Privacy Policy

1. Our Core Privacy Philosophy

Manifest & Affirmations ("Manifest", "we", "us", or "our") is dedicated to empowering personal transformation through mindfulness, psychoacoustics, and daily positive psychological priming.

We believe that mental wellness and spiritual self-expression require total confidentiality. This Privacy Policy clarifies how our iOS and Android mobile applications and web services handle information when you interact with our platform.

2. Information We Never Collect or Sell

To guarantee complete peace of mind, Manifest operates with a strict data minimization architecture:

• Personal Affirmation Text: Custom affirmations you author or save into your personalized decks remain stored locally in encrypted storage on your mobile device.
• Habit Streaks & Meditation Logs: Your daily practice streaks and reflection counters are saved on-device.
• No Data Brokering: We never sell, rent, monetize, or trade user data to third-party data brokers, advertising networks, or marketing agencies.

3. Information We Collect Automatically

When using Manifest, limited technical information is processed to ensure stable app operations, prevent fraud, and maintain cross-device entitlement verification:

• Device Identifiers: Non-personally identifiable hardware characteristics, operating system version (e.g., iOS 18, Android 15), device model, language locale, and time zone.
• Purchase Verification Tokens: Anonymous subscriber identifiers generated by Apple App Store or Google Play Store to activate your Manifest VIP entitlements.
• App Performance & Crash Diagnostics: Aggregated anonymous crash logs (such as stack traces and memory anomalies) via privacy-preserving diagnostic tools to fix technical bugs.

4. AI Manifestation Coach & Neural Voice Processing

Manifest includes interactive features such as Aura (AI Manifestation Coach) and Neural Voice Audio:

When you send a message to the AI Manifestation Coach, the text is transmitted via an encrypted SSL/TLS connection solely to generate an immediate, personalized spiritual reframe and mantra. Once the response is delivered to your session, transient message tokens on our processing servers are purged.

Neural voice synthesis for audio affirmations utilizes privacy-first streaming algorithms that render audio directly to your device buffer.

5. Apple Health & Lock Screen Widgets Integration

If you enable Apple HealthKit integration on iOS:

• Manifest may request permission to record Mindful Minutes when you listen to 432Hz soundscapes or complete daily affirmation sessions.
• HealthKit data is never shared with third parties, cannot be accessed for advertising purposes, and remains governed strictly by Apple's HealthKit Privacy Guidelines.
• Lock Screen and Home Screen widgets read local application caches to display your selected mantras without contacting external servers.

6. Payments & In-App Subscriptions

All financial transactions, billing details, and subscription renewals are handled exclusively by:

• Apple Inc. (for iOS users via Apple App Store In-App Purchases)
• Google LLC (for Android users via Google Play Billing)

Manifest does not collect, receive, or store credit card numbers, bank account information, or billing addresses. We receive only cryptographically signed receipt tokens confirming your VIP subscription status.

7. Analytics & Diagnostics

We deploy privacy-focused infrastructure partners to deliver dependable services:

• RevenueCat: Used to validate anonymous subscription receipts and handle cross-platform purchases without exposing personal identities.
• Apple App Store Connect Analytics: Aggregated, opt-in installation statistics and conversion metrics provided directly by Apple.

8. Your Privacy Rights (GDPR & CCPA/CPRA)

Regardless of your geographic location, Manifest honors modern global privacy standards, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA):

• Right to Access: You can request a summary of any data linked to your anonymous user ID.
• Right to Erasure (Right to be Forgotten): You can delete all local data simply by clearing app data or uninstalling the app. You may also contact us to purge any server-side telemetry records.
• Right to Non-Discrimination: We never charge different rates or degrade service quality for exercising privacy rights.

9. Data Security & Storage Standards

We implement industry-grade security protocols to protect all transmission channels:

• Mandatory HTTPS / TLS 1.3 encryption across all network requests.
• On-device secure enclave storage for sensitive user settings.
• Strict principle of least privilege across internal infrastructure.

10. Children's Privacy

Manifest & Affirmations is not directed to individuals under the age of 13 (or under 16 in certain EU member states). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal information, we take immediate steps to delete such records.

11. How to Contact Us & Data Protection Officer

If you have questions, feedback, or data privacy requests regarding this Privacy Policy, our dedicated Data Protection Officer is ready to assist: