Sana App Privacy Policy
What Sana collects, where it goes, and the choices you have.
Effective November 2026
This policy explains how the Sana app handles your information. Sana is made by PassQual, Inc., doing business as PassQual Health ("PassQual," "we" or "us"), 18706 NW 67th Ave, Miami Gardens, FL 33015.
Sana is a free wellness and screening app for iPhone, Android and the web (sana.passqual.com). It is not a medical device. It does not diagnose, treat or prescribe.
The short version: most of what you put into Sana stays on your device. We only receive information when you choose to sign in, use Ask Sana, connect your clinic chart, or ask to become a patient.
What stays on your device
These things are saved only on your phone or computer. They are never sent to PassQual:
- Your daily check-ins: sleep, mood, stress, energy, activity and your journal.
- The lab results you type in.
- Your fitness tests.
- Your answers to the mind and life checks.
- Your women's health entries: cycle, pregnancy and menopause.
- Your 90-day plan and your experiments.
- Your rewards and coins.
- Your settings.
Apple Health and Google Health Connect
Connecting is your choice. If you connect, Sana reads only the categories you allow: steps, exercise minutes, sleep, resting heart rate, heart rate variability (HRV), weight, body fat, blood pressure, oxygen saturation and VO2 max. Sana stores this data on your device only.
The only thing Sana writes back is your Sanctuary sessions, saved as mindful minutes.
Health data from Apple Health or Health Connect is never used for advertising and is never sold. It is not sent to PassQual's servers. The one exception: if you use Ask Sana, the short summary described below may include weekly averages.
Signing in (optional)
You don't need an account to use Sana. If you choose to sign in, you use your email or mobile number and a one-time 6-digit code. Sign-in runs on Google Identity Platform (Google Cloud).
We store each code only in scrambled form (a salted hash), and every code expires after 10 minutes. Text messages are sent through our phone provider, Zonitel. Emails are sent through PassQual's Google Workspace.
Ask Sana, the AI companion (optional)
Ask Sana only works after you agree on its consent screen. When you ask a question, Sana sends your question and a short summary to Claude, an AI model made by Anthropic. Claude runs on Google Cloud in the United States, under PassQual's HIPAA Business Associate Agreement with Google.
The summary includes only:
- Your age range.
- Your sex.
- Your goals.
- Sana's findings.
- Your weekly averages.
It never includes your name, your journal, your medication list or your reproductive health data.
Sana does not store your conversations. If your message sounds like a crisis, Sana shows you how to reach 911 and the 988 Suicide & Crisis Lifeline.
Connecting your clinic chart (PassQual Health patients, optional)
If you are a PassQual Health patient, you can connect Sana to your chart. You need a one-time invite code from the clinic and your date of birth. Sana then reads your chart from our electronic health record system (CharmHealth). The connection is read-only: Sana can see these parts of your chart, but never changes them:
- Your lab results.
- Your vitals.
- Your active health problems.
- Your medications.
- Your allergies.
Your records are passed to your device and stored there. Our server keeps only two things: the link between your Sana account and your chart, and an audit log of each time your chart is accessed. Both are kept in Google Cloud Firestore in the United States.
Becoming a patient
If you fill out the "Become a patient" form in Sana, we receive your name, phone number, email (if you give it), state, the services you're interested in, and your message. This goes to PassQual Health's patient inquiry system so our staff can contact you.
You agree to this on the form, and you choose whether we reach you by call, text or email.
What we never do
- We do not use analytics tools (SDKs) inside Sana.
- We do not use third-party advertising networks.
- We do not track you across other apps or websites.
- We do not sell or share your personal information for advertising.
The free version of Sana shows promotions for PassQual Health's own services. They are picked by the date only, never by your health data.
HIPAA and your medical records
When you are a PassQual Health patient, the records that come from your chart are protected health information (PHI). Our Notice of Privacy Practices applies to them.
Companies that handle PHI for us (Google Cloud, Zonitel and CharmHealth) do so under business associate agreements.
Your choices and rights
- Use Sana without an account.
- Turn off Apple Health or Health Connect access at any time in your phone's settings.
- Unlink your clinic chart.
- Delete everything: in the app, go to More → You and tap "Delete all data." This erases the data on your device and deletes your Sana account and your chart link.
- Export your data from the app.
- Contact us to see, correct or delete the information we hold about you, or to ask any question.
How long we keep information
- Your account and chart-link data: until you delete it.
- Audit logs of chart access: as long as the law requires.
- "Become a patient" forms: according to the clinic's records policy.
For adults only
Sana is made for adults 18 and older. The app asks you to confirm your age.
Keeping your information safe
- Information is encrypted while it travels.
- It is stored in data centers in the United States.
- Only authorized staff can access it.
- Every time someone accesses a chart, it is logged.
Not for emergencies
Sana is not for emergencies. In a medical emergency, call 911. If you are in emotional crisis, call or text 988.
Changes to this policy
If we change this policy, we will update this page and the effective date at the top.
Questions or requests
To ask a question or make a request about your information, contact PassQual Health:
PassQual Health18706 NW 67th Ave, Miami Gardens, FL 33015