Privacy Policy

Effective date: 8 October 2026

About this policy:

The Sacred Year is published under the name STUDIO SILVANUM. This policy explains how information is handled when you use the app or website. The operator responsible for your information and our contact details are listed at the end under “Operator and contact details”.

This policy covers The Sacred Year mobile app and thesacredyear.org. Features and the information needed for them may differ between app versions. The app provides educational and cultural material, seasonal Guided Invitations, optional Sacred Reminders, Premium readings and a personal diary.

Preferences and content requests:

Your selected and followed traditions, calendar preference, saved items, music settings and Sacred Reminders settings are stored on your device. Relevant tradition and calendar selections are also sent to our content service when requesting matching Guided Invitations and Sacred Reminders. Service providers may process request information in technical and security logs.

These selections express the content you want to explore; the app does not ask you to declare your religious affiliation. Selections may nevertheless reveal personal religious or philosophical interests. We do not use them for advertising or sell them. You can change your selections in the app. Please avoid including sensitive personal information in feedback or email.

Technical identity, purchases and review access:

Normal use does not require choosing a username or password. Current versions create a technical account identifier through Supabase and use that identifier with RevenueCat to verify Premium access. A technical identifier is not your name or email address, but information associated with it is not necessarily anonymous.

Google Play, or the purchasing store for the applicable version, processes payments. RevenueCat helps verify and restore access and provides subscription reporting. Information involved may include the technical user identifier, product and subscription status, purchase history, receipts or purchase tokens, and device or operating-system information. We do not receive complete payment-card details through the app. We do not send diary writing or tradition selections to RevenueCat as customer attributes.

If you use authorised review access, our service records the technical user identifier, grant and expiry dates, code version and any revocation. It also keeps attempt counts and timing information to limit repeated code submissions. Access expiry does not itself delete these records.

Diary and backups:

Diary titles, writing, dates and related entry links are stored in the app's local database. The app does not provide its own diary cloud synchronisation. Its diary import and export features read or create the backup file you select; they do not upload diary writing to our Supabase database.

Exported backups contain readable diary information. Keep them somewhere secure. Copies saved to a cloud drive and device-level backups are governed by your settings and the relevant provider. Deleting an entry does not delete exported or device-backup copies. Removing the app, clearing its data or losing the device can remove local entries.

Feedback and email:

When you submit feedback, we receive its category, message, app version and any reply email address you choose to supply. Supabase stores the submission, submission identifier and email-delivery information. Resend forwards the message to thesacredyear.calendar@gmail.com, where Gmail stores the correspondence. A delivery failure does not necessarily remove the database submission.

If you use the website's email link or email us directly, we receive your sender address, message and any attachments you send. Providing a reply email in the app is optional, but without contact details we may be unable to reply. We use correspondence to answer questions, resolve problems and consider suggestions.

Sacred Reminders and music:

With notification permission, the app schedules Sacred Reminders locally on your device. You can change Sacred Reminders preferences in the app or withdraw notification permission in your device settings. Delivery also depends on your device and operating system. Music playback does not require microphone access or audio recording.

Website and technical information:

We have not enabled visitor analytics on the website. Its email link opens an email service rather than submitting a website contact form. Namecheap provides website infrastructure. Hosting and other service providers may process IP addresses, request times, browser or device information and technical logs to deliver and secure services, even without visitor analytics.

The app does not include behavioural advertising, and we do not sell or rent personal information. It is not designed to collect precise location, contacts, microphone recordings, call logs, text messages or advertising identifiers. Selecting a diary backup permits access to the file you select. RevenueCat subscription reporting is separate from advertising and website visitor analytics.

Purposes and legal bases:

We process information needed to deliver requested app functions and Premium access, verify and restore purchases, and provide related support to perform our agreement with you or take steps you request before entering an agreement.

We rely on legitimate interests in keeping the app and website secure, preventing abuse of access codes, investigating technical failures, answering general enquiries and improving service reliability where those interests are not overridden by your rights. Information needed to comply with a legal obligation is processed on that basis. Where particular processing requires consent, it must be obtained separately and can be withdrawn; notification permission or use of the app is not blanket consent to unrelated processing.

You do not have to send feedback or use optional features. Information necessary for a requested feature may be required for that feature to work. We do not use your information for automated decisions that produce legal or similarly significant effects on you.

Service providers and international processing:

Our providers include Supabase for authentication, database, storage and content delivery; RevenueCat for subscription verification and reporting; Google Play or the applicable purchasing store for distribution and purchases; Resend for feedback email delivery; Gmail for correspondence; and Namecheap for website infrastructure. Providers receive information needed for their functions and may also act independently for some purposes under their own policies. Information may also be disclosed where legally required or necessary to establish, exercise or defend legal claims.

Our Supabase project is hosted in Paris, France. This does not mean every service or support process remains in the European Economic Area. Resend reports storing customer email data in the United States, and other providers may process information internationally. Supabase and RevenueCat publish data-processing agreements that include EU Standard Contractual Clauses for applicable transfers. Details of relevant safeguards can be requested at our contact email. Provider information is available at supabase.com/legal, revenuecat.com/dpa, resend.com/security/gdpr, policies.google.com/privacy and namecheap.com/legal.

How long information is kept:

Local preferences and diary information remain until you change or delete them, subject to exported copies and device backups. Removing local app data does not automatically delete server identifiers, purchases, review-access records or feedback.

We manually delete ordinary feedback records and related Gmail correspondence within 12 months after the matter is resolved. Useful suggestions or corrections may be kept as separate notes without identifying details. Records necessary for a legal obligation or dispute may be retained longer.

Technical identity and purchase-verification records support access and restoration while the service is used and may remain afterwards where needed to restore purchases, handle a dispute, prevent fraud or meet legal obligations. Review-access and attempt records support verification and abuse prevention and are not automatically deleted when a grant expires. You can request deletion at the contact email; we assess which records can be removed and explain any necessary retention.

Technical-log and backup retention depends on the provider and service configuration; there is no single deletion period covering all providers. Resend currently states a 30-day retention period for email and log data on its Free plan. That period does not apply to copies in Supabase or Gmail, store purchase records, or every provider backup.

Your choices and rights:

Depending on applicable law, you may request access, correction, deletion, restriction of processing or a portable copy of personal information. You may object to processing based on legitimate interests and withdraw consent where processing relies on it, without affecting earlier lawful processing.

You can contact us:

thesacredyear.calendar@gmail.com.

We may need limited information to locate your correspondence or technical account and verify the request. Please do not send passwords, payment-card details or private diary backups. Some information may need to be retained for legal obligations or claims. You can complain to Croatia's data protection authority, AZOP (azop.hr), or another competent authority, including where you live or work.

You can change local preferences, delete individual diary entries and disable notifications without deleting the app. Back up diary entries you want to keep before clearing app data or removing the app. Those actions do not cancel a subscription; manage subscriptions through the purchasing store.

Younger users:

The Sacred Year is intended for people aged 13 and older. If you are below the age at which you may independently enter an agreement or give any required consent under your local law, involve a parent or guardian. The intended audience is not an age-verification system. If you believe someone under 13 has supplied personal information, contact us so we can investigate and address it.

Security, links and updates:

We use reasonable technical and organisational measures to protect information, but no storage or transmission system is completely secure. External websites and services have their own privacy practices. We will revise this policy when practices change and provide appropriate notice of material changes. The current version is available in the app and at https://thesacredyear.org/privacy-policy.

Operator and contact details:

STUDIO SILVANUM — The Sacred Year

Current operator: FANTASTIQUE, turistički obrt, vlasnik Marija Milovac

Andrije Hebranga 84, Dubrovnik, Croatia

Email: thesacredyear.calendar@gmail.com

Website: https://thesacredyear.org