Privacy Policy
Effective October 17, 2026
BinaryBros LLC ("BinaryBros," "we," "us") operates Sanctum Reflections, including its ChatGPT app, MCP tools, website, and voice features. This policy describes the data those services process, why we process it, who receives it, how long it is retained, and the controls available to you.
Data we process
When you use a reflection tool, we receive the text you intentionally submit, the requested language and length, and the generated reflection. When you request voice playback, we receive the reflection text and selected language, create a processing job and generated audio file, and return a job identifier and audio URL. We also process limited technical and operational data such as timestamps, request status, duration, error details, and service logs. The app does not request automatic access to your entire ChatGPT history, contacts, email, calendar, precise location, or payment information.
Purposes
We use this data to generate and deliver reflections and audio, route and monitor processing jobs, keep the service secure and reliable, diagnose failures, respond to support and privacy requests, enforce our terms, and comply with law. We do not sell personal information or use app inputs for targeted advertising.
Service providers and recipients
Data may be processed by OpenAI as the ChatGPT host; Vercel as the MCP and website host; RunPod as the configured model and voice-inference provider; and an operator-managed relay and its infrastructure provider for job coordination, generated audio, and operational records. Authorized BinaryBros personnel may access records when needed for operations, security, support, or privacy requests. We may disclose information when legally required or necessary to protect users, the service, or others.
Retention
Generated audio is temporarily cached by an irreversible hash of the normalized passage, language, and configured voice version so an identical request can reuse the completed recording. The cache uses a seven-day inactivity threshold; each successful reuse restarts that period, and cleanup removes eligible audio and its hash record. The cache does not retain the passage text. Interrupted or unfinished jobs may retain submitted text for up to one day before cleanup or operator removal. Operational event records currently do not have an automatic expiry and remain until operator removal. Provider access logs, support email, security records, and backup copies may remain under each provider's or BinaryBros' applicable retention practices. Downloaded audio remains on your device until you delete it.
Your controls
You choose what text to submit and whether to request voice generation. You may stop using the app, remove the app from ChatGPT, delete downloaded audio locally, and request access to or deletion of app records reasonably associated with information you provide. Email noeticactivity@gmail.com. We may need information sufficient to locate a record and verify the request. Deletion from our systems may not remove independent copies already retained by OpenAI or another provider.
Security and international processing
We use access controls, encrypted HTTPS transport, scoped service credentials, and operational monitoring. No system is perfectly secure. Providers may process information in the United States or other countries where they operate, which may have different data-protection laws.
Children
Sanctum Reflections is not directed to children under 13, and we do not knowingly collect personal information from them. Contact us if you believe a child submitted personal information.
Changes and contact
We may update this policy as the service changes. The effective date above identifies the current version. Questions or requests may be sent to noeticactivity@gmail.com.