Privacy Policy

Account information (only if you sign in). Mandala in Bloom's core experience — a permanent free tier of 5 affirmations per theme, plus Today's Affirmation — never requires an account. Signing in is entirely optional, and is only needed to start the 7-day free trial in a way that survives reinstalls, and to sync your liked affirmations across devices. If you choose to sign in with Google or Apple (via Firebase Authentication), we receive the email address, display name, and profile photo (if available) that provider shares with us. We store your account's trial start date and your liked/saved affirmations (as plain text) in Cloud Firestore, linked to your account — nothing else about you is stored there.

Usage and diagnostic data. The app uses Firebase Analytics and Firebase Crashlytics (both Google services) to understand how it's used and to catch crashes. This includes: which tabs you open, affirmation views/likes/shares (tagged with where the share happened — the Home detail view, the Today's Affirmation card, or Saved), breathing session starts and completions, trial start, when the paywall is shown or dismissed (and what triggered it), completed purchases and restores, streak updates, and standard crash/diagnostic data such as device model and OS version. This is tied to an anonymous installation identifier, not your name — unless you're signed in, Analytics has no way to connect it to you personally.

Purchase and subscription data. Subscriptions are processed by Apple's App Store or Google Play and managed through RevenueCat, which we use to check your subscription status. We never see or store your payment card details — that stays with Apple/Google. RevenueCat receives your purchase/transaction receipt to validate and sync entitlements. If you're signed in, RevenueCat also links your subscription to your account (via your Firebase account identifier), so it's correctly recognized if you reinstall the app or sign in on a different device.

Information stored only on your device. Your streak count and any custom breathing pattern you've set up stay on your device regardless of whether you sign in. If you don't sign in at all, your liked/saved affirmations and premium/trial status stay local too. Anything stored only on your device is deleted if you uninstall the app or clear its data.

What we don't collect. We don't ask for or collect your phone number, precise location, contacts, photos, or microphone/camera access, and we never see your payment details. If you don't sign in, we also don't collect your name or email address — there's nothing account-related to collect.

We use the data above to understand which parts of the app people actually use, fix crashes and bugs, run the free-trial and subscription system, and see broad trends like paywall performance — not to build a profile of you as an individual. For anyone who signs in, we also use it to recognize your account across devices and reinstalls, so your trial, saved affirmations, and subscription follow you rather than being tied to one device. We don't run advertising and don't use any ad-tracking network.

We don't have our own servers that store personal data. The services below process data on our behalf, each for a specific purpose:

Each of these has its own privacy policy governing how it handles data on our behalf.

We don't sell or rent personal data to anyone, for any reason.

Analytics and crash data are retained according to Firebase's standard retention settings. Anything stored locally on your device (saved affirmations, streak, preferences) persists until you delete the app or clear its data yourself. If you sign in, your account data (email, name, trial start date, and liked affirmations) is retained until you delete your account — from within the app, any time — or ask us to remove it.

Mandala in Bloom isn't directed at children under 13, and we don't knowingly collect information from them.

• Delete your account any time, right in the app — open the account icon on the Saved tab, then Delete Account. This immediately and permanently deletes your account and everything tied to it (email/name on file, trial start date, liked affirmations). You can also just sign out without deleting anything.
• Manage or cancel your subscription any time through your App Store or Google Play account settings.
• Your device's OS-level privacy controls (e.g. limiting ad tracking, or app permission settings) apply as they would to any app.
• To request deletion of analytics or purchase data not covered by in-app account deletion, see our data deletion page.

Data handled by the services above is protected using their industry-standard security practices (Google/Firebase, RevenueCat, Apple, and Google Play all publish their own security standards). No method of transmission or storage is 100% secure, but we don't hold anything sensitive ourselves.

If this policy changes, we'll update the effective date above. Continuing to use the app after a change means you accept the updated policy.

Questions about this policy or your data? Reach out any time.