Privacy Policy

Version: 2.1.0 — Last Updated: March 15, 2026

VedaStack LLC ("Company," "we," "us," or "our") operates the Manifestory mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App.

By using Manifestory, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address (for authentication and communications)
• Display name (chosen during profile setup)
• Date of birth (to verify age eligibility — you must be 18 or older)
• Google profile information (if you sign up with Sign in with Google): name, email address, and profile picture
• Apple profile information (if you sign up with Sign in with Apple): name (provided by Apple on first sign-in only), email address (which may be an Apple Private Relay address if you choose to hide your email), and an identity token used solely for authentication

Available authentication methods are displayed in the App and may change over time. When you authenticate through a third-party identity provider (such as Google or Apple), we do not store your password — authentication is handled entirely by that provider.

1.2 Manifestation and Journey Data

To provide our core service, we collect:

• Manifestation statements: The goals and desires you write
• Theme tags: Categories automatically assigned to your manifestation (e.g., abundance, love, health, career)
• Daily activity logs: Whether you completed daily actions, your emotional check-ins, and optional journal notes
• Weekly reflections: Your responses to structured weekly reflection prompts
• Evidence entries: Notes you log about wins, synchronicities, signs, or other progress markers

1.3 Community Content

If you participate in community features, we collect:

• Anonymous posts: Content you share to the community feed
• Reactions: Your interactions with other users' posts

Community posts automatically expire and become inaccessible after 48 hours. Posts that receive 3 or more reports from other users are automatically hidden from the feed. Expired and hidden posts are no longer visible to any user.

1.4 App Preferences and Settings

• Timezone preference
• Notification time preferences (morning, midday, evening)
• Quiet hours configuration
• App mode preferences (e.g., minimal mode)

1.5 Device and Technical Information

• Push notification tokens: To send you notifications
• Device type and operating system: For app compatibility
• Usage timestamps: When you interact with the App

1.6 Payment Information

If you subscribe to Manifestory after your free trial, payment is processed through RevenueCat and the applicable app store (Apple App Store or Google Play Store). We store:

• RevenueCat customer ID (a reference identifier)
• Subscription status and expiration date
• Membership tier

We do not store your credit card number, CVV, or full payment details. All payment processing is handled securely by RevenueCat and app stores.

2. How We Use Your Information

2.1 Provide and Personalize the Service

• Deliver personalized daily quotes and actions based on your manifestation themes
• Track your 30-day manifestation journey progress
• Generate AI-powered insights and summaries using your manifestation data
• Display your historical progress for self-comparison

2.2 Aggregate Analytics and Benchmarks

We extract anonymized benchmark data from completed journeys to:

• Show you how your progress compares to other users (e.g., "Users with similar goals typically complete X% of daily actions")
• Provide motivational insights based on aggregate patterns (e.g., "Most users who felt this way on Day 7 went on to complete their journey")
• Improve our service by understanding usage patterns
• Generate platform-wide statistics

What benchmark data includes: Completion rates, daily feeling patterns (by relative day number only — no calendar dates), action completion patterns, evidence-logging frequency, streak lengths, meditation and audio usage counts, coaching engagement metrics, and — if you completed a journey — your closing feeling and next intention (short free-text responses from the end-of-journey reflection).

Privacy safeguards:

• Benchmark data contains no user ID, no account information, and no calendar dates — only relative day numbers (e.g., "Day 7") and statistical metrics.
• Theme-level benchmarks are only displayed when a minimum number of journeys exist for a given theme, preventing identification of individuals in small groups.
• No user can ever see another user's individual data, manifestation content, or personal information. Only statistical summaries derived from anonymized benchmarks are shared.

2.3 Communications

• Send push notifications (daily reminders, milestone celebrations)
• Respond to your support inquiries
• Send important service updates

2.4 Process Payments

• Manage your subscription through RevenueCat
• Handle billing and payment issues

2.5 Legal Basis for Processing

We process your personal information on the following legal bases:

• Consent: When you create an account and accept our Terms of Service and this Privacy Policy, you consent to the collection and processing of your data as described herein. You may withdraw consent at any time by deleting your account.
• Contractual necessity: We process data that is necessary to provide you the services you signed up for, including generating personalized content, tracking your journey progress, and delivering notifications you have enabled.
• Legitimate interests: We process certain data for our legitimate business interests, including service improvement through anonymized analytics, security monitoring, fraud prevention, and maintaining deletion audit logs for legal compliance. These interests do not override your fundamental rights and freedoms.

We do not process sensitive personal information beyond date of birth (used solely for age verification) and optional emotional check-in data that you voluntarily provide as part of the core service.

3. AI-Powered Features

Manifestory uses artificial intelligence to enhance your experience:

3.1 Text Processing (Anthropic Claude)

Powered by Anthropic's Claude API:

• Analyze your manifestation statement and extract relevant themes
• Help you craft and refine your manifestation statement
• Generate personalized daily actions tailored to your goals
• Create end-of-journey summaries

Your manifestation text is sent to Anthropic's API for processing. Anthropic's use of this data is governed by their Privacy Policy. We do not use your data to train AI models.

3.2 Text-to-Speech and Guided Audio (ElevenLabs)

Powered by ElevenLabs API:

• Synthesize spoken affirmations from your manifestation statements
• Generate guided breathing and meditation audio with voice-guided prompts
• Generate audio content for visualization features

Text content for spoken affirmations is sent to ElevenLabs for audio synthesis. Breathing guidance audio uses fixed, generic phrases (not personalized content) that are cached and shared across all users — no personal data is sent to ElevenLabs for this feature. ElevenLabs' use of data is governed by their Privacy Policy.

3.3 AI Data Handling Commitments

• Your data is sent to AI providers solely to generate responses for your use within the App.
• Data sent to AI providers is processed transiently and is not retained by those providers beyond the duration of the API request, per their respective API terms. Anthropic's API operates under a zero-retention policy for API inputs and outputs.
• AI-generated content (such as your synthesized manifestation statement, daily actions, and coaching summaries) is stored by us to provide the Service but is not shared externally.
• We have no control over how third-party AI providers process data beyond our contractual agreements with them. We select providers with strong data protection practices and review their policies regularly.
• These commitments apply to all AI-powered features, including but not limited to text generation, content analysis, theme categorization, audio synthesis, and any other current or future AI capabilities within the App.

4. Data Sharing and Disclosure

We do not sell your personal information. We share data only in the following circumstances:

4.1 Service Providers

We use trusted third-party services to operate the App:

4.2 Legal Requirements

We may disclose your information if required by law, such as in response to a subpoena, court order, or government request.

4.3 Business Transfers

If VedaStack LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4.4 No Sale or Sharing for Advertising

• We do NOT sell your personal information to any third party for any reason.
• We do NOT share your personal information for cross-context behavioral advertising.
• We do not use your personal information for targeted advertising purposes.
• We have not sold or shared personal information in the preceding 12 months.
• We do not have actual knowledge that we sell or share the personal information of users under 16 years of age.

This section satisfies the requirements of the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) regarding the sale and sharing of personal information.

5. Data Retention

5.1 Active Accounts

We retain your data for as long as your account is active and as needed to provide you services.

Journey data lifecycle: When you complete a 30-day manifestation journey, the detailed journey data (daily logs, actions, evidence entries, weekly reflections, coaching summaries) remains available until you start a new journey or until an automatic cleanup period following completion. At that point, this detailed data is permanently deleted. Before deletion, we extract fully anonymized benchmark data (described in Section 2.2) that cannot be linked back to you. Only aggregate lifetime counters (such as total journeys completed) remain associated with your account. This approach minimizes the personal data we retain while still allowing us to provide community insights.

5.2 Account Deletion

You may delete your account and personal data at any time using the Delete Account option in the App's Settings screen. This is a self-service, two-step confirmation process that takes effect immediately. You may also request deletion by contacting us at [email protected]. Upon deletion, we will:

• Delete your account and all personally identifiable information
• Delete your manifestations, daily logs, reflections, and evidence entries
• Extract anonymized benchmark data (as described in Section 2.2) before deletion, which cannot be linked back to you
• Remove your data from our active databases within 30 days

Compliance audit log: When data is deleted (whether through journey completion, account deletion, or automatic cleanup), we record a deletion event in an internal audit log. This log retains your user ID, the type of deletion performed, and a count of records deleted — but does not contain the content of your manifestations, journal entries, or other personal content. This audit trail is maintained for legal compliance, security, and fraud prevention purposes and is accessible only to authorized administrators.

5.3 Aggregate Data Retention

After account deletion, we retain anonymized, aggregate data indefinitely for statistical and benchmarking purposes. This data cannot be used to identify you and includes only statistical metrics (e.g., completion rates, average streaks).

6. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL)
• Secure authentication with password hashing
• Row-level security ensuring users can only access their own data
• Access controls limiting employee access to user data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6.1 Data Breach Notification

In the event that we become aware of a security breach that affects your personal data, we will:

• Notify affected users within 72 hours of discovering the breach, via the email address associated with your account
• Describe the nature of the breach, the categories of data affected, and the approximate number of users impacted
• Outline the measures we are taking to address the breach and mitigate potential harm
• Provide recommendations for steps you can take to protect yourself
• Report the breach to applicable regulatory authorities as required by law

7. Your Rights and Choices

Regardless of your location, we provide the following rights as a matter of good practice:

7.1 Access and Portability

You can view all your data within the App (manifestations, daily logs, reflections, evidence entries, settings). You may request a copy of your personal data in a structured, commonly used, machine-readable format by contacting us at [email protected].

7.2 Correction

You can update your manifestation content, evidence entries, and settings directly in the App. For corrections to account information (such as email address), contact us at [email protected].

7.3 Deletion

You may delete your account and all associated data directly in the App via Settings > Delete Account. Alternatively, you may email [email protected].

7.4 Restriction and Objection

You may request that we restrict or cease processing your personal data for certain purposes. If we are processing your data based on legitimate interests, you may object to such processing by contacting us. We will cease processing unless we have compelling legitimate grounds that override your interests.

7.5 Notifications

You can control push notification preferences in the App settings or disable notifications through your device settings.

7.6 Withdraw Consent

You may withdraw your consent to data processing at any time by deleting your account. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

7.7 Response Timeframe

We will acknowledge rights requests within 7 days and fulfill them within 30 days. If we need additional time due to the complexity of a request, we will notify you of the extension and the reasons for the delay.

8. Children's Privacy

Manifestory is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected data from someone under 18, we will delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

9. International Users

Manifestory is operated from the United States. Your information is stored and processed on servers located in the United States, using infrastructure provided by our service providers (see Section 4.1). We implement appropriate technical and organizational safeguards to protect your data regardless of where it is processed.

Note: We do not currently offer services in the European Union (EU) or European Economic Area (EEA). If you are located in the EU/EEA, please do not use this App. Notwithstanding this geographic restriction, we provide data subject rights (described in Section 7) to all users as a matter of good practice.

By using the App, you consent to the transfer, storage, and processing of your information in the United States.

10. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the App
• Updating the "Version" and "Last Updated" date at the top of this policy
• Requiring re-consent for major changes that affect your rights (MAJOR version changes)
• Sending a notification through the App (for significant changes)

Your continued use of the App after changes are posted constitutes acceptance of the updated policy. Major changes (MAJOR version bump) will require your explicit consent before you can continue using the App.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

13. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected, the sources from which it was collected, the purposes for collection, and the third parties with whom it is shared.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions provided by law.
• Right to Correct: You can request correction of inaccurate personal information we maintain about you.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Opt-Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information. However, as stated in Section 4.4, we do not sell or share your personal information, so this right is not applicable.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information. We collect date of birth, which may be considered sensitive; it is used solely for age verification and is not used for any other purpose.

To exercise these rights, contact us at [email protected]. We will verify your identity before processing any request and will respond within 45 days as required by law.

14. Automated Decision-Making

Manifestory uses automated systems, including artificial intelligence, to make certain decisions that affect your experience:

• Content Filtering: Our AI systems automatically evaluate manifestation statements and may reject those that express harmful intent (e.g., intentions to harm yourself or others, illegal activities, manipulation of others). This is done to maintain a safe environment for all users.
• Content Generation: AI is used to generate personalized content for you, including your synthesized manifestation statement, daily actions, coaching summaries, and affirmations. These are generated based on the information you provide.
• Theme Categorization: AI automatically assigns theme tags (e.g., abundance, love, health, career) to your manifestation based on its content. These themes are used to personalize your experience.

No automated decisions are made regarding your account standing, subscription, or access to the App based solely on automated processing. If you believe an automated decision was made in error (for example, if your manifestation statement was incorrectly rejected), you may contact us at [email protected] to request a review.

This Privacy Policy is effective as of March 15, 2026.