SANA Privacy Policy

Welcome to SANA ("SANA", "we", "our" or "us").

Your privacy matters to us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have when using the SANA mobile application, website and related services (collectively, the "Services").

SANA is operated by The Sana Method Ltd, a company registered in England and Wales.

The Sana Method Ltd is the controller of your personal data for the purposes of UK GDPR and the Data Protection Act 2018.

If you have any questions about this Privacy Policy, you can contact us at:

Email: hello@sana.fit
Website: www.sana.fit

When you create a SANA account, we may collect:

Account Information
Name
Email address
Password (encrypted)
Date of birth
Gender (where required to calculate sleep recommendations)
Postcode
Country

Health & Activity Data
If you choose to connect a wearable device or health platform, we may receive:
Daily step count
Active calories
Exercise sessions
Sleep duration
Workout information
Device type
Connected wearable provider

This data reaches SANA through Apple Health, including data written to Apple Health by your iPhone, Apple Watch or other devices and apps you have authorised. Additional integrations will only be used once they are supported in the app.

We only access the information you explicitly authorise.

Reward Activity
We collect information relating to your use of the SANA rewards programme, including:
Points earned
Points redeemed
Rewards claimed
Voucher usage
Club memberships
Group participation
Referral activity (if introduced)

Technical Information
We automatically collect certain technical information including:
Device model
Operating system
App version
IP address
Crash reports
Analytics events
Push notification tokens

We use your information to:
Create and manage your account
Verify healthy activity
Award SANA Points
Display your progress
Provide rewards
Improve the app
Detect fraud
Respond to customer support enquiries
Send important account notifications
Comply with legal obligations

If you opt in, we may also send:
News
Product updates
Partner announcements
Promotions
Wellness content

You can unsubscribe at any time.

Certain activity information (such as sleep duration, movement and exercise) may be considered health-related data.

We only process this information:
with your permission;
for operating the SANA rewards programme;
to calculate points;
to personalise your experience;
to improve our Services.

We do not sell your health data.

We do not use your health data for advertising purposes.

Under UK GDPR we rely on one or more of the following lawful bases:
Your consent
Performance of our contract with you
Legitimate interests
Compliance with legal obligations

Where we process health-related information, we do so with your explicit consent.

You control whether SANA can access information from your wearable.

You may disconnect your wearable at any time within your device settings or the connected platform.

Disconnecting a wearable may prevent SANA from awarding future points.

We may share information with trusted service providers who help us operate SANA, including:
Cloud hosting providers
Authentication providers
Analytics providers
Customer support software
Email service providers
Payment providers (where applicable)

Partner brands do not receive your personal health data.

Where you redeem a reward, we may share only the information necessary to fulfil that reward, such as:
first name;
redemption ID;
voucher reference.

We use analytics tools to understand how users interact with SANA.

This may include information such as:
screens viewed;
app performance;
feature usage;
crashes;
session length.

Analytics helps us improve the app.

If you enable notifications, we may send reminders regarding:
points
rewards
club updates
app announcements
promotions (where you have consented)

You can disable notifications at any time.

We only send marketing communications where:
you have opted in; or
we are otherwise permitted by law.

You can unsubscribe at any time using the link in our emails.

We keep personal information only for as long as necessary.

If you delete your account, we will delete or anonymise your personal information unless we are legally required to retain it.

Certain transaction records may be retained for accounting or fraud prevention purposes.

We take appropriate technical and organisational measures to protect your information.

These include:
encrypted connections;
secure authentication;
restricted staff access;
monitoring for unauthorised access;
regular software updates.

However, no online service can guarantee absolute security.

Some of our service providers may process information outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, including approved contractual clauses where required.

SANA is not intended for children under the age of 16.

We do not knowingly collect personal information from anyone under 16.

Subject to applicable law, you have the right to:
access your information;
correct inaccurate information;
delete your information;
withdraw consent;
object to certain processing;
restrict processing;
request data portability;
complain to the Information Commissioner's Office (ICO).

To protect the integrity of the SANA rewards programme, we may investigate activity that appears manipulated or fraudulent.

This may include:
artificial step generation;
device manipulation;
duplicated accounts;
automated activity;
misuse of connected wearables.

Where fraud is suspected, we may:
remove points;
cancel rewards;
suspend accounts;
permanently terminate accounts.

We may update this Privacy Policy from time to time.

Where changes are significant, we will notify users within the app or by email.

The Sana Method Ltd

Email: hello@sana.fit
Website: www.sana.fit