Your account and privacy
In public deployments anyone can read the collection; private deployments require approved sign-in. Account features always require approved sign-in and keep bookmarks, progress and reflections separate for each member.
What is stored
We store your Google account identifier, name and email, sign-in sessions, and the study information you choose to save. Google handles your password. This app does not request Gmail inbox access, store your Google password, or retain reader Google access and refresh tokens. If the owner connects Gmail for invitations, a separate Gmail refresh token is stored privately for that sending service.
Where your words live
Your account information is stored in the database belonging to this installation. Other readers cannot access it. The server administrator can access stored data; reflections are not end-to-end encrypted. This is not a place to store passwords or confidential records.
Browser notes and imports
Existing browser notes stay on their original device and website address. An import copies only the reflections you approve into your signed-in account and keeps existing account reflections. Account data in a local Docker installation does not automatically synchronize with a separate AWS installation.
Export and deletion
Download your account data from My Sādhana at any time. Account deletion removes your active account, sessions and study records immediately. It does not delete your Google account or browser-only notes. Copies may remain in administrator backups until those backups expire; the supplied backup tool retains seven daily backups by default.
Sessions and third parties
An essential session cookie keeps you signed in for up to seven days. The Google sign-in library is loaded on the signed-out My Sādhana page when configured. Google’s own privacy terms apply to its sign-in service. We do not add advertising or analytics as part of V6.
For assistance, contact the person who provided this installation. Before a public release, the operator must publish a support contact and confirm the actual backup retention policy.
Invitation-only access
The site owner keeps an approved-email list. Your invitation binds to your Google account on first sign-in. In private mode, only approved members can access study content. In public mode, reading is open but account membership remains invitation-only. The owner can revoke access and invalidate your sessions. Revocation does not erase your reflections; account deletion remains available from My Sādhana while you have access. Contact the site owner about deletion after revocation. Owner administration records retain the actor email, recipient email, action and time for invitations and membership changes. These records are visible only to the owner and delegated administrators through the app and remain after account deletion; contact the owner about retention or removal. They contain no reflection text. Invitation records are retained separately to enforce membership; database backups also contain these records.