Privacy Policy

ManifestOS ("we", "us") is a daily practice for the Law of Assumption. Your desires, scenes, affirmations, revisions, and evidence are deeply personal, and we treat them that way. This policy explains what we collect, why, and the control you keep over it. By using ManifestOS you agree to the practices described here.

• Account details. Your email address, optional display name, and an encrypted password, so you can reach your practice from any device.
• Your practice content. The desires, scenes, affirmations, vision boards, revisions, journal entries, and evidence you create in the app.
• Usage data. Aggregated, largely anonymized signals about which features are used, so we can improve the experience.
• Payment data. Handled entirely by Stripe. We receive your plan and status — never your full card number.

• To generate the personalized scenes, affirmations, and audio at the heart of your practice.
• To track your evidence, streaks, and progress across the tools.
• To operate your subscription and provide support at hello@manifestos.app.
• To send practice reminders and account notices you can turn off at any time.
• To keep the service secure and to meet our legal obligations.

We rely on a small set of trusted providers to run ManifestOS. Each processes only the data needed for its function, under its own security commitments:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing (PCI-DSS Level 1).
• Vercel — application hosting and content delivery.
• Kit — email delivery for reminders and account notices.
• Content-generation providers. To produce your personalized scenes, affirmations, and audio, the text and prompts you submit are processed by third-party model providers under agreements that prohibit using your content to train their public models.

• Encryption in transit and at rest.
• Row-level security so your content is accessible only to your account.
• Infrastructure hosted on enterprise-grade, continuously monitored providers.

You are always in control of your data. At any time you can:

• Access your information in your account settings.
• Correct or update your details.
• Delete your account and its associated content (this is permanent).
• Opt out of non-essential emails from your preferences.

If you are in the EU/EEA (GDPR) or California (CCPA/CPRA), you have additional rights, including data portability and the right to erasure. To exercise any of these, email us at hello@manifestos.app.

We use essential cookies to keep you signed in and remember preferences, plus privacy-respecting analytics to understand overall usage. We do not use third-party advertising cookies. You can clear or block cookies in your browser settings.

We keep your content for as long as your account is active. After you delete your account, your data is removed from our live systems within 30 days and from backups within 90 days, except where we must retain limited records to meet legal or financial obligations.

ManifestOS is intended for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy as the service evolves. For material changes we will notify you by email and update the date above before they take effect.