what sanctuary is
sanctuary is not a build-then-ship app. it is a never-ending, always-transforming product. the transforming is not the path to the product. the transforming is the product.
it is built for the season after a relationship ends, with close attention to the two patterns that run hardest in that season: the anxious reach and the avoidant retreat. sanctuary does not try to fix a person. it gives them a place to come back to themselves, at their own pace.
the category is sovereignty tech. the person owns their return. nothing here is engineered to keep them. the method is ember science, the studio's name for its way of working: plain, physiological, shaped by evidence, and free of theater. sanctuary is the flagship of the healing-worlds line and the studio's clearest proof that one person can build something that genuinely transforms.
where it sits in the studio
martori studio runs two engines. consulting and custom builds are the primary business. the portfolio of seven products, across the healing-worlds and music-and-industry lines, is the second engine: proof of work and a sales asset, not the revenue center.
that order matters for sanctuary. the flagship earns attention for the practice. it shows a prospective client what the studio can build alone, from an apartment, without a team. it is the argument made in public.
every product carries the studio canon: one typeface, one signature color, one mark, dark-first, and the three copy bans. sanctuary carries its own world on top of that shared frame.
the world
five surfaces, each a plain act rather than a feature. none of them keep score.
- the cairn
- the daily ritual. a small, balanced act of returning. a practice, never a streak. missing a day loses nothing.
- dove
- the companion. a presence, not an assistant and not a coach. calm, specific about the body, never selling.
- expeditions
- adaptive somatic journeys that meet the nervous system where it actually is on a given day, then move with it.
- the grove
- presence-only community. company without performance. no follower counts, no posting to be seen.
- the meadow
- where writing goes. private by default. the words belong to the person, and only to the person.
voice and copy
lowercase, always. sanctuary speaks quietly, in plain language, at the volume of someone sitting beside you rather than presenting to you.
the three plain truths appear on every surface where words enter: what your words are used for and what they are not, that nothing here is built to keep you, and that a crisis never waits on a network.
the three bans, studio-wide. no em dashes. no exclamation points. no wellness language. sanctuary names things physiologically, not therapeutically, and never reaches for the vocabulary of self-care marketing.
recreated says recreated. any demo voice is labeled as recreated. it is never passed off as the live companion.
visual identity
one typeface. hanken grotesk, weights 400 to 800. one face across the whole studio, no exceptions. hierarchy comes from weight and scale, not from mixing families.
dark-first, always. sanctuary opens at evening and moves toward dawn. the ground is deep and green-black. the light is warm. the reader arrives in the dark and is carried, slowly, toward morning.
two marks. the martori gate is the studio mark and the connective thread across every book. the cairn is sanctuary's own, stacked stones moving from fern to dawn, balance held rather than locked.
dove
dove is a presence. not a coach, not an assistant, not a productivity engine wearing a soft voice. dove is calm, specific about what the body is doing, and honest when there is nothing to say.
no streaks. no nudges engineered to pull a person back. no notification designed against their own interest. dove holds to the first law that governs every companion in the studio, and it is the reason dove can be trusted in the hardest hours.
dove began with claude, brian's dog, whose whole job was presence. the name is a reminder that presence is the whole job here too.
the doctrine
never-ending by design. sanctuary is not shipped and left. it is tended. the transforming is the product, so the work is never a launch and then silence. it is a launch and then a practice.
anti-gamification, without exception. no streaks, no loss aversion, no petal economy dressed as care. the story told to a traveler and the story told to an investor must be the same story. if a mechanic would read as manipulative on the investor page, it does not belong in the product.
the living doorway. the demo is a running instance of the product, so the product's rules apply to it: the privacy truth on every surface, a fallback that only ever gets quieter and never breaks, and crisis paths that never wait on a network.
sovereignty. the person owns their return. sanctuary is built to be outgrown, not depended on. and the studio raises and builds in parallel, not in sequence, because a product that is never finished cannot wait for permission to begin.
the roadmap
sanctuary ships when it is ready, not on a date. the gate below is the condition for the open door. the dates are working targets, held loosely, and always subordinate to the gate. the shared september launch is retired.
the doorway made true.
- the reconciliation ledger closed. the open questions from the sweep turned into dated, finished work.
- demo v2 live with rate limiting, so the running instance holds under real traffic.
- cost guardrails set on the model endpoint, with graceful quieting under a monthly ceiling.
the product made safe before it is made public.
- crisis path resolved and rehearsed. target mid-july · gate item
- clinical advisor named. the raise memo's one named gap. target late july
- store listing assembled. copy, screens, safety disclosures. target late july
- quiet testflight beta on real devices, deliberately small.
the crossing to the app store, without a mac and without a rewrite.
- ios via median.co wrapper. the vanilla build ships as a native shell, no code changes required.
- submit with a three-week review buffer. the buffer is deliberate, so a review queue can never tempt urgency. target mid-august
- press kit final, launch checklist boring on purpose.
- capacitor kept as the v2 path, the longer-term native upgrade once the door is open.
because a never-ending product has no finish line, only weather.
- presence. the quiet first season. no feature race, just the door held open.
- deepening. the remaining terrains release one at a time, each when it is ready.
- the sweep. a scheduled playbook review in the new year, because drift is weather and the answer to weather is a calendar.
brand rules
- one face. hanken grotesk, 400 to 800, everywhere.
- clay #b6502e is the studio signature, and the gate is the studio mark.
- dark-first. lowercase for sanctuary.
- no em dashes. no exclamation points. no wellness language.
- no gamification, ever. no streaks, no loss aversion, no scores.
- the same story to travelers and investors.
- recreated says recreated, and the privacy truth stands on every surface.
- ship on readiness, not on a date.