Privacy Policy

Book of Life, operated by Sansa Technologies, Inc.

Effective September 2, 2026 · Last updated September 4, 2026

The short version

Book of Life is a private journal, and we want to be honest about what "private" means here.

• We can read your entries. Book of Life is not end-to-end encrypted. Your writing is stored in our database in a form our staff can technically access. See Section 5.
• We choose not to. We access the contents of your book only for a specific, necessary reason — a bug, a support request you sent us, suspected abuse, or a valid legal obligation.
• We do not sell your data, and we never train AI models on your entries.
• We collect very little. Your Google email and name, what you write, and ordinary server logs. No analytics trackers, no advertising cookies.
• One feature sends text off our servers. If you use the paste-and-sort feature, that text goes to OpenAI to produce suggestions. Nothing else does.
• You can export everything or delete everything, yourself, at any time, from Settings.

The rest of this policy is the detail.

1. Who we are

Book of Life is operated by Sansa Technologies, Inc., 800 North State Street, Suite 304, Dover, DE 19901, USA. For privacy questions, write to team@sansatech.com.

For users in the EEA and the UK, Sansa Technologies, Inc. is the data controller for the personal data described in this policy.

2. What we collect

Information you give us by signing in. Book of Life uses Google sign-in only. When you sign in, Google gives us your email address, your name, your profile picture URL, and your Google account identifier. We never receive your Google password. You can change the display name we show you at any time in Settings.

What you write. The contents of your book: your yearly entries, where-you-are notes, commitments, reviews of past commitments, dated events, margin notes to your past self, and any text you paste into the sorting feature. Along with each of these we store the year it belongs to, its type and status, any date you attached to it, and when it was created.

Technical information. Like any website, our infrastructure records ordinary request logs — IP address, browser and device type, pages requested, timestamps, and error traces. We use these to keep the site running and to diagnose problems. We do not deliberately log the contents of your entries, though the text of an entry could incidentally appear in an error report when something goes wrong.

Cookies. We set only the cookies required to keep you signed in and to keep your session fresh. We do not use analytics, advertising, or tracking cookies, and we do not run third-party trackers on the site. There is nothing to opt out of, because there is nothing running.

What we do not collect. We do not ask for or store your date of birth, phone number, address, payment details, location, or contacts. We do not scan or index your entries for any purpose other than showing them back to you.

3. How we use your information

We use your information only to:

• create your account and keep you signed in;
• store your book and show it back to you;
• provide the AI sorting feature when you choose to use it;
• produce your export file and carry out your deletion request;
• diagnose bugs, outages, and errors, and keep the Service secure;
• respond to you when you contact support; and
• comply with law and enforce our Terms of Service.

We do not use your entries for advertising, sell or rent your personal information, share it with data brokers, or use it to train artificial intelligence models — ours or anyone else's.

Legal bases (EEA/UK). We process your account data and your entries to perform our contract with you (Article 6(1)(b) GDPR); we process technical logs and security data on the basis of our legitimate interests in keeping the Service running and secure (Article 6(1)(f)); and we process data to meet legal obligations where they apply (Article 6(1)(c)). Some of what you write may be sensitive to you, but you decide what to write — we do not ask you for special-category data and we do not analyse your entries to infer any.

4. Who we share it with

We do not sell your data. We share it only with the service providers that make the product work, and only to the extent they need it:

Each of these is bound by its own agreement with us to process data on our instructions.

We may also disclose information if we are required to by law — a valid subpoena, court order, or similar legal process — or where we believe in good faith that disclosure is necessary to prevent imminent harm. Where we are legally permitted to do so, we will make reasonable efforts to notify you before disclosing your data, so you have a chance to object.

If Sansa is involved in a merger, acquisition, or sale of assets, your data may transfer as part of that transaction. We will give you notice, and the acquirer will remain bound by this policy until it is changed with notice to you.

5. Your entries are not end-to-end encrypted

We would rather state this plainly than let a word like "private" do more work than it can.

Your entries are encrypted in transit (HTTPS on every request) and at rest on our providers' storage. But the encryption keys belong to us and our providers, not to you. There is no passphrase held only by you, and there is no technical barrier that would stop us reading your book. In practice:

• A small number of Sansa personnel with production database access can read what you write.
• Our infrastructure providers hold your data on their systems and can technically access it, in the same way any hosting provider can.
• If a court validly compelled us to hand over your data, we could. A service with true end-to-end encryption could not.

What we do about it:

• Production database access is limited to personnel who need it to operate the Service.
• We access the contents of a book only for a specific, necessary reason: investigating a reported bug or outage, responding to a support request you sent us, investigating suspected abuse or a Terms violation, or complying with a legal obligation.
• Nobody at Sansa is permitted to read user entries out of curiosity.
• We never use entries for training, marketing, profiling, or product analytics.

If you need a journal whose operator provably cannot read it, you should use a tool that offers end-to-end encryption. Book of Life does not offer that today. If that changes, we will say so clearly and update this policy.

6. The AI sorting feature

The paste-and-sort feature is the only part of Book of Life that sends your writing outside our own infrastructure. When you use it, the text you pasted and the text of your open commitments from earlier years are sent to OpenAI's API so that a model can propose how to file them.

• The suggestions are proposals only. Nothing is written to your book until you approve it.
• OpenAI processes the text to return a response and, under its API terms, does not use it to train its models. It may retain inputs for a limited period for abuse monitoring.
• We do not store the pasted text separately from the entries you choose to keep.
• If you never use the feature, none of your writing is ever sent to OpenAI.

7. How long we keep it

• Your entries and account: until you delete them. We do not expire or archive your book.
• When you delete: deleting from Settings is a real, immediate deletion of your entries from our live database, not a hidden flag.
• Backups: deleted data may persist in routine encrypted database backups for up to 30 days, after which those backups are overwritten in the ordinary course.
• Server logs: retained for up to 30 days for debugging and security, then discarded.
• Legal holds: if we are legally required to preserve specific data, we will retain it for as long as required and no longer.

8. Security

We use HTTPS everywhere; row-level security in the database, so one user's session cannot read another user's rows; encryption at rest on provider infrastructure; sign-in delegated to Google, so we never handle passwords; and access controls limiting production data access to the personnel who need it.

No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant regulators as required by law and without undue delay.

9. Your rights and choices

Whatever your location, you can:

• Export everything as a JSON file, from Settings, at any time.
• Delete everything, permanently, from Settings, at any time, without asking us.
• Change your display name in Settings.
• Contact us at team@sansatech.com with any privacy question or request.

If you are in the EEA or UK, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability (the export feature satisfies this directly). You may lodge a complaint with your local supervisory authority.

If you are in California, you have the right to know what personal information we collect and how we use and disclose it, the right to delete it, the right to correct it, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding 12 months. We do not use or disclose sensitive personal information for purposes requiring an opt-out.

We will not charge you or degrade your service for exercising any of these rights. We respond to requests within 30 days.

10. Children

Book of Life is not intended for anyone under 13, and we do not knowingly collect personal information from children under 13. If you are between 13 and 18, you may use the Service only with the consent and involvement of a parent or guardian. If you believe a child under 13 has created an account, contact team@sansatech.com and we will delete it.

11. International transfers

We operate from the United States, and our providers process data in the United States. If you use Book of Life from outside the U.S., your information will be transferred to and stored there. Where required for transfers from the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) with our providers.

12. Changes to this policy

We may update this policy. If a change materially affects how we handle your data — including any change to Section 5 — we will notify you in the app or by email before it takes effect, and we will update the "Last updated" date above. We will not make a material change quietly.

13. Contact us

Sansa Technologies, Inc.

800 North State Street, Suite 304, Dover, DE 19901, USA

team@sansatech.com