Privacy Policy

Who we are

ManifestQuest is operated by TODO: legal name, TODO: address, registered with the Dutch Chamber of Commerce (KvK) under number TODO: KvK number.

We are the "controller" of the personal data described below. You can reach us at privacy@manifestquest.app.

What the app processes

Your progress, the quests you have completed and your journal reflections are stored on your iPhone. We do not have access to them.

The personal intention you write in Week 4 is encrypted using your iPhone’s secure storage and kept on your device only. It is used inside the app to personalise Weeks 5 and 6.

The app does not require an account. TODO: verify whether ANY data leaves the device. List it here if so: analytics, crash reports (including Apple’s opt-in crash sharing), in-app purchases handled by Apple, or cloud backups.

You can erase all app data at any time from the app’s Privacy screen, or by deleting the app. TODO: verify this option ships in the app.

What the website processes

Waitlist: if you join the waitlist, we store your email address and the date you signed up so we can tell you when the app launches. We use TODO: provider name (for example Loops, Buttondown, MailerLite or Formspree) to store it and send the emails. We ask you to confirm your address by email (double opt-in) where the provider supports it.

Analytics: TODO: either "The website uses no analytics." or "We use Plausible/Umami, a cookie-free analytics tool that counts visits without identifying you."

Hosting: our web host processes technical data such as your IP address in server logs to deliver the site and keep it secure. TODO: host name (for example Bluehost or Vercel) and log retention.

The website does not use advertising or tracking cookies.

Legal basis

Waitlist emails: your consent (Article 6(1)(a) GDPR). You can withdraw it anytime through the unsubscribe link in every email, or by writing to us.

Hosting logs and security: our legitimate interest in running a safe, working website (Article 6(1)(f) GDPR).

App data: stored on your device only and processed by you. We don’t receive it.

How long we keep data

Waitlist emails are kept until you unsubscribe, or until TODO: e.g. 12 months after launch, whichever comes first.

Server logs are kept for TODO: period by our host.

App data stays on your device until you erase it or delete the app.

Sharing your data

We never sell your data and we do not show ads. We share data only with the service providers named above, who process it on our behalf under a data processing agreement. If a provider stores data outside the European Economic Area, we rely on appropriate safeguards such as the EU Standard Contractual Clauses. TODO: confirm per provider.

Your rights

Under the GDPR you have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time.

To use any of these rights, email privacy@manifestquest.app. We reply within one month.

You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the authority in the EU country where you live.

Children

ManifestQuest is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has joined the waitlist, contact privacy@manifestquest.app and we’ll delete it.

Changes to this policy

If we change this policy, we will update the date at the top of this page. For significant changes we will let waitlist subscribers know by email.

Contact

Questions about privacy? Write to privacy@manifestquest.app.