Effective 4 September 2026, last updated 29 September 2026. This policy covers the website www.manifestlings.com and the manifestlings app (iPhone first, Android later). When this policy changes, the date above changes with it.
The website
No cookies, no advertising. The site does not set cookies and does not load any advertising script.
Anonymous visit statistics. To learn which guides help people and where a page is confusing, the site uses Microsoft Clarity in cookieless mode. It records how pages are used: the page you came from, scrolling, clicks and taps, device type and approximate country, and it can replay a visit as an anonymised recording. Text typed into fields is masked and never sent. Clarity does not set cookies on this site, and we do not use it to identify you or for advertising. Microsoft's handling of this data is described in the Microsoft Privacy Statement. A content blocker stops it without affecting the site.
Hosting logs. The site is served by Vercel. Like every web host, Vercel may record standard request data (IP address, browser type, requested page, time) in short-lived server logs used for security and operations. We do not use these logs to identify visitors.
The wish jar. Words you type into the jar on the home page stay in your browser tab. They are not sent to us or to anyone else, and they disappear when you leave the page.
Sound preference. If you turn sound on or off, that one setting is kept in your browser's local storage so the page remembers it. Nothing else is stored.
The app
You sign in once. To use manifestlings you sign in with Apple, with Google, or with an email address and a password. The account is what keeps your dreamling, your jar and your letters safe when you change or lose your phone, and it is what your free days and any subscription are attached to.
On your phone. Your dreamling, its needs, your coins and XP, your intentions, your gratitudes, your album, your letters and your meditation progress are stored on the phone, so the app works without a connection. Deleting the app deletes that copy.
On our servers, a copy is kept for you, and only for you. The same things are also stored on our servers (Supabase, on servers in the United States), so they come back when you sign in on another phone. Every row is tied to your account and protected at the database level: a request carrying anyone else's sign-in cannot read your rows, and the app never tells the server whose data it is; the server decides that from your sign-in.
Letters to the future are sealed on the server too. When you write a letter and choose a date, the text is stored apart from the letter itself, and the database refuses to hand it over before that date, to the app, and to your own account. The seal is not a drawing on a screen: it is a rule the server enforces.
What we would ask for. Your name, so the app can greet you. Your email address, which is how you sign in and how we can answer you. The day and month of your birthday, if you give it, so the app can throw you a party, and the year only if you choose to add it, which nothing in the app requires and nothing displays. We never ask for your address, your phone number or a photo of you.
Signing in with Apple or Google. If you choose one of those, that provider tells us that the sign-in is valid and gives us an identifier and, unless you hide it, your email address. We do not receive your password, and we do not get access to anything else in your Apple or Google account.
We do not read what you write, and it never trains anything. Your intentions, gratitudes, memories and letters are not read by us, not used to build anything, and not given to any AI model, ours or anyone else's.
Deleting your account. In the app, open You, then Account and privacy, and choose Delete your account. That deletes the account and everything attached to it from our servers. You can also write to us at the address at the foot of this page and we will do it for you. Removing the app from your phone erases the copy on the phone. Deleting the account does not cancel a subscription; that is done in your App Store settings.
Emails we send. If you sign up with an email address, we send you a message to confirm it, and one to reset your password if you ask. These are sent through Resend, an email delivery service, which receives your address for that purpose only.
No tracking, no ads. The app does not contain advertising and does not include analytics or advertising SDKs. It does not track you across other apps or websites.
Crash reports. When the app crashes or hits an error, it sends a crash report to Firebase Crashlytics, a Google service, so we can find and fix the problem. A report contains technical details only: the phone model, the system version, the app version, a random identifier for this installation, and where in the code the error happened. It does not contain your name, your email or anything you write. Google Analytics is turned off. Crash reports are kept by Google for 90 days.
The guided audio. The meditations, affirmations and sounds are not bundled inside the app; they are fetched from our storage (Cloudflare R2) when you press play, and kept on the phone if you choose to download one for offline use. Like any request on the internet, that tells the host your IP address and which file you asked for. We do not use those requests to identify you, we do not tie them to anything else, and nothing about what you have written travels with them. Everything else in the app works with no network at all.
The words you write before a run. The short phrases you type before a run become the items of the level and the lines your dreamling says back to you. They are kept in your account with the rest of your jar.
Time and locale. The app reads your device clock to make your dreamling's needs fall over real time, and your device time zone to tell morning, afternoon and night apart for the 3·6·9 ritual. Neither is sent anywhere.
Purchases. Any purchase is handled entirely by Apple; we never see your card details. To know whether your subscription is active, we use RevenueCat, which receives an identifier for your account and the purchase confirmation from the store, and nothing about what you write.
Children
The app and the website are not directed at children under 13, and we do not knowingly collect information from them. The app never asks for an address, a phone number or a photo.
Your rights
To get a copy of what your account holds, write to us and we will send it. To delete the account and everything in it, use Delete your account in the app, or write to us and we will do it. If you live in a region with specific data-protection rights (for example the EU, the UK, California or Brazil), those rights apply and we will honour them on request.
Contact
Questions about this policy: manifestlings@gmail.com. See also the terms of use.