Privacy Policy
Privacy Policy
Manna keeps saved prayers and reflections on your device by default. Account sync and sharing use cloud services. Technical information processed for service delivery and SDK operation is described below.
Clarifies social sign-in through Supabase Auth, supplied profile information, and account deletion, and describes Android QR scanner SDK diagnostics and usage analytics and processing by the device text-to-speech service.
1. Data and purposes
- Account: Supabase Auth user ID; email, name, and profile image when supplied by your social sign-in provider under your consent and account settings; and authentication records for sign-in and security.
- Sync: settings, completed Bible chapters, prayer titles, text, dates, audio, and reflections for storage and continuity.
- Sharing: prayer content and recordings you select, share identifiers, and revocation state for unlisted links.
- Worship rooms: host and participant identifiers, worship plans, playback position and state, and invitation information for live synchronization.
- Android QR scanner: Google code scanner SDK collects device and app information, device and per-installation identifiers, performance metrics, API configuration, input/output sizes, feature versions, feature events, and error codes for diagnostics and usage analytics. Auto-zoom also collects a scanning-session identifier, zoom levels, and predicted barcode boundary coordinates.
- Technical: IP address, device or operating-system information, requests, errors, and security records for delivery, reliability, and security.
Registration and sign-in use only the Apple, Google, or Kakao options offered in the app. We do not offer email/password registration or sign-in, email authentication codes, or magic links. Depending on the provider, an email address, name, or profile image may be absent. You can use an account without an email address.
Signed-out records may remain only in private app storage. We do not sell personal data or provide behavioral advertising.
2. Recording and device permissions
Prayer is not recorded by default. Audio is captured only after you choose recording and grant microphone permission. Android QR invitations use Google Play services' code scanner. Images are processed on the device; Google states that it does not store scan results or image data. Manna does not retain scanner camera images. This is separate from the SDK diagnostics and usage analytics described above. See Google's SDK data disclosure.
Android worship narration sends the text to be read to the device's configured text-to-speech service. The selected engine and voice may use online processing; data handling depends on the provider and device settings. This is separate from Android prayer transcription, which uses on-device speech recognition.
3. Retention
- Account and synchronized data: until account deletion is completed.
- Shared prayer: until sharing is revoked or the related data or account is deleted.
- Worship plan and state: up to 12 hours after room creation, after which the room is unavailable and eligible for cleanup.
- Local data: until you delete records, sign out where applicable, clear app storage, or uninstall.
- Security records: for the period required by the service provider's security policy or applicable law.
4. Service providers and international processing
- Supabase, Inc.: account authentication, database, and storage processing. Primary project data is hosted in the AWS Seoul region.
- Cloudflare, Inc.: delivery and security for policy pages and share links through its global network.
- Google LLC / Apple Inc. / Kakao Corp.: sign-in, app distribution, operating-system services, platform features, and diagnostics and usage analytics for Google code scanner SDK.
Data is transmitted over encrypted connections. You may use supported local features without an account, but account-based sharing and live worship will be unavailable.
5. User-directed sharing
Anyone with an exact prayer share link can access the selected prayer and recording until you revoke it. People invited to a worship room receive the plan and current playback state. We do not otherwise sell personal data.
6. Your rights and deletion
You may request access, correction, deletion, restriction, or withdrawal of consent. Use the app's account screen or the web deletion instructions. After identity verification, we ordinarily respond within 30 days.
7. Children
Account registration is intended for people aged 14 or older. Until a parental-consent process is available, children under 14 must not register. Local, signed-out features may be used under a guardian's supervision.
8. Security
We use encrypted transport, credential storage protected with iOS Keychain and Android Keystore, database row-level access controls, user-scoped storage paths, backup exclusions for private app storage, protected share tokens, and expiring worship rooms.
9. Contact
Operator and privacy contact: Junhyeon Lim
Email: cloud@agreeon.ai
10. Changes
We will post the effective date and material changes in the app or on this site. The Korean version is the primary version if translations differ.