Privacy Policy
This policy explains, in plain language, what Sakha does with your information. Sakha deals with personal and sensitive topics, so we collect only what the features you use need.
Who we are
Sakha is a product of TinySprout (tinysprout.in). TinySprout decides how and why your data is processed. Contact: kashyap@tinysprout.in.
What we collect
- Account: your sign-in through Apple, Google or email.
- Profile: name, gender, date of birth, country and city.
- Consents: the choices you make about optional features.
- Chat messages: what you write to Sakha and its replies. Incognito chats are not stored.
- Memories: things Sakha remembers from your chats to be more helpful.
- Mood check-ins and questionnaire answers.
- Decisions: options, values and plans from the decision engine.
- Faith (optional).
- Birth details, birth chart and jataka photo (optional, with your consent).
- Daily health summaries (optional, with your consent).
- Trusted contacts: their names, phone numbers and emails, and whether they accepted.
- Location, only when you allowed it for an alert. It is shared through a link that expires after 24 hours.
- Safety events: risk levels, not the text of your messages.
- Device push tokens, so we can send notifications.
- Subscription status.
How we use it
- To run the app: write replies, remember context, show your mood, decisions and health dashboard.
- To run safety checks and, if you set it up, alert your trusted contacts as you chose.
- To sign you in, send notifications and reminders, and manage your subscription.
- To keep the service secure and fix problems.
Trusted contacts never see your conversations. We do not use your data for advertising.
Service providers
We share data with these providers only so they can do the job described:
- Anthropic: processes messages to write replies and run safety checks (Sakha uses Claude).
- Cloudflare: hosting and storage.
- Meta: delivers WhatsApp messages to trusted contacts.
- Email delivery provider: sign-in codes and email alerts.
- Apple and Google: sign-in, in-app purchases, and health data stored on your device (Apple Health, Health Connect).
- RevenueCat: subscription status.
- Expo: push notifications.
- Open-Meteo: weather for water reminders, based on your city.
Where data is stored
If you are in the EEA, the UK or Switzerland, your personal data is stored in Cloudflare’s EU jurisdiction. Some providers above may process data in other countries, so data can be transferred internationally. Where required, we rely on appropriate safeguards for those transfers.
Security
Data is encrypted in transit and at rest, and each user has their own encryption keys. You can turn on app lock on your device. No system is perfectly secure, but we work to protect your information.
Retention
- Chats are kept until you delete them. You can optionally set them to auto-delete after 30, 90 or 365 days.
- “Delete everything” in the app removes your data immediately. Backups age out within 30 days.
- Export links expire after 24 hours.
Your rights
You can access and export your data, correct it, delete it, and withdraw consent at any time. Withdrawing consent deletes the data that depended on it. Most of this is available in the app; otherwise email us. You can also complain to your data protection authority. Depending on where you live, your rights come from laws such as the GDPR, the UK GDPR and India’s Digital Personal Data Protection (DPDP) Act.
Children
Sakha is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has used Sakha, tell us and we will delete the data.
No ads, no selling
We show no ads and never sell your data. Sakha contains no advertising or third-party analytics SDKs.
Changes
We may update this policy. We will change the date above and, for significant changes, tell you in the app.
Contact
Questions or requests: kashyap@tinysprout.in.