Back to Sanctuary Aegis
Zero-Knowledge Architecture

Privacy & Legal Sanctuary Policy

Last Updated: October 2026 • Effective Worldwide

🛡️ Fundamental Zero-Cloud Guarantee

Sanctuary Aegis operates with an uncompromising zero-cloud architecture. We have zero external database servers, zero analytical tracking pipelines, and zero third-party AI endpoints. All audio processing, automatic transcription (via WhisperKit), cognitive reasoning, and note generation occur strictly inside the memory of your Apple device (iPhone, iPad, or Mac).

1. Zero Collection & Storage of Audio Recordings

In traditional transcription software, recorded audio files are persisted to disk or streamed to external cloud servers. Sanctuary Aegis operates on an inverse principle:

  • Volatile RAM Ring Buffer: Audio input is captured into transient, unmapped memory strictly for real-time speech tokenization on the Apple Neural Engine (ANE).
  • Zero Disk Footprint: Raw audio files (.wav, .m4a, .mp3) are never written to local storage, temporary cache directories, or iCloud backup.
  • Deterministic Zero-Fill (memset_s): The moment a session concludes, the memory buffer is immediately scrubbed with memset_s(0x00), guaranteeing that audio fragments cannot be recovered even through physical RAM analysis or forensic memory dumping.
  • Cryptographic Proof-of-Erasure: Every purged session generates a hardware-backed SHA-256 erasure audit certificate anchored in the Apple Secure Enclave.

2. Protected Health Information (PHI) & HIPAA Compliance

Under the Health Insurance Portability and Accountability Act (HIPAA), covered entities require a Business Associate Agreement (BAA) when transmitting PHI to third-party cloud vendors.

Because Sanctuary Aegis never transmits data over any network, no PHI is ever processed by or disclosed to us or any cloud provider. Clinicians maintain 100% unilateral custody and control of all therapeutic records.

  • De-Identified Alias Protocol: Client profiles are organized strictly by anonymous pseudonyms (e.g., C-2026-X). Entering legal names, social security numbers, or national identification is prohibited by app policy.
  • SQLCipher Hardware Encryption: Saved clinical drafts and longitudinal timelines are encrypted locally using AES-256 via SQLCipher. Key derivation is secured through Apple Secure Enclave (Key Tag: com.vajrahowly.sanctuaryaegis.secureEnclaveKey).

3. Statutory Two-Party Wiretap Consent & Audio Gatekeeper

Numerous jurisdictions (including California under Penal Code § 632, Florida under Stat. § 934.03, Pennsylvania, and Taiwan Telecommunications Protection laws) require express two-party consent before recording or transcribing confidential communications.

  • Mandatory Pre-Flight Consent Gate: The application does not permit microphone activation until the clinician explicitly confirms that the client has received verbal disclosure and provided informed consent.
  • Audible Acoustic Chime: An intentional, system-generated chime sounds upon recording initiation, serving as statutory notice of capture.
  • Statutory Proof Logging: The time and confirmation of mutual consent are permanently embedded in the local clinical session audit trail.

4. Subpoenas & Legal Inquiries

If a court, government agency, or law enforcement entity serves a subpoena, warrant, or discovery request upon the developers of Sanctuary Aegis seeking client audio or clinical records:

We are technically and mathematically incapable of producing any data. We possess no user accounts, no telemetry logs, no cloud storage, no encryption backdoors, and no server infrastructure. The clinician is the sole custodian of the hardware and encryption keys.

5. Cross-Device Synchronization & Companion Mode

When using iPhone as a Companion Node with Mac or iPad:

  • Apple Continuity Microphone: Audio is transmitted over Apple's native, peer-to-peer hardware link without passing through internet servers.
  • Local Bonjour Pairing: Direct local-network peer-to-peer encrypted transmission occurs strictly within your local clinic Wi-Fi. No data leaves your room.
  • AirDrop Transfer: Clinical note packages are transferred device-to-device via Apple's encrypted AirDrop protocol.

6. Non-Diagnostic Medical Device Disclaimer

FDA 21 CFR 860 & Apple App Store Guideline 1.4.1 Notice

Sanctuary Aegis is an administrative scribing tool intended to streamline clinical documentation for licensed mental health professionals. It does not provide autonomous medical diagnosis, clinical treatment directives, emergency triage, or pharmaceutical prescription recommendations. Attending clinicians are solely responsible for reviewing, editing, and verifying all generated notes.

7. Contact & Security Inquiries

For cryptographic audit inquiries, clinical support, or privacy questions regarding Sanctuary Aegis:

Developer: Vajra Howly
Official Support Email: howly7777777@gmail.com
Official Portal: https://howly7777777-svg.github.io/sanctuaryaegis/index.html
Privacy Policy URL: https://howly7777777-svg.github.io/sanctuaryaegis/privacy.html
Bundle Identifier: com.vajrahowly.sanctuaryaegis
GitHub Repository: github.com/howly7777777-svg/sanctuaryaegis