Privacy Policy

1. Scope

This Privacy Policy explains how Manai ("we", "our", or "us") collects, uses, and shares information when you use our mobile app, website, and related services (collectively, the "Service").

2. Data We Collect

• Account data: email address, authentication identifiers, account status, and basic profile details.
• User-provided content: messages, prompts, journal-style inputs, personalization details, saved content, and feedback you choose to submit.
• Preference data: selected voice, pacing, ambience, reminder preferences, and other feature settings.
• Usage and diagnostics: device type, app version, interaction events, crash/performance data, and abuse-prevention signals.
• Advertising attribution and analytics data: limited app event metadata, campaign attribution signals, subscription funnel events, and device or app identifiers available to platform SDKs, subject to device settings and platform controls.
• Billing and subscription data: plan, renewal status, and payment metadata supplied by our payment processors or platform partners.
• Safety and legal records: policy acceptance version, consent scope, timestamp, and source metadata.
• Connected AI client data: task-specific tool inputs, authorization grants, content identifiers and versions, and the results returned for actions you request through a compatible AI client.

3. How We Use Data

• Deliver, personalize, and maintain the Service.
• Generate requested wellness content, recommendations, and audio outputs.
• Operate subscriptions, fraud controls, and abuse prevention safeguards.
• Meet legal obligations and enforce our terms and safety policies.
• Improve reliability, quality, and user experience.
• Measure app installs, onboarding, paywall, subscription, playback, and sharing events so we can understand campaign performance and improve the Service.

4. Legal Bases (Where Applicable)

Depending on jurisdiction, we process data based on contract performance, legitimate interests, consent (where required), and legal obligations.

5. Sharing and Processors

We do not sell personal data for money. We share data with infrastructure, analytics, payment, advertising attribution, AI, and voice vendors as needed to operate, measure, market, and improve the Service, and with authorities when legally required.

When you use personalization, chat, content generation, or audio features, the information you choose to provide in the app and the settings required to fulfill your request may be processed by third-party service providers acting on our behalf. We require these providers to protect data using safeguards that are the same as or comparable to our own contractual and operational standards.

For advertising attribution and analytics, we may share limited event metadata with measurement providers so we can understand whether marketing campaigns led to app installs, onboarding progress, paywall activity, trial starts, subscription starts, playback, or sharing. Manai does not send raw prompts, meditation text, journal-style inputs, Vision Board statements, names, email addresses, mental-health labels, or content identifiers to advertising platforms.

• Google Firebase (auth, storage, database, notifications, analytics)
• TikTok Business / TikTok App Events SDK (advertising attribution, campaign measurement, and app event reporting)
• Meta App Events (advertising attribution, campaign measurement, and app event reporting)
• Apple App Store / StoreKit (subscription processing, trial status, and purchase validation)
• Stripe (subscription and payment operations)
• Cloudflare (public agent connection, authorization, request routing, and security)
• Vercel (website and Manai Web hosting)
• Google Gemini (Manai in-app chat and text generation services; the connected-client harness does not send a host-authored plugin script to Gemini for replacement generation)
• OpenAI (voice and audio services when you select an OpenAI voice, and processing by an OpenAI client when you connect one)
• Inworld (voice and audio services)

6. Connected AI Clients

You may connect ChatGPT, Claude, Codex, or another compatible AI client to your Manai account through Manai's authorization flow. Manai receives only the task-specific tool inputs that the connected client sends for an action you request; Manai does not receive your complete chat history. Depending on the tool, those inputs may include a short intent or prompt, a script you want saved or edited, a Manai content ID and version, voice or ambience preferences, the requested text or audio deliverable, and a production action.

Manai may return the minimum information needed to complete the action, including a private script when you ask to read it, content and production status, voice or ambience options, subscription tier and allowance state, and an authenticated Manai owner link. Manai does not return Manai passwords, authorization tokens, or internal account identifiers in tool results.

Saved scripts and generated narration remain access-controlled in Manai. Generated narration is stored in the account owner's private storage area, and Manai issues a short-lived playback link only after confirming that the requesting account owns the content or has an active share grant. Connecting an AI client does not publish a script or audio file to the public internet.

The provider of your selected AI client—such as OpenAI or Anthropic—processes the surrounding conversation and the tool inputs and results under that provider's own terms and privacy policy. You can revoke a connected client's future Manai access in Manai Web under Account settings → Connected agents. Revocation does not delete information already retained by the connected provider; use that provider's controls for its copy.

7. Advertising Attribution Choices

Manai does not request App Tracking Transparency permission in the current version. Advertising attribution may still use privacy-limited SDK signals, Apple's SKAdNetwork reporting where available, and our own internal analytics events. You can manage system-level tracking and advertising settings in iOS Settings and can contact us with privacy questions or deletion requests.

8. In-App Agreement and Consent

Before first use of core AI-powered creation features, users are asked to review and accept the current Terms and Conditions, Privacy Policy, and Safety and Liability Notice in the app. The in-app flow also explains that trusted third-party providers may process the information needed to deliver the feature requested.

9. Retention

• Connected-client authorization handoffs expire within 10 minutes. Idempotency records used to prevent duplicate writes or audio jobs are deleted after 24 hours.
• Connected-client access tokens expire within 1 hour. Refresh tokens and dynamic client registrations expire within 30 days unless revoked sooner.
• Account data, saved content and audio, preferences, and subscription status are retained while your account or the relevant saved item remains active. A completed in-app account deletion removes mapped account data and files from active systems immediately.
• Encrypted disaster-recovery backups can retain residual copies for up to 60 days before automatic expiration. Backup copies are isolated from ordinary product access and are used only for recovery.
• Raw Manai behavior events expire after 90 days, and recommendation-outcome events expire after 180 days. Advertising and analytics event metadata may be retained for up to 14 months. Aggregated or de-identified statistics that no longer identify a user may be retained longer.
• Security and service logs are retained for up to 30 days unless a longer period is necessary to investigate abuse or a security incident. Support correspondence may be retained for up to 3 years after closure. Legal acceptance, transaction, tax, refund, and dispute records may be retained for up to 7 years where required for compliance.

10. Security

We use administrative, technical, and organizational controls to protect data. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

11. Your Rights and Choices

• Access and update account/profile information.
• Request deletion of account data, subject to legal exceptions.
• Request a copy/export of available personal data.
• Opt out of optional notifications and communications.
• Revoke a connected AI client's future Manai access from Manai Web.

12. Children

The Service is intended for users 16 years of age or older.

13. Policy Changes and Re-Acceptance

We may revise this policy. Material changes are posted on this page and may require renewed acceptance before continued use. See the Legal Hub for the current policy bundle.

14. Contact

Privacy questions and requests can be sent to support@manaiapp.com.

15. Related Policies

Review our Terms and Conditions and Safety and Liability Notice.