Privacy Policy

Last updated: February 25, 2026

This Privacy Policy describes what information we collect, why we collect it, and the choices and rights available to you. It is written for users across North America and Europe, including GDPR and US state privacy frameworks.

1. Scope

This Privacy Policy explains how Manifestation Flow ("Company", "we", "us", or "our") collects, uses, discloses, and protects personal data when you use our application and related services (the "Service"). It applies to users in the United States, EEA, UK, and other supported regions.

2. Information We Collect

• Account information: email address, user ID, login provider, and account preferences.
• User-generated content: goals, journal records, affirmations, action logs, and uploaded media you choose to submit.
• Technical and device data: app version, device model, operating system, language, timezone, and diagnostic events.
• Subscription and transaction metadata: plan type, purchase status, renewal dates, and receipt validation identifiers from platform stores.
• Support data: messages, screenshots, and attachments you send when contacting support.

3. Sensitive Data and Health Context

The Service is designed for self-development and wellness routines. We do not intentionally collect special-category health data unless you voluntarily include it in user-generated content. Please avoid sharing sensitive medical, biometric, or government identification data unless strictly necessary.

4. How We Collect Data

• Directly from you when you register, subscribe, or create content.
• Automatically through SDKs, logs, and diagnostics while you use the Service.
• From trusted third parties such as authentication, payment, and app distribution platforms.

5. Why We Use Data

• Provide and maintain core app functionality, authentication, cloud sync, and account security.
• Process purchases and manage subscriptions.
• Personalize your in-app experience and improve product quality.
• Respond to support requests and communicate important service notices.
• Detect abuse, fraud, policy violations, and reliability incidents.
• Comply with legal obligations and enforce our Terms.

6. Legal Bases (EEA/UK Users)

• Performance of a contract: to deliver the Service you request.
• Legitimate interests: to secure, analyze, and improve the Service.
• Consent: where required for optional analytics or marketing.
• Legal obligation: when required by law, regulators, or lawful requests.

7. How We Share Information

• Service providers for hosting, analytics, customer support, and infrastructure operations.
• Payment and app marketplace providers for purchases and subscription verification.
• Professional advisors, auditors, and legal authorities when required for compliance or rights protection.
• Business transfers, such as mergers or restructuring, with protections for your data.

8. International Data Transfers

Your data may be processed in countries outside your residence. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent transfer tools.

9. Data Retention

We keep personal data only as long as necessary for the purposes described in this Policy, including legal, tax, accounting, and dispute-resolution requirements. When no longer required, data is deleted or irreversibly anonymized.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal data, including access controls, encrypted transport, and secure infrastructure practices. No method of transmission or storage is completely secure.

11. Your Privacy Rights

• EEA/UK: GDPR and UK GDPR rights, including withdrawal of consent where applicable.
• US states: rights to know, access, deletion, correction, and in some states opt-out rights for certain data sharing.
• You can submit privacy requests via email. We may need to verify your identity before fulfilling requests.

12. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we learn that a child under 13 has provided personal data without valid consent, we will take steps to delete it.

13. Cookies, SDKs, and Similar Technologies

We and our partners may use SDKs, local storage, and similar technologies to keep you signed in, remember preferences, analyze usage, and improve reliability. Where legally required, we request consent before enabling non-essential tracking technologies.

14. Account Deletion

You may request deletion of your account and associated data by contacting us by email. Some information may be retained when required by law or for legitimate security and abuse-prevention purposes.

15. Changes to This Policy and Contact

We may update this Privacy Policy periodically. Material updates will be communicated through the Service or by other reasonable means.

• Controller: GuokeHcg
• Contact: guokehcg@outlook.com
• Mailing contact: guokehcg@outlook.com