Privacy Policy

🌟 Who We Are

METATENSOR PTY LTD ("Metatensor", "we", "us", or "our") creates digital wellness applications, including the Mani manifestation companion and GENS – Generation Simulator. We are incorporated in Australia and operate globally. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our mobile applications, websites, and related services (collectively, the "Services").

If you do not agree with this policy, please do not access or use the Services.

📋 Scope

• Mani: AI Manifestation Journal: A manifestation companion that provides guided practices, AI-powered mentoring, affirmations, journaling, and subscription features.
• GENS – Generation Simulator: A companion application currently offering offline simulations without storing personal data in our systems.

This policy covers both apps as well as future experiences released under the Metatensor account. Service-specific differences are noted where relevant.

📊 Information We Collect

1. Account & Authentication Data

• Identifier created by Supabase (UUID)
• Email address and name when provided via Google or Apple Sign-In
• OAuth metadata confirming the authentication provider you used
• Time zone, language, and notification preferences saved to your profile
• Guest accounts are supported; in that case we generate only an internal identifier

Why: To let you sign in, sync progress, personalize reminders, and secure your account.

2. Subscription & Commerce Data (Mani)

• Entitlement status, product identifiers, receipt signatures, and billing region supplied by Apple App Store or Google Play via RevenueCat
• Transaction history we need to validate premium access

Why: To manage trials, paid tiers (Plus and Premium), refunds, and customer support.

3. User-Generated Content (Mani)

Stored securely in our Supabase-hosted database so the content can sync across your devices:

• Manifestation entries ("Manis") including titles, descriptions, goal duration, status, and progress logs
• Daily check-ins, notes, and journaling entries that you elect to save
• Saved inspirations, success stories, and affirmation selections
• Chat messages exchanged with Mani's AI mentor and AI-generated replies

4. Communications

• Support tickets, bug reports, or feedback you send to sup@metatensor.net
• Metadata such as request time, device type, and language when you interact with our in-app help surfaces

5. Usage & Device Information

We do not collect usage analytics or device tracking data through third-party SDKs. We may derive aggregate metrics (e.g., daily or monthly active users, onboarding completion rates) from the activity data already stored in Supabase so we can maintain and improve the service.

6. Local Device Storage

We store limited settings on your device using Expo's secure key-value storage:

• Onboarding completion flags, guide progress, and dismissed recommendations
• Cached data needed for offline functionality (e.g., manis last viewed)

You can clear this storage by signing out and uninstalling the app.

7. Optional Permissions & Sensors

• Notifications: If you grant notification permission, we store your Expo push token and schedule reminders on your device
• Microphone (Android) and audio playback: Required by the Expo Audio module to play soundscapes. We do not record or transmit audio unless we introduce an explicit voice feature in the future, in which case we will update this policy first
• Media library (Android): Requested by the framework for future personalization features. We do not read or upload your media today

8. Information Collected Automatically by Third Parties

• Apple, Google, and your mobile carrier process device logs to deliver the app and push notifications
• Payment processors handle your billing address and payment instrument. We do not receive or store full payment card details

🔧 How We Use Your Information

• Provide, personalize, and maintain the Services, including syncing your manifestations, streaks, journals, and chat history across devices
• Deliver AI-powered mentoring. When you ask Mani's AI for guidance, we send relevant context (your latest messages, current Mani goal, streak metadata, and saved inspirations) to OpenAI's API for processing. We strip sensitive fields not needed for the response when possible
• Process purchases, manage trials, and deliver premium features
• Communicate with you about updates, new features, surveys, and support requests
• Monitor and improve the Services, diagnose outages, and keep the app secure
• Protect against fraud, abuse, or violations of our Terms of Service
• Comply with legal obligations and enforce our agreements

⚖️ Legal Bases for Processing (EEA, UK, Switzerland)

Where GDPR or similar laws apply, we rely on the following legal bases:

• Contract: Providing the Services you requested, such as syncing content and fulfilling purchases
• Consent: Sending optional communications, enabling device permissions (such as notifications or microphone access), or processing information you explicitly ask us to handle. You may withdraw consent at any time
• Legitimate Interests: Securing our systems, preventing fraud, and responding to support inquiries, provided these interests are not overridden by your rights
• Legal Obligation: Meeting regulatory, tax, and accounting requirements

🤝 How We Share Information

• Supabase: Cloud database and authentication provider used to store your account, content, and real-time updates. Supabase leverages data centers in the United States. Access is restricted to authorized team members
• OpenAI: Processes the content of conversations with Mani's AI mentor. OpenAI acts as our processor under their API terms; we do not allow them to use data from Mani to train their public models
• RevenueCat: Subscription infrastructure that verifies App Store / Google Play receipts and entitlements
• Apple and Google OAuth: Authentication providers that supply account information if you sign in with their services
• Customer support and productivity tools (e.g., email, incident response platforms) where necessary to address issues you report
• Legal and compliance: Authorities or advisors if we believe disclosure is required by law, to protect your safety, or to safeguard Metatensor's rights
• Corporate transactions: Successors or affiliates if we undergo a merger, acquisition, or restructuring, subject to this Privacy Policy

Each service provider is bound by contractual obligations to protect your information and use it only to perform services on our behalf.

🌍 International Data Transfers

Our primary infrastructure (Supabase, OpenAI, RevenueCat) may process data in the United States and other jurisdictions outside your home country. We do not use third-party analytics services. When we transfer personal data internationally, we rely on adequacy decisions, Standard Contractual Clauses, or other safeguards permitted by law. You may contact us for a copy of relevant transfer mechanisms.

📅 Data Retention

• Active accounts: We retain your data while your account is active so we can provide the Services
• Account deletion: You can request deletion from the in-app settings. We queue the account for deletion after a 30-day cooling-off window; during that period you can cancel the request. Once deletion is finalized, associated manifestations, journals, inspirations, and chat logs are removed or anonymized
• Legal obligations: We may retain limited transactional records (e.g., subscription receipts) to meet tax, audit, or legal requirements
• GENS: Currently operates without server-side accounts; no personal data is retained once you close the app

✅ Your Choices and Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, object to certain processing, or withdraw consent. We provide the following controls:

• Update profile: Edit your display name, timezone, and notification preferences directly in the app
• Download or delete data: Contact us at sup@metatensor.net to request a copy of your data or ask for manual deletion sooner than the automated 30-day window
• Opt out of marketing: Use the unsubscribe link in emails or email us directly
• Device controls: Manage notification and microphone permissions through your device settings

If we cannot fulfill a request, we will explain why. You may appeal or contact your local supervisory authority if you believe your rights are not being respected.

👶 Children's Privacy

Mani and GENS are designed for individuals 13 years and older. We do not knowingly collect personal information from children under 13 (or under 16 in the European Economic Area) without verifiable parental consent. If you believe a child has provided us with personal data, contact us immediately and we will delete it.

🔒 Security

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the data we store, including:

• Role-based access controls and audit logging in Supabase
• Encryption in transit via HTTPS for all network traffic
• Minimal logging limited to operational needs; we do not include third-party analytics SDKs
• Continuous monitoring and automated alerts for suspicious activity

📝 Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the new version in the app and update the "Last updated" date. For material changes we will provide additional notice, such as an in-app alert or email. Continued use of the Services after the notice means you accept the updated policy.

💬 Contact Us

Questions or requests about this Privacy Policy can be sent to: