Sadhana Space
Privacy Policy

Last updated: 23 October 2026

Sadhana Space is a personal, local-first practice-logging app. This Privacy Policy explains what information the app handles, how, and why — written for users based in India, in plain language.

Who this policy applies to

This policy covers everyone who uses the Sadhana Space app. Sadhana Space is an independent personal project, not a registered company. Throughout this policy, "we," "us," and "the developer" refer to the app's sole developer, and "you" refers to anyone using the app.

The short version

Almost everything you enter into this app — your practices, journal entries, notes, completion history, profile name and photo, and app settings — stays only on your device. We don't use analytics or advertising tools of any kind. Only three things ever leave your device, and only if you turn them on yourself: Sangha (below), where you can share a summary of the practices you choose with friends you add; notifications about your Sangha; and, on Android, a backup you tell the app to put in your own Google Drive, locked with a key only you have (below). Your Journal and notes never leave your device, except inside that locked backup, which we cannot open. "Feedback & Complaints" doesn't send us anything at all — it just opens your own email app.

Data that stays only on your device

The following is stored locally on your device, using a local database and your device's own app-preferences storage, and is never transmitted anywhere by the app (apart from inside a Google Drive backup that you start yourself — see below):

• Practice categories, practices, targets, and completion history
• Journal notebooks, questions, and your answers
• Notes you attach to a practice
• Habits you're letting go of
• Your profile name and photo (unless you choose to use them in Sangha — see below)
• App preferences (e.g. hidden Dashboard tiles, whether Journal lock or notifications are on)

This data is deleted only when you delete it yourself in-app, use "Reset all data" in Settings, or uninstall the app.

Data you choose to export

Settings → Backup & Restore lets you export all your data as a single file, which your device's own Share sheet then lets you save or send anywhere you choose — Google Drive, email, a file manager, or anywhere else. We never receive a copy of this file and have no way to access it. Because a backup file contains all your practice and journal data, please store and share it the way you would any other personal document.

Back up to your Google Drive (Android and iPhone, optional)

On Android, and in the app on your iPhone, Settings → Backup & Restore → Google Drive backup can put a copy of your data in your own Google Drive. It happens only when you tap "Back up now" — nothing is sent by itself.

• You sign in with your own Google account; the app sees your email address only to show which account is connected. It asks Google for access to only the files it creates itself, never anything else in your Drive.
• The copy goes into a folder called "Sadhana Space Backups" in your Drive. The app keeps the newest 5 and deletes older ones it made.
• Before it leaves your phone, the file is locked with a random key made on your phone. That key is kept in Google's Block Store on your phone and, where your Android allows it (Android 9 or newer with a screen lock), Android backs it up to your Google account with end-to-end encryption, so it can come back on a new phone. On an iPhone the key is kept inside a passkey named "Sadhana Space backup key", which you unlock with Face ID and which iCloud Keychain syncs to your other Apple devices with end-to-end encryption.
• We never receive the file or the key, and we have no way to open your backup. Google keeps the file in your Drive under Google's own terms and privacy policy.
• If the key can't come back (for example on a new phone without that Google backup or iCloud Keychain), the backup can't be opened by anyone, including us. If you want a second copy, also use "Save a backup file" to keep a copy of your own.
• The backup holds everything the Backup file holds, including your Journal answers and notes.

"Disconnect" on the same page signs the app out of Google. To remove the copies, delete the folder in your Drive.

Sangha (optional)

Sangha lets you practise alongside friends. It is off until you create a Sangha profile — until you start making one, the app doesn't contact our server at all.

What our server keeps when you have a profile:

• Your @handle, and the name and picture (an emoji, or a small copy of a photo) you choose to show
• Your password and recovery code — never as you typed them: they are scrambled on your device and stored only in a form that can't be turned back into them
• Your friends, friend requests, and anyone you block
• For each practice you choose to share: its name and emoji, whether it's done today, your streak, your last 7 days and your Mandala day — never your notes, your Journal, or practices you don't share. You choose which friends see each one, and Let go habits are never shared
• Challenges you start or join: the practice's name, emoji and target, and each person's progress
• Reactions friends send you (kept for a few days)
• If you turn on notifications: a delivery address for each phone, your phone's time zone, and what you chose to be told about and your quiet hours (see Notifications below)
• When you last used the app

Who sees it: only friends you accept see your name, picture and shared practices. Someone who knows your @handle can send you a friend request and sees only the handle. People in a challenge together see each other's @handle and progress in it.

To stop abuse (for example, too many sign-in attempts), our server briefly uses your device's internet (IP) address; it is kept for at most 2 days.

Deleting: Sangha → your profile ⋮ → "Delete Sangha profile" removes your profile, friends, shared practices, reactions and photo from our server at once. A challenge friends have joined carries on for them, without your name. A profile is also deleted automatically if the app isn't used at all for about 6 months. Reports you make or receive (who reported whom, and why) are kept after a profile is deleted, so abuse can still be looked into. You can also ask us to delete your profile at mysadhanaspace@gmail.com — step by step: https://mysadhanaspace.in/delete-account

Sangha runs on Cloudflare, a third-party infrastructure provider (Cloudflare Workers and its D1 database). Everything is sent over encrypted connections (HTTPS).

Notifications (opt-in only)

Notifications are off until you turn them on yourself.

In the web version (the one you open in a browser or install from a website), if you turn on "Enable notifications" in Settings, your browser creates a push subscription (a delivery address and encryption keys — not your name, email, or any personal identifier) so we can notify you when a new app update is available. If you choose them, it also keeps whether you want the Ekadashi reminder and the start days of your Sangha challenges, so it can remind you. This subscription is stored on Cloudflare, a third-party infrastructure provider we use to deliver these notifications; Cloudflare never receives any of your practice or journal data, only the subscription itself.

In the Android app, if you turn on notifications for Sangha (the app asks once, and Android asks its own permission), the app gets a delivery address for your phone from Google's Firebase Cloud Messaging — a token that carries no name or email — and sends it to our Sangha server together with your @handle and your phone's time zone, so Sangha can tell you when a friend sends you a request, accepts yours, invites you to a challenge, joins or steps out of one, or reacts to a practice, and send one evening summary. Those messages name only @handles, and they travel through Google's servers to your phone. The same Sangha notifications reach the web version through its push subscription. In Sangha → Me → Notifications you choose which of these you want, and quiet hours when nothing is sent.

Turning notifications off, signing out of Sangha, deleting your Sangha profile or uninstalling the app removes your delivery address from our server (an address not heard from for 90 days is removed too).

Feedback & Complaints

Settings → Feedback & Complaints simply opens your device's own default email app, addressed to the developer, the same as clicking a "Contact us" link on any website. The app itself never collects, sends, or sees anything you write — whether the email actually gets sent, and what it contains, is entirely between you and your own email app.

Camera and photos

If you choose to set a profile photo, the app can take a picture with your camera or pick one from your photo library. The camera is used only at the moment you choose "take a photo," and the picture you select is saved only on your device, inside the app. It is uploaded only if you choose it as your Sangha picture — then a small copy is kept on our server and shown to your Sangha friends.

Biometric lock

If you enable the Journal lock, biometric authentication (Face ID/fingerprint) or your device PIN is handled entirely by your device's own operating system. The app never receives, sees, or stores your biometric data — it only receives a yes/no result telling it whether your device unlocked successfully.

Health Connect / Apple HealthKit (planned feature)

A future version of this app may let you optionally sync completed practices to Android Health Connect or Apple HealthKit as workout records. This feature is not yet built. When it ships, it will be strictly opt-in, will write only a minimal completion summary, will never read or collect your other health data, and this policy will be updated before it's released.

What we don't collect

We don't ask for your email or phone number (a Sangha profile needs only a handle and a password), and we don't collect your location, your contacts, advertising identifiers, or any usage/analytics data. We don't use any third-party analytics, advertising, or tracking SDKs.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you have the right to access, correct, and erase your personal data, and to withdraw consent at any time. Since almost all your data lives on your own device, you can exercise these rights instantly and directly, in-app, without contacting us — by editing or deleting any entry, using "Reset all data" in Settings, or, for Sangha, editing what you share or deleting your Sangha profile. For anything you can't resolve yourself (for example, a request about the push-notification subscription above, or a grievance about this policy), contact us at mysadhanaspace@gmail.com.

Children's privacy

Sadhana Space does not knowingly collect personal data from children. Sangha is meant for users aged 18 and older (see our Terms of Use). If you are a parent or guardian and believe a child has shared data through this app that concerns you, contact us at mysadhanaspace@gmail.com.

Security

Your data's security largely depends on your own device's security (screen lock, OS updates, etc.), since almost everything is stored locally. Push notification payloads are encrypted in transit per the Web Push standard, and Sangha only ever talks to our server over HTTPS. We follow reasonable security practices consistent with India's IT Act, 2000 and its Reasonable Security Practices Rules, but no method of storage or transmission is 100% secure, and we can't guarantee absolute security.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top always reflects the latest version, and we'll show an in-app notice for any material change.

Governing law

This policy is governed by the laws of India.

Contact us

Questions, requests, or grievances about this policy: mysadhanaspace@gmail.com