Privacy Policy

Last updated: October 13, 2026

This Privacy Policy applies to Manifest Ritual & Vision Board, developed and published by Sedat Ateş. The app provides personal intentions, affirmations, guided practices, journaling and vision boards.

1. Identity and content you provide

The app uses Supabase authentication, including guest sessions and Sign in with Apple. We process the account identifier and any name or email Apple provides when you choose to sign in. Content can include your preferred name, goals, motivations, categories, spiritual preferences, practice methods, daily windows, journal or scripting entries, signs, ritual completions, challenge progress and notification preferences. Goals or journal entries may reveal sensitive personal matters; include only information you are comfortable storing.

2. Cloud storage and images

Supabase provides authentication, database storage and backend functions. Manifest content and progress are associated with your user identifier. Vision Board and Future Memory images you select for uploading are stored in Supabase Storage and may also be cached on your device. These uploads are part of the selected feature; the app does not upload your entire photo library. The app uses access controls intended to restrict stored content to its owner. No service can guarantee absolute security.

3. Google Gemini and AI features

When you request creation of a personalized manifest world, the backend sends Google Gemini the selected category, goal, motivation, spiritual preferences, practice methods, daily windows and language. Gemini generates affirmations, visualizations and rituals, which are returned to the app and stored for your use. Where additional AI affirmation or explanation features are enabled, relevant manifest context, existing affirmations and the selected line may also be sent to Gemini. Vision Board photo upload is separate from these text-generation requests. Avoid entering confidential third-party information or sensitive details that are unnecessary for the requested practice. Google processes requests under the terms applicable to its AI service; we do not promise that processing is anonymous or that a provider never retains it.

4. Reminders, widgets and Live Activities

OneSignal provides push notifications and supported Live Activity updates. It processes your user identifier, push or activity tokens, device and subscription identifiers, basic device information, IP address, language, time zone, reminder-window preferences and delivery or interaction records. Reminder or affirmation text may pass through this service. Widgets and Live Activities can display personal content on the Home or Lock Screen; consider what others can see. You can change reminder preferences in the app and notification permissions in iOS Settings.

5. Optional device permissions

Where available, Manifest Lock uses Apple's Screen Time permission to restrict the apps, categories or domains you select. Selection tokens and local lock/practice state are stored in the app group used by its extensions; these selections are not part of Gemini requests. Saying an affirmation aloud uses microphone and speech-recognition permission. The supported recognition flow requires on-device processing and does not send the microphone recording to our backend or Gemini. You can revoke these permissions in iOS Settings.

6. Purchases and support

Apple processes App Store payments. RevenueCat receives an app user identifier, purchase and entitlement records and basic device/app information to check access and restore purchases; we do not receive your payment card details. If you contact support, we process your email and the information you voluntarily send. Provider policies: Supabase — https://supabase.com/privacy; Google — https://policies.google.com/privacy; OneSignal — https://onesignal.com/privacy_policy; RevenueCat — https://www.revenuecat.com/privacy/.

7. Purposes, retention and rights

We process information to provide your account and personal practices, store and retrieve content, fulfill AI requests, manage purchases and reminders, provide support and meet legal obligations. Applicable legal bases may include providing the service you request, consent where required, legitimate interests in security and support, and legal duties. Providers may process data outside your country. Account content is retained while needed to provide these functions; provider logs, backups and purchase records may follow separate retention requirements. We may disclose information when legally required or needed to address abuse or security incidents.

8. Your control and contact

You can remove supported content, revoke optional permissions and use the in-app account deletion option. Uninstalling alone does not delete cloud data or cancel a subscription. Manage subscriptions in your Apple Account settings. Depending on your jurisdiction, you may request access, correction, deletion, portability or restrictions on processing, withdraw consent or complain to a data-protection authority. The app is not specifically directed to children under 13. Contact Sedat Ateş at sedatates.dev@gmail.com for privacy requests, including child-related concerns. We will update this policy and its date when the app's practices change.