Privacy Policy
What we collect, who can see it, and how to get it out or delete it.
In effect 21 September 2026 · Version 2026-09-23
The short version
We collect what the app needs to run your challenges and nothing we cannot justify. Your written reflections are the most personal thing here, and they stay private to you unless you deliberately share a challenge. We never see your card details. You can export or delete your data at any time from Settings.
What we collect
Account information: your email address, display name, timezone, and the preferences you set.
Challenge content: your goals, the reason a goal matters to you, the daily actions you commit to, your schedule, and every log you record against them.
Reflective content: the app asks how you currently feel about a goal, what you believe about it, what you tend to avoid, and how you would rather show up. This is deliberately personal material, and we treat it as the most sensitive data in the system.
Accountability records: who reviews your work, what they approved or declined, and when.
Payment records: what was bought, for how much, and whether it succeeded. Card numbers are entered directly into Stripe and never reach our servers or our database.
Technical data: device and notification tokens so reminders can reach you, and ordinary server logs.
Who can see your reflections
Your reflective content is not shown to your accountability partner. A partner sees the challenge, the daily actions, the evidence you submit for review, and your progress against them. They do not see why a goal matters to you, what you believe about it, or what you avoid.
A sponsor who buys a Commitment Gift for you sees the challenge and whether it was completed. They do not see your reflections either.
Our staff can access data where it is necessary to operate the service, investigate a dispute, meet a legal obligation, or fix a fault. We do not read reflective content for any other reason.
Why we process it
To provide the service you asked for: running challenges, sending reminders, recording reviews, and processing gift purchases.
To keep the service safe and working: preventing fraud and abuse, diagnosing faults, and keeping records we are required to keep.
To communicate with you about your own challenges and purchases. We do not sell your data, and we do not use your challenge or reflective content for advertising.
How long we keep it
Account and challenge data is kept while your account is open. When you delete your account we remove your personal data, except records we are required to retain: payment and donation records are kept for the period tax and accounting rules require, and dispute correspondence is kept while it remains relevant to a possible claim.
Deleting your account does not undo a completed gift purchase or reverse a donation that has already been made.
Your rights
You can access and export your data, correct it, or delete it. Export and deletion are available in Settings; anything else, write to us and we will action it.
Depending on where you live you may also have the right to object to or restrict certain processing, and to complain to your local data protection authority. Exercising any of these rights costs you nothing and will not affect your account.
Security
Data is encrypted in transit and at rest. Access to production systems is limited to the people who need it. Card data is handled entirely by Stripe and is never stored by us.
No system is perfectly secure. If a breach affects your data we will tell you and the relevant regulator within the time the law requires.
Children
This service is not intended for anyone under 18, and Commitment Gifts involve payment. If we learn we hold data from a child we will delete it.
Changes and contact
If we change this policy in a way that materially affects you, we will tell you before the change takes effect.
Questions, requests, or complaints: contact@manifestationalarm.com.