Privacy Policy
This is a translation. Until the translations are legally reviewed, the Russian text of this document remains the legally authoritative one.
1. Who we are. Manigana is an app for the Vaishnava community. The data controller is Panasiuk Valerii, a private individual, Ukraine. Privacy contact: privacy@manigana.app.
2.1 Data without an account. The app works fully without registration. The device stores: language, time zone, chosen city, a random device identifier, entries of your sadhana (regulative principles, japa rounds, reading, service, reflections), personal lunar dates, and the version of the consent you accepted. This data does not leave the device until you create an account.
2.2 Data when you register. Registration is optional: it is a feature, not a condition of use. You sign in with a one-time code sent to your email, without passwords. When you register, your guest data is moved to the server under your account. Your profile may include a spiritual name and your city only (not an exact address).
2.3 Special category of data. Sadhana entries are data about religious beliefs, a special category of personal data under the GDPR. They are processed only with your explicit consent, requested when you sign in; without an account, sadhana entries never leave the device. If this policy changes substantially, consent is requested again.
2.4 Technical data. The device push token (if notifications are allowed) is revoked when you sign out. A log of technical errors, without the contents of your sadhana.
2.5 Events. If you register for an event, its organizer sees your profile name, your registration status and your answers to the registration form (only the fields the organizer included: phone, arrival dates and the like; the app does not collect passport or payment details). A volunteer at the entrance sees only your name. Form answers are erased automatically 90 days after the event ends; the fact of attendance is kept. If you publish an event, your account is not shown to participants; only the organizer is visible. Blocks of organizers and reports are visible only to you and the moderator.
3. What the data is used for. Calculating the panchanga for the chosen city; syncing your sadhana between devices; reminders according to your settings, which can be turned off completely; sharing your sadhana with a mentor, only on your explicit initiative and with a confirmed connection, with access closed immediately when the mentorship ends; responding to reports of violations of the community rules. The data is not used for targeted advertising and is not sold to third parties.
4. Who we share data with. Supabase (hosting, EU region): database and file storage. Expo Push: delivery of notifications; receives only the device token. Sentry (EU region): a log of technical errors, without the contents of your sadhana. Resend: sending sign-in code emails; receives your email address. Cloudflare R2 (EU region): database backups. Google Firebase Cloud Messaging and Apple Push Notification service: delivering notifications to your device; they receive only the device token. Vedabase.io (Bhaktivedanta Book Trust): an independent link for reading books; none of your data is passed to it. Your mentor: only the entries you have explicitly shared yourself. An event organizer: your name and form answers, only if you registered for their event yourself; the organizer undertakes to use them only for that event (terms for organizers).
5. Where the data is stored. The main server is in the European Union region. A local copy of your sadhana and settings stays on your device even after you sign out. Database backups are also stored in the EU. Some service providers (Expo, Resend, Google, Apple) may process the data described above outside the EU, including in the United States.
6. Retention periods. Active data: for as long as the account exists. Deleted entries are physically removed from the server within 90 days. Event form answers are erased 90 days after the event ends. On account deletion, see section 8. Database backups are kept for up to 30 days, so deleted data disappears from them within that time.
7. Your rights. At any time, from the settings: export of all your data in JSON format; account deletion; withdrawal of consent to keep practice data on the server ("Account" → "Withdraw consent": the sadhana, japa history, day notes and personal lunar events are deleted from the server and no longer synced, but remain on the phone; the account and events are kept; consent can be given again); continued use in guest mode without an account. You have the right to contact the data protection supervisory authority of your country.
8. Account deletion. The sadhana, japa counter data, push tokens, notifications and mentorship connections are deleted irreversibly. Financial transactions are kept for accounting but anonymized. Reviews, messages, service announcements and events you created keep their text, but the link to your identity is replaced with the label "deleted user"; private photos are deleted. Reports you filed are anonymized but not deleted. The action is recorded in the audit log.
9. Developer access. Technical access to the database is not a right to read other people's sadhana. The contents of sadhana records and private messages are not opened except at your own request to support, recorded in the audit log.
10. Age. The app is intended for users aged 16 and over. Data of minors is not knowingly collected.
11. Changes to the policy. If the policy changes substantially, consent is requested again. Last changed on 9 November 2026.
12. Contacts. For questions about this policy and your data: privacy@manigana.app.