top of page

Sanctuary Privacy Policy

For the Sanctuary pilot · Version pilot-privacy-1.1 · Effective November 5, 2026

The short version

  • Sanctuary helps you write down what matters to you about your care, and choose who may read it.

  • You decide what is shared. Nothing you write goes to your care team at your health center unless you say yes, and you can stop at any time.

  • You can see each time someone on your care team reads what you shared.

  • We never sell your information and never use it for advertising.

  • Text messages are sent only if you ask for them, and they never contain health information.

  • Sanctuary is not monitored. For urgent help, call your health center, or 911 in an emergency.

1. Who we are

Sanctuary is made by UzObi Inc., a Delaware corporation ("UzObi", "we", "us"). This policy covers Sanctuary during its pilot, which runs from December 2026 to about March 2027. In the pilot, Sanctuary is offered to patients of a community health center ("your health center"). UzObi provides Sanctuary to your health center's patients under a business associate agreement with your health center (a contract that holds us to federal health privacy rules).

2. What we collect

  • Joining: your name, date of birth, the code on your invitation card, and how you sign in: a passkey on your own device, and, if you choose, an email address or a mobile number for texts.

  • What you write: your answers and words in your care guides, including your health and care wishes.

  • Your choices: what you agreed to, which version you saw, when, and your signature if you sign a consent.

  • Who read what: when someone on your care team opens something you shared.

  • Technical information: what is needed to run and protect the service, such as your device's browser type, security events and error logs.

We collect only what Sanctuary needs to work for you.

3. How we use it

To run Sanctuary for you: to keep your care plan, show it to the people you choose, sign you in, send you the messages you ask for, keep the service secure, and fix problems. If you gave us an email address and have not started your plan, we may send up to two short reminders, which you can turn off. During the pilot we also count things without names, in groups large enough not to point to any one person (for example, how many people joined), to report to your health center and to learn whether Sanctuary helps.

4. When it is shared

Your care plan is shared only when you choose to share it. Each choice is recorded, you can see it, and you can end it.

We may also give out information when the law requires it, for example in response to a valid court order.

5. Sharing with your care team

  • If you say yes, the members of your care team at your health center who are named for this pilot can read the care guides you choose to share. Each reader signs in with their own account.

  • You can see every time someone reads them, and you can stop sharing at any time in Settings. Stopping is as easy as saying yes. Nothing new is shared after you stop.

  • What your health center has already read, printed or saved becomes part of your record there and follows its own privacy rules and its Notice of Privacy Practices.

  • If you say "Not now", nothing about you goes to your health center, not even your name, and you can still use all of Sanctuary.

  • If your health center tells us you are not its patient, sharing with it stops at once. Your plan and your account stay yours.

Company

Amazon Web Services

What it does

Hosts Sanctuary's servers and database, and delivers our emails and text messages. Covered by a business associate agreement.

6. Text messages

  • Program: Sanctuary account messages from UzObi Inc. We send text messages only if you ask for them in Sanctuary and give us your mobile number. Texts become available during the pilot once the phone carriers approve our number.

  • They are sign-in codes and short account notices. They never contain health information and do not name your health center.

  • Message frequency varies, up to 10 messages a month. Message and data rates may apply.

  • Reply STOP to stop texts at any time. Reply HELP for help, or email privacy@uzobiinc.com.

  • Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent will not be shared with any third parties.

7. What we never do

  • We never sell your information.

  • We never use it for advertising, or to build profiles about you.

  • We never share it with data brokers.

  • We never train an AI with it.

8. Companies that handle your information for us

These companies handle your information for us, under contracts that let them use it only to provide their service to us:

We will update this list before any new company receives your information.

Microsoft runs our company email, which holds messages you send us, such as a request about your information. Please do not put health details in an email to us. We will reply and help you inside Sanctuary, where your information is protected.

9. How we protect it

  • Your information is encrypted when it travels between your device and Sanctuary, and when it is stored.

  • You can sign in with a passkey on your own device, so there is no password to steal.

  • Each person on your care team signs in with their own account, and every read is recorded.

  • If a community health worker helps you join, they sit beside you. They never sign in as you. On a shared device, Sanctuary signs you out and clears itself from the device when you finish.

  • We keep a written information security program and a plan for responding to incidents.

10. How long we keep it

We keep your information while your account is open. You can delete parts of your care plan, or your whole account, in Settings. When the pilot ends, we will tell you what happens next, and you can download your plan before anything is deleted. We keep a small number of records, such as consent receipts and the record of who read what, for as long as the law requires. Information you delete is removed from our backups within 35 days.

11. Your choices and rights

You can ask us to show you your information (including who has read it), correct it, delete it, or give you a copy. You can withdraw any consent as easily as you gave it. Email privacy@uzobiinc.com. We answer within 30 days. If we decline, we will explain why. To appeal, reply "Appeal" to our answer, and we will decide within 45 days. If you still disagree, you can contact your state attorney general.

For records your health center holds, including anything it saved from what you shared, contact your health center and follow its process.

12. If something goes wrong

If your information is accessed or shared in a way you did not allow, we will tell your health center, and we will tell you, without needless delay and no later than 60 days after we learn of it. We will tell you what happened, what it means for you, and what we are doing about it.

13. Adults only

Sanctuary is for adults aged 18 or over.

14. Changes

If we change this policy in a way that matters, we will publish a new version here and tell you in Sanctuary before it applies. The current version, at the time of a change, is still available here.

15. Contact us

UzObi Inc. · 16532 Markley Lake Dr SE, Prior Lake, MN 55372 · privacy@uzobiinc.com

bottom of page