Your data is yours.

TL;DR

Sentinel is built privacy-first. We don't run ads. We don't sell data. We collect the minimum needed to make the app work, and we tell you exactly what that is.

What we collect — without an account

Most Sentinel users never need an account. If you install the app and use it without signing in, here's what we collect:

• App usage telemetry: anonymous app-open counts, feature usage, and crash reports via TelemetryDeck. No device identifiers. No names. No scores tied to identity.
• PT assessment data: stored on your device. It never leaves your phone unless you choose to sign in and turn on sync.

What we collect — if you become a Founder or create an account

If you purchase a Founders tier or (in the future) opt into cloud sync, challenges, or leaderboards, we'll collect additional information to make those features work:

• Account identity: your name and email, captured via Sign in with Apple or a magic-link email sign-in. Used to log you in across devices and deliver account-related email.
• Purchase and subscription info: the tier you purchased, purchase date, your Stripe customer ID, and your current entitlement status. Payment is processed by Stripe — we never see or store your card number.
• Synced assessment data (opt-in): if you choose to enable cloud sync, your PT scores and training data are stored in our secure cloud infrastructure so you can access them from any device signed in to your account. Encrypted in transit and at rest.
• Community participation (future, opt-in): if you join a challenge or leaderboard when that feature launches, your chosen display name and progress data are stored to make the feature work. You can opt out at any time.

Who we share data with

We use a small number of service providers to make Sentinel work. Each one sees only the data it needs:

• Stripe — processes payments. PCI-DSS compliant. Receives payment details only; returns a customer ID and transaction confirmation.
• Apple — Sign in with Apple. You can revoke access at any time via iOS Settings → Apple ID → Sign-In & Security.
• Beehiiv — delivers the Founders Build Log newsletter. Receives email address and subscription preferences only.
• Discord — hosts the Founders community server. Only if you opt in and join; your Discord identity is managed by Discord, not by us.
• TelemetryDeck — anonymous product analytics. No personal identifiers are transmitted.
• Our cloud database provider — hosts account and (opt-in) synced assessment data with encryption at rest and in transit. Selected for strong privacy posture and SOC 2 / ISO 27001 compliance.

What we don't do

• We don't sell your data to anyone, ever.
• We don't run third-party ad networks in the app.
• We don't share your PT scores with your chain of command, your unit, your squadron, or anyone else.
• We don't use your data to train AI models or sell insights derived from it.

Your rights

You can:

• Request a copy of your data by emailing privacy@onesentinel.app.
• Delete your account and associated data at any time — email privacy@onesentinel.app. We confirm within 14 days and complete deletion within 30 days (except where we're legally required to retain payment records).
• Unsubscribe from the newsletter at any time — every email has a one-click unsubscribe.
• Turn off analytics inside the app's Settings. We respect your choice.
• Revoke Sign in with Apple via iOS Settings at any time — your account session ends immediately.

Data retention

• Account data: retained while your account is active. Deleted within 30 days of account closure, except where we're legally required to retain payment records.
• Assessment data: yours to delete at any time from within the app.
• Purchase records: retained for seven years as required by standard business record-keeping.
• Newsletter subscriptions: removed from our active list immediately on unsubscribe.

Children

Sentinel is built for USAF members and is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have, email privacy@onesentinel.app and we'll delete it immediately.

Changes to this policy

When we change this policy in ways that affect your data, we'll update the "Last updated" date above and — for account holders — send an email. Material changes give you at least 30 days' notice before taking effect.

Contact

Privacy-specific requests: privacy@onesentinel.app

General questions: hello@onesentinel.app

Company: Enclave Dev LLC, an Illinois LLC headquartered in Spokane, WA