Privacy Policy

Last updated: October 2026

1. Who we are

Sendera ("we", "us") is operated by Maria Eugenia Bonadona, established in Peru, where we are also registered for tax. Postal address: Lima 15074, Peru. For privacy questions or to exercise your rights, contact us at founder@sendera.health.

2. The short version

• Sendera is a self-care and emotional wellbeing app. It is not therapy, medical care, or a medical device.
• We collect only what we need to run the app: your account, your quiz result, your progress, what you write or say to Sendero, your journal entries, and your subscription status.
• What you write to Sendero and in your journal is encrypted when stored.
• We do not sell your data, we do not show ads, and we do not track you across other apps or websites.
• Messages to Sendero are processed by an AI provider to produce replies. We do not allow it to use your content to train its models.
• You can delete your account and your data at any time inside the app.

3. Information we collect

Information you give us

• Account: your email address, name, and password (the password is handled by our authentication provider and is never visible to us in readable form).
• Quiz and archetype: your answers to the archetype quiz and the result.
• Conversations: the text messages you exchange with Sendero, your AI companion.
• Voice notes: if you use the microphone, your recording is sent to be converted to text.
• Journal entries and drawings: text and images you save from journey exercises.
• Profile photo: optional.
• Support messages: anything you send us.

Information created by using the app

• Progress: journey steps completed, streaks, certificates, language preference.
• Subscription status: whether you have Sendera Pro and its dates. We receive this from Apple and our subscription provider. We never see your payment card.

Technical information

• Device type, app version, and IP address in server logs, used for security and debugging.
• A push-notification token, only if you enable notifications.

Sensitive information. Much of what you share relates to your emotional wellbeing. This is sensitive personal data (in the EU, "special category" health-related data). We process it only to provide the service to you, and with your explicit consent, which you give when you create an account and use these features. You can withdraw consent at any time by deleting your account.

4. How we use information, and our legal bases

We do not use your content for advertising or profiling, and we do not make decisions about you that have legal or similarly significant effects.

5. Sendero is an AI

Sendero is an artificial-intelligence companion, not a person and not a licensed professional. It can be wrong. Do not rely on it for medical, legal, or crisis decisions. If you are in danger or in crisis, contact local emergency services. In the US you can call or text 988; elsewhere see befrienders.org.

Your messages are sent to our AI provider, Anthropic, to generate Sendero's replies.

6. Who we share information with

We share information only with service providers who process it on our behalf, under contracts that limit how they may use it:

• Supabase, database, authentication and file storage.
• Anthropic, AI replies from Sendero.
• Voice transcription provider, converting voice notes to text.
• RevenueCat, managing subscriptions and entitlement status.
• Apple, App Store purchases and billing (Apple handles your payment details).
• Hosting provider, serving our website and API.
• Kit, our newsletter provider, only if you opt in to updates.

We may also disclose information if required by law, to protect someone's safety, or in a merger or sale of the business (we will tell you first). We do not sell personal information and do not share it for cross-context behavioral advertising.

7. How we protect your information

• Data is encrypted in transit (TLS).
• Conversation messages and journal entries are encrypted at rest with AES-256-GCM, and decrypted only to show them back to you.
• Each user can access only their own records (row-level security). Drawings and photos are stored in private storage.
• No system is perfectly secure. If a breach affects you, we will notify you and the authorities as the law requires.

8. Retention and deleting your data

• We keep your data while your account is active.
• To delete your account: in the app, Profile → Edit profile → Delete account (on the web, Settings → Delete account). This removes your profile, quiz results, progress, conversations, journal entries, drawings and photos from our systems.
• Copies in backups are overwritten within 30 days.
• We may keep limited records where the law requires (for example, tax or billing records), and Apple and RevenueCat keep purchase records under their own policies.
• Deleting your account does not cancel your subscription. Cancel it in your Apple ID settings (Settings → your name → Subscriptions) or you may continue to be billed by Apple.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your data, to object to or restrict certain processing, and to withdraw consent. Many of these you can do in the app; for the rest, email founder@sendera.health. We will respond within the time required by law (generally 30 to 45 days) and may need to verify your identity.

• EU/UK: you may also complain to your local data protection authority.
• California and other US states (including Virginia, Colorado, Connecticut and others): you can request to know, delete, and correct your information, and to opt out of sale, sharing, or targeted advertising (we do none of these). We do not discriminate against you for exercising your rights. You may appeal a decision by replying to our response.
• Washington and Nevada (consumer health data): we collect health-related data only to provide the service you request. You can request access to and deletion of it, and withdraw consent, using the contact above.

10. International transfers

We and our providers may process data in the United States and other countries. Where the law requires, we rely on safeguards such as Standard Contractual Clauses.

11. Children

Sendera is for adults. You must be at least 18 (or the age of digital consent in your country) to create an account. We do not knowingly collect information from anyone younger. If we learn we have, we will delete it. If you believe a child has used Sendera, contact us.

12. Cookies and website storage

Our website uses only essential storage needed to keep you signed in. We do not use advertising cookies or cross-site tracking.

13. Changes to this policy

If we make material changes, we will notify you in the app or by email before they take effect, and update the date above.

14. Contact

founder@sendera.health

Maria Eugenia Bonadona, Lima 15074, Peru

Legal counsel: Alberto Villanueva Eslava.