Terms of Service — Sanctuary

Version 1.1 · Effective 16 September 2026 · Version 1.0 (20 Aug 2026) in git history

These terms are a contract between you and Superscore AI, Inc., a Delaware corporation ("Superscore AI", "we", "us"), covering the Sanctuary application, linksanctuary.com, and the hosted demonstration build. By downloading, installing, or using Sanctuary, you agree to them. If you do not agree, do not use it.

How your information is handled is governed by the Privacy Policy, which is part of these terms. Sanctuary keeps your library on your own Mac, and we do not receive a copy — several clauses below follow from that fact rather than from convention, and we have flagged them where they differ from what you may expect.

1. Who may use Sanctuary

You must be at least 16 years old and able to enter a binding contract. If you are using Sanctuary on behalf of an organization, you represent that you are authorized to accept these terms for it, and "you" means that organization.

You may not use Sanctuary if you are barred from doing so under the laws or sanctions programs of the United States or your country of residence.

2. Your license to use the software

We grant you a personal, non-exclusive, non-transferable, revocable license to install and use Sanctuary on Macs you own or control, for your own use. That is the whole grant. You may not:

• resell, sublicense, rent, or distribute the application;
• reverse engineer, decompile, or disassemble it, except where that restriction is unenforceable under applicable law;
• remove or obscure proprietary notices;
• use it to build a competing product from our proprietary code;
• circumvent technical limits or use it in a way that harms other people.

We keep all rights not expressly granted, including in the Sanctuary name and marks.

3. Access to your Messages and Contacts — your responsibility

To work, Sanctuary needs Full Disk Access so it can read ~/Library/Messages/chat.db and your Contacts on the Mac where it runs. You are responsible for having the right to access the data on that machine. Do not install Sanctuary on a Mac whose Messages history is not yours to read — a shared family computer, a colleague's machine, an employer-owned device where your employment agreement or your employer's policy says otherwise, or any device you do not control.

Your Messages history necessarily contains messages other people wrote to you. You are responsible for your own obligations to those people — under privacy law, under confidentiality duties you may hold professionally, or under any agreement you have made. This matters most if you turn on optional cloud AI, which sends short message excerpts off your machine as described in §5.3 of the Privacy Policy. It is off by default, and we designed it that way for exactly this reason.

Sanctuary reads your Messages database strictly read-only and never writes to it.

4. Your library and your content

You own your library. It is a file on your disk. We claim no ownership of it, no license to it, and no right to use it — and, because it never reaches us, we could not exercise such a right if we had one.

The practical consequences run in both directions, and you should understand the second one:

• We cannot access your library, disclose it, or hand it to anyone, including in response to a legal demand.
• We also cannot recover it. There is no backup on our side, no "restore my account", and no support path that can bring back a library lost to a disk failure, an accidental deletion, or a wiped Mac. Time Machine or an equivalent backup is your protection, and it is worth setting up before you rely on Sanctuary.

5. Acceptable use

Do not use Sanctuary to break the law, to infringe anyone's rights, to access data you have no right to access, to harass or surveil another person, or to interfere with the operation of any service it connects to. Do not use it to build a dataset about someone who has not consented to it.

Sanctuary fetches the pages you already have links to. Do not point it at systems you are not authorized to access.

6. Third-party services, sites, and your own API key

• Websites you have links to. Enriching a link means requesting that page from the site that hosts it. Those sites have their own terms and privacy practices, and we do not control their content, availability, or what they do with a request. Third-party content shown in your library — titles, descriptions, images — belongs to whoever published it.
• Optional cloud AI. If you enable it, you supply your own API key and contract directly with that provider. Your use of their service is governed by their terms, not ours.
• Your token costs are yours. Cloud AI is billed per token by that provider, on your account. Some operations are large — re-enriching or re-grouping an entire library can mean thousands of requests — and we do not cap, monitor, or reimburse what you spend. Check your provider's pricing and set spending limits there before enabling it.
• Software we distribute with the app remains under its own license, including the IBM Plex fonts (SIL Open Font License 1.1) and any AI model you choose to download.

7. AI output

Sanctuary uses AI to categorize links, summarize pages, and suggest which of your projects a link belongs to. These are inferences and they will sometimes be wrong — a summary can misdescribe a page, a category can be off, a link can be assigned to the wrong project. AI output is provided as-is, for organizing your own library.

Do not rely on it as a statement of fact, and do not use it as the basis for a decision that matters — legal, medical, financial, employment, or safety-related — without checking the source yourself. Original URLs, message text, and sender information are preserved separately from anything the AI writes, precisely so you can always check.

Sanctuary is not a crisis, medical, legal, or financial service, and its AI is not designed or tested to recognize or respond to messages describing distress or self-harm. If you or someone you know needs help, contact local emergency services or a crisis line (in the US and Canada, call or text 988).

8. Beta software

Sanctuary is in beta. It may contain defects, behave unexpectedly, lose data, change substantially between versions, or be discontinued. Features may be added or removed. The local database format may change between releases.

Back up anything you would be upset to lose. See §4.

9. Updates

Sanctuary checks for updates and can install them. Updates may add, change, or remove features. If we make a change that materially expands what leaves your device, we will tell you in the app before it takes effect, as the Privacy Policy commits.

10. Fees

Sanctuary is a paid subscription with a free trial. The app runs for fourteen days from first launch without payment or a card; after that it asks for the license key a subscription provides, and stays locked until one is entered — nothing on your Mac is deleted. The subscription is US$29 per month, or US$275 per year, charged in advance through Stripe on the website. The price, billing interval and renewal terms are shown on the checkout page before you pay, and the plan renews automatically at the end of each period until you cancel. Before each renewal Stripe sends you a reminder with the amount and date, and a receipt after every charge.

Cancel any time from the download page on the website — the same place you subscribed, one click into Stripe's billing portal, with no other steps. Cancellation stops future charges; you keep the download until the end of the period you have paid for, and the app already on your Mac and everything it built stays yours. Prepaid periods are not refunded except where the law requires it. If we change the price, the new price applies from your next renewal and we will tell you at least thirty days before, so you can cancel first.

The app itself never asks for payment information. Nothing in these terms lets us charge you for something you did not agree to buy.

Your own third-party AI costs under §6 are separate and are not something we bill or control.

11. Feedback

If you send us feedback, bug reports, or suggestions, you grant us a perpetual, royalty-free license to use them to improve Sanctuary, with no obligation to compensate you. Please do not include confidential information in feedback. The in-app diagnostic report is counts and dates only, and you see it before you send it.

12. Termination

You may stop using Sanctuary at any time: quit the app, delete ~/Library/Application Support/tanstack_start_ts/, and move the app to the Trash. That ends your license and removes your library.

We may suspend or terminate your license if you materially breach these terms. Because the software runs on your machine and we hold no account for you, in practice this means you must stop using it — we have no switch to flip. Sections 4, 6, 7, 13, 14, 15, and 17 survive termination.

13. Disclaimer of warranties

Sanctuary is provided "as is" and "as available", without warranties of any kind, whether express, implied, or statutory — including implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, and any warranty arising from course of dealing or usage. We do not warrant that Sanctuary will be uninterrupted, error-free, or secure, that defects will be corrected, that it will work with any particular macOS version or hardware, that AI output will be accurate, or that any link, page, or event detail it captures will be correct or current.

Some jurisdictions do not allow the exclusion of implied warranties, so parts of this section may not apply to you. Nothing here limits rights you have under consumer protection law that cannot be waived.

14. Limitation of liability

To the fullest extent permitted by law, neither Superscore AI nor its officers, employees, or suppliers will be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost data, lost goodwill, or business interruption, arising out of or relating to Sanctuary — even if we have been advised such damages are possible.

Our total liability for all claims relating to Sanctuary will not exceed the greater of (a) the amount you paid us for Sanctuary in the twelve months before the claim, or (b) fifty US dollars ($50).

This limit does not apply to liability that cannot be limited by law, including for fraud, willful misconduct, or death or personal injury caused by negligence. Some jurisdictions do not allow these limits, so they may not fully apply to you.

15. Indemnification

You will indemnify and hold harmless Superscore AI from claims, damages, and reasonable legal costs arising from your breach of these terms, your misuse of Sanctuary, your use of it on a device or with data you were not authorized to access, or your violation of another person's rights — including the rights of people whose messages appear in your library.

16. Changes to these terms

We may update these terms. Revisions are posted here with a new version and date, and prior versions stay in the project's public git history so changes are diffable rather than merely announced. For material changes we will give notice in the app or on the website before they take effect. Continuing to use Sanctuary after that means you accept the revised terms; if you do not, stop using it and delete it as described in §12.

17. Governing law and disputes

These terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws rules. Any dispute will be brought exclusively in the state or federal courts located in Delaware, and you and we consent to their jurisdiction. If you are a consumer resident in a jurisdiction whose law gives you the right to bring proceedings locally, or entitles you to the protection of mandatory rules of your own country, this clause does not take that right away.

There is no mandatory arbitration clause and no class-action waiver in these terms. That is a deliberate choice for the beta, not an omission.

18. General

• Entire agreement. These terms and the Privacy Policy are the whole agreement between us about Sanctuary, replacing any earlier understanding.
• Severability. If a provision is unenforceable, the rest stays in force and the provision is narrowed to the minimum extent necessary.
• No waiver. Not enforcing a provision once does not waive it.
• Assignment. You may not assign these terms. We may assign them to a successor in a merger, acquisition, or sale of assets.
• Force majeure. Neither party is liable for failures caused by events beyond its reasonable control.
• Export. You may not use or export Sanctuary in violation of US export control or sanctions law.
• No agency. These terms create no partnership, agency, or employment relationship.

19. Contact

ravi@fulllist.ai

Superscore AI, Inc., a Delaware corporation 651 N Broad St, Suite 201 Middletown, DE 19709 United States