loads its fonts from Google Fonts, so your browser connects to Google's servers and Google receives your IP address. See Google's privacy policy.

The Try it demo on the homepage runs entirely in your browser. Nothing you type there is sent anywhere. If you email us, we use your address and message only to reply to you.

You can delete any line in the app. Start over, at the foot of your profile, erases everything on your iPhone. Deleting Sanctum from your iPhone deletes all of its data from the device. Any export file you made stays wherever you saved it until you delete it. Because we don't hold your data, there's nothing for us to export or delete on your behalf, but you're welcome to ask us anything.

Sanctum doesn't knowingly collect personal information from anyone, including children.

If this policy changes, we'll update this page and the date at the top. If a change affects how your data is handled, we'll explain it in the app before it takes effect. No rewriting history behind your back.

Questions about privacy? Email hello@glorious404.com.

Sanctum is made by Loki.