Privacy Policy

1. What Information Do We Collect?

Information you provide directly

• Name and username
• Email address
• Password (stored encrypted — never in plain text)
• Affirmations, desires, stories, gratitude entries, vision board images, and other manifestation content you create
• Marketing email preferences (if you opt in)

Voice recordings created using the "My Voice" feature are stored only on your device in your browser's local storage. They are never uploaded to our servers.

Payment information

If you purchase a subscription, Day Pass, or Founding Member access, your payment is processed by Stripe. We do not store your card number, CVC, or full payment details — Stripe handles this securely. We retain only your subscription status, plan type, and transaction reference.

Information collected automatically

• Usage data — features used, pages visited, session duration, date/time stamps
• Device data — device type, operating system, browser type
• Approximate location — derived from IP address (country/region level only)
• Analytics data — collected via Google Analytics (GA4) only if you accept cookies

2. How Do We Use Your Information?

• Account creation and management — to register you, authenticate you, and keep your account functioning
• Delivering the service — generating personalised affirmations, stories, and manifestation content based on your desires
• Payment processing — to manage subscriptions, billing, and access entitlements
• Transactional emails — OTP verification, password reset, subscription confirmations
• Marketing emails — tips, manifestation guides, and product updates, sent only if you have explicitly opted in. You can unsubscribe at any time via the link in any email or by emailing us
• Analytics and improvement — understanding how the app is used so we can improve it (only with your cookie consent)
• Security and fraud prevention

We never sell your personal information. We never use it to serve third-party advertising.

3. Legal Bases (GDPR)

For users in the EU, UK, or Switzerland, we process your data on the following legal bases:

• Contract — to deliver the services you signed up for
• Consent — for marketing emails and analytics cookies. You may withdraw consent at any time
• Legitimate interests — to improve our service, prevent fraud, and ensure security
• Legal obligation — where required by applicable law

You have the right to complain to your local data protection authority. For EU residents: find your authority here. For UK residents: UK ICO.

4. Who Do We Share Your Information With?

We share your data only with the trusted service providers below. We have data processing agreements with each. They cannot use your data for any purpose other than what we specify, and they will never sell it.

Provider	Purpose	Data Shared
Supabase supabase.com	Database — stores your account, content, and app data	Email, username, all in-app content
Stripe stripe.com	Payment processing — subscriptions and one-time purchases	Email, subscription status, payment reference
Groq groq.com · AI processor	AI generation of affirmations and manifest stories	Desire/intention text you enter (not linked to your identity)
HuggingFace huggingface.co · AI processor	Text-to-speech generation for audio affirmations	Affirmation text (not linked to your identity)
Cloudinary cloudinary.com	Media delivery — audio and image storage for your content	Generated audio files, vision board images
Brevo brevo.com	Transactional and marketing email delivery	Email address, name (if provided)
Google Analytics (GA4) google.com — analytics only with your consent	Usage analytics to understand how people use Manivers	Anonymised usage events, device type, approximate location
Cloud infrastructure provider	Backend server hosting	API requests, IP address
Web hosting provider	Frontend website hosting	Web requests, IP address

We do not sell, rent, or share your personal information with advertisers or data brokers.

5. AI Processing

Manivers uses artificial intelligence to generate personalised content. Specifically:

• Groq — generates affirmations and manifest stories from the desires and intentions you enter
• HuggingFace — converts your affirmation text to audio using text-to-speech models

When you submit a desire or intention, that text is sent to these AI processors to generate your content. The text is not linked to your account identity in the request. Please do not enter sensitive personal information (financial details, medical conditions, etc.) into desire or intention fields.

All AI-generated content is clearly labelled within the app. The output reflects AI generation and is intended for personal growth and motivation — it is not medical, psychological, legal, or financial advice.

6. International Transfers

Our service providers are primarily based in the United States. If you are located in the EU, UK, or Switzerland, your information may be transferred to and processed in the US. We ensure appropriate safeguards are in place through data processing agreements with each provider, consistent with applicable data protection law.

7. How Long Do We Keep Your Information?

• Free plan accounts — AI-generated content (affirmations, stories) is retained for 30 days of inactivity, after which it may be purged. Account data is retained while your account is active.
• Paid plan accounts — all content and account data is retained permanently for as long as your account exists.
• After account deletion — data is removed from active databases within 30 days and permanently deleted within 90 days, except where legal retention obligations apply.
• Voice recordings — stored only in your browser's local storage. We never have access to them.
• Payment records — retained as required by financial and tax law.

8. How Do We Keep Your Information Safe?

• Passwords hashed with bcrypt — never stored in plain text
• HTTPS/TLS encryption for all data in transit
• JWT token authentication with expiry
• Access controls limiting who can access your data

No method of electronic storage or transmission is 100% secure. We cannot guarantee that unauthorised access will never occur. Please use a strong, unique password for your account.

9. Children's Privacy

Manivers is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If we discover that a user is under 18, we will deactivate the account and delete the associated data promptly. If you believe we have collected information from a minor, please contact us at hello@manivers.com.

10. Your Privacy Rights

Depending on where you are located, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Portability — receive your data in a portable format
• Restriction — request that we limit how we process your data
• Objection — object to processing based on legitimate interests
• Withdraw marketing consent — unsubscribe at any time via the link in any email or by emailing us

Account deletion

You can delete your account directly via the Delete Account option in the Settings section of the app. Upon deletion, your data will be removed from our active systems within 30 days and permanently deleted within 90 days. You may also request deletion by emailing hello@manivers.com.

Data export

To request an export of your personal data, email hello@manivers.com. We will respond within 30 days.

11. Cookies and Analytics

We use Google Analytics (GA4) to understand how people use Manivers. This uses cookies. GA4 is only activated if you click "Accept" on the cookie banner shown on your first visit. If you decline, no analytics cookies are set and no data is sent to Google.

Your consent choice is saved in your browser's local storage. You can change your preference at any time by clearing your browser's local storage for manivers.com.

We do not use any other tracking cookies, advertising cookies, or third-party behavioural tracking.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. For material changes, we will notify you by email or by a prominent notice on the site. We encourage you to review this policy periodically.

13. Contact Us