Privacy Policy

1. Overview

Manifest Mosaic (“we,” “our,” or “us”) operates the web application at manifestmosaic.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

By creating an account or using any part of our service, you agree to the practices described in this policy. If you disagree with any part of this policy, please do not use our service.

2. Information We Collect

Information you provide directly

• Account information: Your name, email address, and authentication credentials (managed securely through our authentication provider, Clerk).
• Profile data: Gender, birth year, aesthetic preferences, and clothing style preferences — used to personalize your vision board scenes.
• Face photographs: A selfie or face photo you upload, used exclusively to generate personalized vision board imagery with your likeness.
• Intentions and goals: The text you enter describing your life intentions, dreams, and aspirations.
• Journal entries: Your written or voice-to-text journal reflections, mood selections, and responses to AI-generated prompts.
• Payment information: Processed securely by Stripe. We never store your full card number, CVV, or billing address on our servers.

Information collected automatically

• Usage data: Pages visited, features used, streak activity, and session duration.
• Device information: Browser type, operating system, screen resolution, and device type.
• Analytics: We use Facebook Pixel for conversion tracking on our marketing pages. This does not track activity inside your private dashboard.

3. How We Use Your Information

We use your information exclusively to operate and improve the Manifest Mosaic experience:

• Generate personalized vision board scenes with your face composited into aspirational imagery.
• Deliver daily affirmation cards, coaching from Aura (your AI coach), and guided journaling prompts tailored to your intentions.
• Track your streaks, mood patterns, and practice consistency.
• Send transactional emails (welcome, daily cards, streak reminders, billing confirmations).
• Process payments and manage your subscription.
• Improve our AI models' ability to generate relevant, high-quality content for all users (using aggregated, anonymized data only).

We do not use your personal data for advertising. We do not sell, rent, or share your personal information with advertisers or data brokers. Ever.

4. AI & Image Processing

Manifest Mosaic uses artificial intelligence to create your experience. Here's exactly what happens with your data in our AI pipeline:

• Face photo processing: Your uploaded face photo is sent to our image generation provider (Replicate) solely to compose your likeness into vision board scenes. The photo is transmitted securely via HTTPS and is not stored by Replicate beyond the generation session.
• Intention analysis: Your written intentions are processed by our AI language model (Anthropic Claude) to expand them into vivid scene descriptions. These descriptions are used to generate images — they are not stored by Anthropic.
• AI coaching (Aura): Your journal entries and intention history are analyzed by our AI to provide personalized coaching. This context builds over time to deliver increasingly relevant guidance (Intention Intelligence). This data remains within our secure infrastructure.
• Voice transcription: If you use voice journaling, audio is processed client-side in your browser using the Web Speech API. We do not transmit or store audio recordings.

No AI provider we use retains your personal data for model training. Your face, your words, and your intentions remain yours.

5. Data Storage & Security

• Database: Your account data, intentions, journal entries, and metadata are stored on Neon (PostgreSQL), a SOC 2 compliant cloud database provider.
• Images: Generated vision board scenes, daily cards, and your face photo are stored on ImageKit, a global CDN with enterprise-grade security. Images are stored in isolated per-user folders.
• Authentication: Managed by Clerk, which provides industry-standard security including encrypted credential storage and session management.
• Payments: Processed entirely by Stripe. We never have access to your full payment details.
• Encryption: All data is encrypted in transit (TLS/HTTPS) and at rest where supported by our infrastructure providers.

6. Data Sharing

We share your data only with the service providers necessary to operate Manifest Mosaic:

• Clerk — Authentication and user management
• Stripe — Payment processing
• Replicate — AI image generation (face photo + scene prompts)
• Anthropic — AI language processing (intention expansion, journal coaching)
• ElevenLabs — AI voice generation for Aura coaching audio
• ImageKit — Image storage and CDN delivery
• Neon — Database hosting
• Resend — Transactional email delivery
• Vercel — Application hosting

Each provider is bound by their own privacy policies and data processing agreements. We select providers who meet industry security standards.

We will never sell your data. We may disclose information if required by law, such as in response to a valid court order or legal process.

7. Your Rights

You have full control over your data:

• Access: View all data associated with your account at any time through your profile and settings.
• Export: Request a full export of your data by contacting us at hello@manifestmosaic.com.
• Correction: Update your personal information, preferences, and profile data through the app settings.
• Deletion: Delete your entire account and all associated data (images, journal entries, intentions, payment history) from your account settings. Deletion is permanent and includes removal from all third-party providers where technically feasible.
• Opt-out of emails: Unsubscribe from non-essential emails at any time via the link in any email. Transactional emails (billing confirmations, security alerts) cannot be opted out of while you maintain an active account.

If you're located in the United States, you may have additional rights under state privacy laws such as the California Consumer Privacy Act (CCPA). If you're located in the European Union or United Kingdom, you have rights under GDPR. Contact us to exercise these rights.

8. Cookies

We use a minimal set of cookies:

• Essential cookies: Authentication session cookies (managed by Clerk) required for the app to function. These cannot be disabled.
• Analytics cookies: Facebook Pixel on marketing pages only (landing page, pricing page). Not active inside the authenticated app.

We do not use third-party advertising cookies, tracking cookies, or sell cookie data.

9. Children's Privacy

Manifest Mosaic is not intended for use by anyone under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and/or by placing a prominent notice on our website. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise any of your data rights, contact us at: