Privacy Policy

Privacy Policy for Sage

Last Updated: April 11, 2026 Effective Date: April 11, 2026

Plain-English Summary

What we do with your data. We collect the details you share during onboarding (your goals, values, relationships, and more) and use them to personalize the audio stories, affirmations, and journaling features inside Sage. We do not sell your data, and we do not use it for advertising.

How we protect it. Sensitive details — such as your goals, beliefs, or personal struggles — are collected only with your explicit consent. We share only what’s strictly needed with trusted service providers (for storage, AI generation, analytics, and support), and we require them to protect your data.

Your control. You can access, correct, or delete your data at any time from within the app or by emailing us. EU and UK users have full GDPR rights; California residents have full CCPA/CPRA rights.

Who Sage is for. Sage is intended for adults 18 and older and is not directed to children under 13. Apple handles all subscription payments — we never see your card details.

Questions? Contact us at support@insightlabs.ai.

1. Introduction / Who We Are

Welcome to the Privacy Policy for Sage, a manifestation and wellness app that helps you set intentions, track gratitude, and listen to personalized audio stories and affirmations. Sage is operated by Summit Intelligence Pte. Ltd. (UEN: 202441229E), a private limited company incorporated in Singapore, doing business as Insight Labs (“Insight Labs,” “we,” “us,” or “our”). Our registered office is at 152 Beach Road, #23-02 Gateway East, Singapore 189721. Summit Intelligence Pte. Ltd. also operates Counter AI under the “Summit Intelligence” brand. We build tools that support personal growth while respecting your privacy.

This Privacy Policy explains how we collect, use, share, and protect your information when you use Sage on iOS. It applies to all users worldwide, including those in Singapore, the European Union (EU), United Kingdom (UK), and California. By using Sage, you agree to the practices described in this policy.

Sage offers a 7-day free trial followed by an auto-renewing subscription, managed through Apple’s in-app purchase system. Apple processes all payments directly, and we receive only confirmation of your subscription status via our service provider, RevenueCat. We do not collect or store any credit card or billing details.

Please note: Sage is not a substitute for professional mental health advice, therapy, or medical treatment. The content generated by Sage is for inspirational and wellness purposes only. If you are experiencing mental health challenges, please consult a qualified professional.

This policy was last updated and becomes effective on April 11, 2026. If you have questions, contact us at support@insightlabs.ai.

2. Information We Collect

We only collect information that is necessary to provide and personalize Sage, and we ask for your explicit consent where required — especially for sensitive details.

Our collection falls into three categories: information you provide directly, information collected automatically through your use of the app, and information we receive from third parties.

2.1 Information You Provide

Account and contact details

Your name and email address, collected either through email sign-up or through Sign in with Apple. If you use Sign in with Apple, Apple may provide a private relay email address instead of your real email, and you will receive an opaque Apple user identifier that does not reveal personal details.

Onboarding responses

When you first set up Sage, we guide you through a personalization flow of approximately 20 screens. The information you share here powers all future personalization, so we retain it alongside your account. You can decline to answer any question, though doing so may limit personalization. Onboarding responses include:

Basic demographics: gender, sexuality, age range, whether you have children.

Work: type of work and free-text feelings about work.

Self-description: free-text description of who you are.

Life events and struggles: free-text descriptions of life-shaping events and current challenges (which may touch on mental health, grief, or emotional topics).

Relationships: relationship status, names and relationships of important people in your life, and descriptions of an ideal partner.

Values and goals: priorities, what resonates with you, manifestation goals, dream city and home descriptions, and details about a specific person you may be manifesting about (which may include real names).

Some of this information qualifies as sensitive personal data under GDPR Article 9 and the CCPA/CPRA — for example, details about sexual orientation, relationship status, beliefs, or mental health. We collect it only with your explicit consent given during onboarding, we use it solely to generate personalized content for you, we never sell it, and we never use it for advertising. You can withdraw consent at any time by deleting your account, which permanently removes this data.

User-generated content

Journal and gratitude entries (free text)

Manifestation wall entries (free text and optional photos you upload from your device)

Saved or favorited affirmations

This content is stored in our secure database so you can view and edit it within the app.

2.2 Information Collected Automatically

As you use Sage, we gather technical details to keep the app working smoothly, diagnose issues, and understand how features are used. This category does not include content you create.

Device and app data: device model, iOS version, app version, locale, and timezone.

Usage events: screens viewed, features used (such as story generation or journaling), and session length.

IP address: collected at the time of requests, primarily within analytics tooling. We do not separately log IPs for long-term storage.

Crash and diagnostic data: error logs and performance data to help us fix bugs.

Generated content artifacts: AI-generated story text and audio files, which we temporarily cache so you can replay them.

2.3 Information From Third Parties

Apple: when you use Sign in with Apple, Apple provides your name, email (or relay address), and an opaque Apple user ID used to link your account.

RevenueCat: subscription status, entitlements, and purchase history tied to your app user ID.

Branch: install source and attribution data (for example, if you came from a marketing link), including device-level identifiers.

We do not receive credit card data or other financial details — Apple handles payment processing entirely.

3. How We Use Your Information

We use your information to deliver Sage’s core features, manage your account, and meet our legal obligations. For EU and UK users, our processing is based on the following lawful bases under Article 6 of the GDPR (and, where applicable, Article 9 for sensitive data):

To provide and personalize Sage (Art. 6(1)(b) — contractual necessity). We use your account details, onboarding responses, and user-generated content to create tailored audio stories, affirmations, and journaling tools.

To manage subscriptions (Art. 6(1)(b) — contractual necessity). RevenueCat data helps verify your trial or paid access so we can deliver premium features.

To process sensitive onboarding information (Art. 6(1)(a) / Art. 9(2)(a) — explicit consent). Sensitive data such as sexuality, beliefs, struggles, or free-text references to named individuals is processed only with the explicit consent you give during onboarding, and only to personalize your Sage experience. It is never used for advertising or sold. You can withdraw consent at any time by deleting your account.

To improve and analyze the app (Art. 6(1)(f) — legitimate interests). Automatically collected data, such as usage events and device info, helps us debug issues, optimize performance, and understand feature usage. We balance this against your privacy by minimizing data and limiting retention.

To secure Sage and prevent fraud (Art. 6(1)(f) — legitimate interests). We use diagnostic information and request metadata to detect unusual activity and crashes.

To comply with legal obligations (Art. 6(1)(c)). We may use data to respond to valid legal requests.

Outside the EU and UK we follow the same principles to protect your privacy.

4. How Your Information Is Shared With Service Providers

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We only share information with trusted service providers who help us operate Sage, and only the minimum data needed for their role. These providers are contractually required to protect your data and to use it only for the purposes we specify.

Service

Role

What we share

Why

Supabase (US / EU)

Authentication, Postgres database, realtime sync, file storage

Account info, onboarding responses, journal and gratitude entries, manifestation wall content, uploaded photos

Stores your account and user-generated content securely and makes it available in the app

Apple — Sign in with Apple (US)

Authentication

We receive name, email (or relay), and opaque Apple user ID from Apple; we do not send personal data back

Enables a private way to sign in

Cloudflare Workers, R2, and KV (global)

AI orchestration API, audio file storage, cache, and rate limiting

Internal user ID, story generation requests, generated audio files

Delivers personalized audio reliably

Anthropic — Claude API (Haiku) (US)

Generates personalized story text and affirmations

Selected onboarding fields relevant to each story prompt

Produces the inspirational text that becomes your audio story. Anthropic does not train its models on API inputs.

ElevenLabs (US)

Text-to-speech generation

Generated story text sent for voice synthesis

Produces the voice audio for your story. ElevenLabs does not train its models on API content submitted by Sage.

RevenueCat (US)

Subscription management and paywall

App user ID, subscription events, purchase history

Manages your trial, entitlements, and renewal status

PostHog (US)

Product analytics

Distinct user ID, event names, screen views, device info, IP at event time

Helps us understand feature usage and fix problems

Branch (US)

Deep linking and install attribution

Device identifiers, install events, attribution data

Tells us how users discover Sage

Gleap (Austria, EU)

In-app support and diagnostics

Crash logs, diagnostic data, support messages, optional screenshots you submit

Lets you report bugs and get help

fal.ai (US, upcoming feature)

Photo and video generation

Photos you upload for compositing

Will power future “see yourself in your dream scenario” features. Not active at launch.

We review our service providers regularly and rely on data-processing agreements to enforce these safeguards.

5. AI Content Generation

Personalized audio stories and affirmations are a core part of Sage. Because this feature relies on AI providers, we want to explain exactly how it works.

When you request a new story, Sage builds a prompt using the onboarding fields relevant to that story (for example, your manifestation goals, values, or dream descriptions — always based on the consent you gave at onboarding). This prompt is sent to Anthropic’s Claude Haiku to generate a short, inspirational text. That text is then sent to ElevenLabs to be converted into a voice recording. The finished audio file is cached in Cloudflare R2 so you can replay it without regenerating it.

Key points:

Neither Anthropic nor ElevenLabs trains its models on the content Sage sends through their APIs.

Only the data needed for the specific prompt is sent — not your full profile.

Generated text and audio are tied to your account and stored securely. They are not used to train any Sage models or any third-party models.

You can delete any generated story at any time; caches expire automatically after 90 days of inactivity (see Section 6).

6. Data Retention

We keep your information only as long as we need it to provide Sage, meet our legal obligations, or resolve disputes. You can request deletion at any time (see Section 7).

Category

Retention

Account and contact data

Until you delete your account

Onboarding responses (including sensitive data)

Until you delete your account — required to personalize future content

Journal, gratitude, and manifestation wall entries (including photos)

Until you delete the entry or delete your account

Saved / favorited affirmations

Until you remove them or delete your account

Generated audio stories and associated text

Cached in Cloudflare R2 for up to 90 days after last access, then automatically deleted

Product analytics (PostHog)

365 days from event

Crash and diagnostic data (Gleap)

90 days

Subscription records (RevenueCat)

Retained per RevenueCat’s policy and any applicable legal retention requirements

Install attribution (Branch)

Retained within the analytics window above

After retention ends, data is deleted or anonymized. Backups may exist briefly for disaster recovery and are then purged on the same schedule.

7. Your Rights

You have meaningful control over your information. To exercise any of the rights below, you can use the in-app account tools or email support@insightlabs.ai. We will verify your identity before fulfilling a request and will respond within the time limits set by applicable law.

7.1 GDPR Rights (EU / UK)

Under the GDPR you have the right to:

Access a copy of the personal data we hold about you.

Rectify inaccurate or incomplete information — for example, update your onboarding details.

Erase your data (“right to be forgotten”), including closing your account.

Restrict processing in certain circumstances.

Object to processing based on legitimate interests, such as analytics.

Data portability — receive your data in a structured, commonly used format.

Withdraw consent at any time for any processing based on consent, including sensitive onboarding data. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Lodge a complaint with your local data protection authority if you believe we have not handled your data properly.

We will respond to GDPR requests within one month. Where a request is particularly complex, we may extend this by up to two additional months and will let you know within the first month.

7.2 CCPA / CPRA Rights (California Residents)

Under the CCPA and CPRA you have the right to:

Know what personal information we have collected about you, the sources, the purposes, and the categories of third parties it is shared with, for the preceding 12 months.

Delete personal information we have collected, subject to legal exceptions.

Correct inaccurate personal information.

Limit the use of sensitive personal information. Sage treats onboarding responses (including sexuality, beliefs, and similar details) as sensitive personal information and uses them only to deliver and personalize Sage for you.

Opt out of sale or sharing for cross-context behavioral advertising. This is not applicable at Sage — we do not sell or share your personal information for cross-context behavioral advertising.

Non-discrimination. Exercising your rights will never affect your access to Sage or the price you pay.

We will respond to CCPA requests within 45 days and may extend this by another 45 days when necessary, as permitted by law.

7.3 PDPA Rights (Singapore Residents)

Because Insight Labs is based in Singapore, your personal data is handled in accordance with the Singapore Personal Data Protection Act 2012 (“PDPA”). Under the PDPA you have the right to:

Request access to personal data we hold about you, together with information about the ways in which it has been used or disclosed within the past year.

Request correction of any personal data we hold about you that is inaccurate or incomplete.

Withdraw consent at any time for the collection, use, or disclosure of your personal data. Withdrawing consent may affect our ability to continue providing Sage to you; we will let you know the likely consequences before we act on your request.

Be notified of any data breach that is likely to result in significant harm to you, in accordance with the PDPA’s data breach notification framework.

Our designated contact for PDPA matters is support@insightlabs.ai, which also serves as the contact for our Data Protection Officer. We will respond to PDPA requests as soon as reasonably possible and within the timeframes required by the PDPA.

If you believe we have not handled your personal data in accordance with the PDPA, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at https://www.pdpc.gov.sg.

Users in other jurisdictions have comparable rights where local law applies. If you are not satisfied with our response to any privacy request, please contact us so we can work with you to resolve it.

8. Data Security

Protecting your information is a priority. We use industry-standard security practices, including:

Encryption of data in transit (HTTPS/TLS) and at rest within our infrastructure.

Access controls so that only essential personnel can access production systems.

Vendor review — we select service providers that implement recognized security practices.

Minimization — we collect and retain only what we need.

No system is fully impenetrable, and we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you and relevant regulators as required by law. If you suspect a security issue, please email support@insightlabs.ai.

9. International Data Transfers

Insight Labs is based in Singapore, and several of our service providers operate globally. Your information may be processed in Singapore, the United States, the European Union, the United Kingdom, or other countries where our providers operate.

For transfers of personal data out of the EU, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) with our providers, along with supplementary technical and organizational safeguards where appropriate. We minimize transfers to what is strictly necessary to deliver Sage.

10. Children’s Privacy

Sage is intended for adults 18 years of age and older and is not directed to children. We do not knowingly collect personal information from anyone under the age of 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly.

If you are a parent or guardian and believe your child has provided personal information to Sage, please contact us at support@insightlabs.ai and we will take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect new features, changes in our service providers, or changes in the law. When we make material changes, we will notify you — for example, through an in-app message or email — and we will update the “Last Updated” date at the top of this page. Your continued use of Sage after a change takes effect means you accept the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your privacy rights, or have concerns about how we handle your information, please contact us:

Email: support@insightlabs.ai

Registered Office: Summit Intelligence Pte. Ltd., 152 Beach Road, #23-02 Gateway East, Singapore 189721

We are happy to help. This Privacy Policy describes Insight Labs’ privacy practices and is provided for informational purposes — it is not legal advice. For personalized guidance, please reach out to us directly.


Lorem ipsum dolor sit amet, consectetur adipiscing elit?

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Curabitur dignissim neque metus, non porttitor purus cursus non. In hac habitasse platea dictumst. Duis faucibus lacus sed nulla congue congue. Morbi a ligula lobortis, maximus orci in, egestas dui. Duis fringilla ut nunc vitae vulputate.


Lorem ipsum dolor sit amet, consectetur adipiscing elit?

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Curabitur dignissim neque metus, non porttitor purus cursus non. In hac habitasse platea dictumst. Duis faucibus lacus sed nulla congue congue. Morbi a ligula lobortis, maximus orci in, egestas dui. Duis fringilla ut nunc vitae vulputate.


Lorem ipsum dolor sit amet, consectetur adipiscing elit?

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Curabitur dignissim neque metus, non porttitor purus cursus non. In hac habitasse platea dictumst. Duis faucibus lacus sed nulla congue congue. Morbi a ligula lobortis, maximus orci in, egestas dui. Duis fringilla ut nunc vitae vulputate.


Lorem ipsum dolor sit amet, consectetur adipiscing elit?

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Curabitur dignissim neque metus, non porttitor purus cursus non. In hac habitasse platea dictumst. Duis faucibus lacus sed nulla congue congue. Morbi a ligula lobortis, maximus orci in, egestas dui. Duis fringilla ut nunc vitae vulputate.