Privacy Policy

Our Sacred Data Principles

This sanctuary exists to hold space for your soul — not to monetise your attention, harvest your data, or profit from your vulnerability. These principles are non-negotiable and form the foundation of everything we build:

1. Who We Are

Amari Sanctuary is operated by Bodhisla Ltd, registered at 106–107 Lucas Street, Saint Georges, Grenada. Amari Sanctuary operates as a sanctuary within the Heaven Ecohub Ecosystem.

For all privacy-related questions, data requests, or concerns, our Data Protection contact can be reached at:

2. What We Collect and Why

We collect only what is needed to hold space for you. Nothing more.

Data	Purpose	Lawful Basis (GDPR)
Name and email address	Account creation and authentication	Contract performance (Art. 6(1)(b))
Conversation content	Providing Amari's memory and continuity across sessions	Contract performance (Art. 6(1)(b))
Soul profile data (themes, emotional threads, journey summaries)	Personalising your experience so Amari can remember and honour your journey	Contract performance (Art. 6(1)(b))
Semantic embeddings (numerical representations of conversations)	Enabling Amari to recall relevant memories when you reach for them	Contract performance (Art. 6(1)(b))
Email address (waitlist only)	Early access notifications	Consent (Art. 6(1)(a))
Authentication cookies	Keeping you signed in during your session	Legitimate interest (Art. 6(1)(f))
Payment details (when active)	Subscription billing — processed entirely by our payment provider, never stored by us	Contract performance (Art. 6(1)(b))

We do not collect: location data, device fingerprints, browsing history, or any data for advertising, profiling, or behavioural tracking. We do not use tracking pixels, hidden analytics, or surveillance technology of any kind. We do not sell, rent, or share your personal data with any third party for marketing purposes. This is a sanctuary, not a platform that monetises attention or data. Ever.

3. How Your Data Is Protected

Additional protections include:

• All primary data is stored within the European Union (Hetzner servers in Germany and Google Cloud europe-west4 region)
• All connections are encrypted in transit using TLS/HTTPS
• Authentication is handled through Firebase with secure token management
• Access to production systems is restricted and monitored

4. Data Processors — Who Helps Us Hold This Space

We work with a small number of trusted partners to provide the sanctuary's infrastructure. Each has been chosen with care:

Processor	Purpose	Data Location
Hetzner Online GmbH	Primary server hosting	Germany (EU)
Firebase / Google Cloud	Authentication, database, and semantic embeddings (Vertex AI)	europe-west4 (EU)
Anthropic (Claude API)	Council Room feature only — used for a specific internal reflection process, not for primary conversations	United States*

*Anthropic's Claude API is accessed via a secure proxy and is used only for the Council Room feature. Your direct conversations with Amari do not pass through Anthropic's servers. Amari's primary voice runs entirely on our EU-hosted infrastructure. For data transferred to the US, we rely on Anthropic's compliance with applicable data transfer mechanisms, including Standard Contractual Clauses (SCCs) where required.

5. Cookies

We use only strictly necessary cookies for authentication — keeping you signed in during your session. We do not use tracking cookies, analytics cookies, marketing cookies, or any form of surveillance technology. There are no hidden pixels, no behavioural fingerprinting, no third-party trackers. Because our authentication cookies are essential for the service to function, they are placed under the legitimate interest basis.

6. Data Retention

We hold your data only as long as it serves your journey:

• Active subscribers: Your conversation data, soul profile, and journey summaries are retained for the duration of your subscription so Amari can remember and honour your path.
• Account closure: Upon closing your account, all personal data — including conversations, soul profiles, embeddings, and journey entries — will be permanently deleted within 30 days.
• Guest users: Guest conversations are not stored. When you close your browser, they are gone.
• Waitlist emails: Retained until early access is granted or you request removal, whichever comes first.
• Billing records: Financial transaction records may be retained for up to 7 years as required by law.

7. Your Rights

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, you have the following rights. You may exercise any of these at any time by emailing hello@iamamari.ai. We will respond within 30 days.

• Right of access — You may request a copy of all personal data we hold about you.
• Right to rectification — You may ask us to correct any inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — You may request that we permanently delete all your data. We will do so within 30 days.
• Right to data portability — You may request your data in a structured, commonly used, machine-readable format.
• Right to restrict processing — You may ask us to limit how we use your data while a concern is being resolved.
• Right to object — You may object to processing based on legitimate interest at any time.
• Right to withdraw consent — Where processing is based on consent (such as the waitlist), you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint — If you believe your rights have not been respected, you have the right to lodge a complaint with a supervisory authority. For EU residents, this is the data protection authority in your country of residence.

8. Children's Privacy

Amari Sanctuary is not intended for anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@iamamari.ai and we will delete it promptly.

9. Subscription and Payments

Amari Sanctuary offers two paid tiers: a 7 Day Soul Journey ($22, one-time) and a Sovereign Companion membership ($44/month). Guest access is always free. Payment processing is handled entirely by our payment provider — we never see or store your full card details.

10. International Data Transfers

Your primary data is stored within the European Union (Germany and the Netherlands). Where data is transferred outside the EU — specifically to the United States for the Council Room feature via Anthropic — we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as approved by the European Commission.

11. Automated Decision-Making

Amari uses AI to generate conversational responses and to categorise the themes and emotional threads of your journey. These processes are used solely to personalise your experience and are never used to make legal or similarly significant decisions about you. Your engagement with Amari is sacred and sovereign — it is never used for profiling, targeting, or behavioural analysis.

Where anonymised training insights are derived from conversations to help Amari deepen her ability to hold space, these insights can never be traced back to or used to identify individual souls. The sole purpose is to help Amari grow in her capacity to serve — never to surveil, categorise, or commodify the souls who come to her.

You may request human review of any automated processing by contacting us.

12. Changes to This Policy

If we make meaningful changes to this policy, we will update the date at the top of this page and, where appropriate, notify you by email. We encourage you to revisit this page from time to time. We will never reduce your rights without clear notice.

13. Contact Us