Legal

Privacy Policy

Last updated 9 July 2026

The short version

Mangala is local-first. Your practice record lives on your own device and works fully offline. You don't need an account to use the app. If you choose to sign in, your record syncs across your devices — and that's the only reason we hold any of it. We show no ads, run no third-party advertising trackers, and never sell your data.

Using Mangala without an account

By default, your marks, reflections, and photos are stored only on your device. We don't collect them, we can't see them, and nothing leaves your phone. In this mode the app does not require any personal information from you at all.

Signing in (optional)

If you want your practice to sync across devices and to claim a profile, you can sign in with Sign in with Apple or Google. When you do, the provider gives us a stable account identifier and, depending on your choices, your name and email address. We use these only to create and secure your account. We never receive your Apple or Google password.

When you choose a profile, you also pick a unique @username and optional display name and avatar. These form a profile that may be visible to other Mangala members.

What we store when you're signed in

To keep your record in sync, we store the data you create — your daily marks, reflections, and the photos you attach — together with your account identifier and profile details. Sync is two-way: changes you make on one device are saved to your account so they appear on your others.

Photos

Photos you add to a reflection are stored on your device. The app only reads your photo library when you pick an image to attach. If you're signed in, attached photos are uploaded to your account so they sync to your other devices; if you're not signed in, they never leave your phone.

How your data is handled

Your synced data is sent over an encrypted connection and stored on managed infrastructure we operate through Supabase. Access is restricted to your own account through row-level security, so other members cannot read your private practice record.

Service providers

We rely on a small number of providers to run the app. They process data only on our instructions:

· Apple and Google — sign-in and identity.
· Supabase — authentication, database, and photo storage for synced accounts.
· Apple App Store and Google Play — app distribution; they may collect their own download and purchase data under their privacy policies.

What we don't do

No streaks, no ads, no third-party advertising or analytics trackers that follow you around. We don't sell or rent your data, and we don't use your practice record or photos to build advertising profiles.

Your control

You can delete any mark, reflection, or photo at any time. Deleting the app removes your local practice record from the device. If you have an account, you can ask us to delete it and the synced data we hold for it by writing to the address below; deletion is permanent.

Children

Mangala is not directed to children and is intended for users aged 13 and over (or the minimum age required in your country). We don't knowingly collect data from children under that age.

International use

Mangala may be used from anywhere, which means your synced data may be processed on servers located outside your country. We take care to use providers that handle data securely.

Changes

We may update this policy as the app evolves. Material changes will be noted here with a new "last updated" date.

Contact

Questions about your privacy, or want your account deleted? Reach us at freealert@icloud.com.