Legal

Privacy policy

Last updated: 5 November 2026

This policy explains how the Mantra app and mantraquit.com handle your information. Questions: support@mantraquit.com.

The short version

By default, what you enter in Mantra stays on your phone. Information leaves your device only when you use a feature that needs it: an account, the community, a support buddy or a subscription. We do not sell your information, show ads or use analytics or tracking tools in the app.

What we collect, at a glance

Habits, logs, plan, journalWhere: only on your device. Used for: counters, reports and the coach. Shared with: nobody.
Sleep and stepsWhere: only on your device, if you turn it on. Used for: reports and the coach. Shared with: nobody.
Email, phone number or Apple/Google sign-inWhere: Firebase, if you create an account. Used for: signing in. Shared with: Google, as our provider.
Nickname, posts, replies, block list, reportsWhere: Firebase, if you join the community. Used for: running the community and keeping it safe. Shared with: other members see your nickname and posts.
Clean-day start date, today’s pledge, “I’m struggling” alertsWhere: Firebase, if you pair with a support buddy. Used for: the buddy feature. Shared with: your buddy only.
Anonymous ID and purchase statusWhere: RevenueCat, Apple or Google, if you subscribe. Used for: unlocking Premium. Shared with: these payment providers.
Precise location, contacts, photos, advertising IDWe do not collect these.

Stored only on your device

  • Habits, logs, check-ins, pledges, plans and assessment answers.
  • Journal entries, including text, voice and video notes.
  • Coach conversations, which are held in memory and cleared when you close the app.
  • Your app passcode, stored only as a one-way hash.

This data is encrypted on your device with AES-256. It is not uploaded to our servers, and we cannot read or recover it. If you lose your device or delete the app, it is gone unless you exported it first.

Health data

If you turn this on, Mantra reads sleep and step data from Apple Health or Health Connect, and can write completed breathing exercises to Apple Health as mindful minutes. Health data is used only on your device. It is never sent to us or anyone else, and never used for advertising.

Website blocking

On iPhone, blocking uses Apple’s Screen Time framework. On Android, it uses a local VPN connection that filters website addresses on your device. Addresses are not logged or sent to us. Other requests go to your device’s own DNS server.

Information that leaves your device

  • Account (optional). Your email address, phone number, or Apple or Google sign-in identifier, used to sign you in.
  • Community (optional). Your nickname, posts, replies, the category you choose, supports you give, your block list and any reports you submit. Posts are visible to other members under your nickname. Please don’t share details that could identify you.
  • Support buddy (optional). An invite code, your clean-day start date, today’s pledge status, “I’m struggling” alerts and preset nudges, shared with the person you pair with. Your logs, notes and habit names are not shared.
  • Coach reply reports. If you report a coach reply, the text of that reply is sent to us. Your messages and logs are not.
  • Subscriptions. Apple or Google processes your payment. RevenueCat tells the app whether your subscription is active, using an anonymous identifier and purchase records. We never receive your card details.

The AI coach

The default coach runs on your device. An optional online coach is off by default and is not connected in the current version. If it is offered in future, it will work only with your consent, and only your message and summary numbers would be sent. Your notes, habit names and contact details would not.

Service providers

We use Google Firebase (Authentication and Cloud Firestore) to run accounts, the community and support buddy pairing, and RevenueCat to manage subscriptions. These providers process data on our behalf and may store it outside your country, under appropriate safeguards.

Why we process this information

We process account, community and buddy data to provide the features you ask for, subscription data to fulfil our contract with you, and reports to keep the community safe. Health data is processed only with your explicit consent, which you can withdraw at any time in Settings.

How long we keep it

We keep account and community data until you delete it or delete your account. Reports may be kept for as long as needed to review them and protect the community. Purchase records are kept as required by law.

Your rights

Depending on where you live, including under the GDPR and Türkiye’s KVKK, you can ask to access, correct, delete or export your information, object to or restrict its processing, and withdraw consent. You can also complain to your local data protection authority. Export your device data in Settings, and see Delete account for deletion. For anything else, email us.

Age

Mantra is not intended for anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

This website

mantraquit.com uses no cookies, analytics or third-party requests. Your language choice is saved in your own browser. Our hosting provider may keep standard server logs for security.

Changes

If this policy changes, we will update the date above and, for important changes, tell you in the app.