Last Updated: June 30, 2026
Welcome to SANA ("we", "us", or "our"). We operate the SANA mobile application, website, and digital reward marketplace (collectively, the "Service").
At The SANA Method Ltd, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. It is designed to meet our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By accessing or using our Service, you agree to the collection and use of information in accordance with this policy.
1. Information We CollectTo provide our automatic rewards layer, we process different types of information.
A. Personal Data You Provide Directly
Account Information: Your name, email address, date of birth, phone number, and account credentials when you register.
Communication Data: Information you provide when contacting customer support (e.g., emailing chloe@sana.fit).
B. Connected Health & Wearable Data (Special Category Data)To calculate and award your SANA points automatically, the app integrates with third-party software and tracking hardware (such as Apple Health, Google Fit, or your smartwatch).
With your explicit, affirmative consent, we sync:
Fitness & Activity Metrics: Daily steps, active workouts, calorie burn, and movement duration.
Sleep Metrics: Sleep duration, sleep quality, and rest cycles.Note: This health data is treated as "Special Category Data" under the UK GDPR and is processed under stricter security protocols.C. Technical and Usage DataLog files, IP address, device type, operating system version, app performance analytics, and unique device identifiers collected automatically when you browse our website or open the app.
2. How We Use Your DataWe use the data we collect for the following operational purposes:
To Calculate Rewards: To convert your verified step, fitness, and sleep data into SANA loyalty points.
To Provide the Service: To manage your account, verify your profile status, and maintain the functionality of the SANA digital storefront.
To Detect & Prevent Fraud: To audit activity logs and ensure points are not faked, manipulated, or artificially generated via unauthorized software or scripts.
To Communicate: To send you updates about product drops, early access, milestone completions, or changes to our policies.
3. Legal Basis for Processing Under UK GDPRWe rely on the following legal foundations to process your personal data:
Performance of a Contract: To fulfill the core terms you agree to when signing up for a SANA plan (i.e., converting your movement to points).
Explicit Consent: For the tracking of your wearable fitness and sleep data.
You have the right to withdraw your consent to sync health data at any time via your device settings.
Legitimate Interests: To secure our platform, protect against data spoofing or point-farming fraud, and improve app functionality.
4. Sharing Your InformationSANA values user trust.
We do not sell your personal data or health identifiers to third parties.
We only share data in the following restricted scenarios:
With Brand Partners (Anonymized/Aggregated Only): When you redeem a voucher or offer from our storefront, we pass anonymized, aggregated audience trends or the unique promotional voucher code to our Brand Partner to complete your transaction. We do not give your raw health records or specific wearable activity data to third-party brands.
With Third-Party Service Providers: Secure cloud hosting, notification, and database analytics tools that operate strictly under our instructions and data processing agreements.
Legal Obligation: If required by law, regulation, or a valid legal authority to protect the safety, rights, or property of SANA or our community.
5. Data Retention, Logging Out, and Cancellation
We keep your data only as long as necessary to fulfill your account requirements:
Logging Out & Deactivation: If you log out or temporarily deactivate your profile, your account records and accrued points are securely frozen and preserved so you can resume later.
Plan Cancellation & Closure: If you choose to cancel your SANA plan, your profile is permanently closed. All accumulated points are instantly forfeited, and your personal identifiable data will be safely deleted or fully anonymized within 30 days of cancellation, except where we are legally required to retain records.
6. Data Security
We implement robust technical and organizational security measures—including data encryption in transit and at rest—to ensure your health metrics and profile information are shielded against unauthorized access, loss, or alteration.
7. Your Data Protection Rights
Under the UK GDPR, you hold specific rights regarding your personal information:
Right of Access: You can request copies of the personal data we hold about you.
Right to Rectification: You can ask us to correct inaccurate or incomplete details.
Right to Erasure ("Right to be Forgotten"): You can request that we completely erase your personal data (noting that this will require plan cancellation and the deletion of points).
Right to Withdraw Consent: You can disconnect your wearable device integrations at any time, halting future point calculation.
To exercise any of these privacy rights, please contact our team using the email address below.8. Contact UsIf you have any questions, concerns, or requests regarding this Privacy Policy or how your health data is handled, please get in touch with us at:
SANA Data Protection Contact: chloe@sana.fit