Privacy Policy

1. Who we are

Manifest ("we," "us," "our") operates the Manifest app and website at manifest-app.org. This policy explains what information we collect when you use Manifest, how we use it, and what rights you have. If something here isn't clear, reach out. We're happy to explain.

2. What we collect

Information you give us

• Account details: your name, email, phone number, and password when you sign up.
• Profile information: anything you add to your profile, like a photo or bio.
• Content you create: goals, milestones, updates, notes, and messages you share inside your circles.
• Contacts you add: the people you invite or connect with inside the app.
• Support requests: emails and messages you send us.

Information we collect automatically

• Device and app data: device type, OS version, app version, crash reports, and basic diagnostics.
• Usage data: which features you use and how often, so we can improve the product.
• Log data: IP address, timestamps, and referring pages for security and troubleshooting.
• SMS delivery metadata: when we send a text message for phone verification, 2FA, or an invite you initiate, our messaging provider records delivery information (timestamps, delivery status, carrier). We do not store the message content. See our Terms of Service for how SMS works at Manifest.
• Website analytics: we use Google Analytics 4 on this marketing site to understand how visitors find and use our pages. Google may set cookies and process aggregated, anonymized data on our behalf. IP addresses are anonymized by default. You can opt out via the Google Analytics Opt-out Browser Add-on or by enabling "Do Not Track" in your browser.

What we don't collect

We don't track you across other apps or websites. We don't buy data about you from data brokers. We don't scan your content for advertising purposes. We don't run ads, period.

3. How we use it

We use the information we collect to:

• Run the app: sign you in, sync your content, deliver notifications.
• Keep Manifest safe: detect abuse, prevent fraud, enforce our Terms.
• Improve the product: fix bugs, understand what features help people, prioritize what to build next.
• Communicate with you: respond to support questions and send important account or service updates.

We do not use your content to train advertising models, and we do not sell your personal information.

4. Who we share it with

The short answer: almost no one. Specifically:

• People you choose. Your goals and updates are visible only to the circles and individuals you explicitly share them with.
• Service providers. We work with a small number of vendors who help us run Manifest: hosting, analytics, crash reporting, email delivery, and SMS delivery (Twilio). They only get what they need to do their job, and they're bound to protect it.
• Legal requirements. If we receive a valid legal request, we may share information to comply, but we review each request and push back when appropriate.
• No business transfers. Manifest is structured as a Public Benefit Corporation specifically so the company isn't built to be sold. We don't plan to merge, be acquired, or transfer your data through any corporate transaction. See our Doctrine for the full commitment.

All the above categories exclude text messaging originator opt-in data and consent; this information won't be shared with any third parties.

5. Your choices and rights

You have control over your data on Manifest. You can:

• Access and export your data anytime from your account settings.
• Correct or update your profile information.
• Delete your account. We'll remove your personal data from our systems (see retention below).
• Opt out of non-essential communications anytime via the unsubscribe link in emails or your notification settings.

If you're in the EU, UK, California, or another region with specific privacy laws, you have additional rights (like the right to object to processing or request a copy of your data). Email privacy@manifest-app.org and we'll help.

6. How long we keep it

We keep your personal information as long as your account is active. When you delete your account, we remove your personal data within 30 days, except where we're legally required to keep it (for example, basic transactional records). Anonymized and aggregated data, which can't identify you, may be retained for analytics and product improvement.

Invitee phone numbers. If you invite someone to Manifest by phone number and they don't join within 30 days, we delete their phone number from our invite records.

7. Security

We take security seriously. Data is encrypted in transit (TLS) and at rest. We use modern authentication and access controls, and we limit internal access to personal data strictly to what's necessary. No system is perfectly secure, but we work hard to protect yours.

8. Children

Manifest is not intended for children under 13 (or under 16 in some regions). We don't knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we'll remove it.

9. Changes to this policy

We may update this policy as Manifest evolves. If changes are significant, we'll notify you by email or in the app before they take effect. The date at the top of this page always reflects the most recent update.

10. Contact us

Questions about this policy or your data? Reach us at privacy@manifest-app.org or through our contact page. We read every message.