Privacy Policy

1. Introduction

A Miracle In Mind ("the App," "we," "us," or "our") is an independent project dedicated to the practice of A Course in Miracles. We value your privacy and are committed to protecting your personal data. This policy explains how we handle your information when you use our mobile application and services.

2. Information We Collect

To provide a personalized experience and functional AI guidance, we collect:

• Account Data: Email address and unique User ID (processed via Supabase).
• Subscription Data: Purchase history and subscription status (processed via RevenueCat). We do not store credit card details; these are handled by Google Play.
• Interaction Data: Chat logs and prompts you send to the "Living Companion."
• Device & Notification Data: Device model, OS version, language settings, and Push Notification Tokens to send you reminders and community updates.
• Age Range Data: An age range (e.g., "under 18" or "18 and over") obtained on Android via the Google Play Age Signals API, or on iOS 26+ via Apple's Declared Age Range. We never receive your exact date of birth, and this data is evaluated only on your device — it is never stored on our servers.

3. How We Use Your Data

We use your data strictly for:

• Providing the core daily lesson functionality.
• Personalizing AI responses through the Living Companion.
• Managing your Premium "Founders Pass" subscription.
• Improving app performance and security.
• Determining age-based eligibility for social and AI features in compliance with applicable law.

4. Third-Party Service Providers

We share specific data with trusted providers to make the app function:

• Supabase: Secure storage of your profile and journal.
• RevenueCat: Processing and validating your subscription status.
• OneSignal: Managing and delivering push notifications (e.g., daily lesson reminders or community alerts).
• Mailgun: Delivering daily email reflections and account-related transactional emails.
• Google AI (Gemini) / OpenAI: Processing your chat prompts.
• Firebase Analytics (Google): Aggregate, anonymous measurement of advertising campaign effectiveness. We log only two events — account sign-up and subscription purchase — with no user-level identifiers. On iOS, attribution uses Apple's privacy-preserving SKAdNetwork framework (no IDFA and no tracking prompt); on Android it uses Google's standard aggregate attribution.
• Cloudflare: Hosting our landing page and privacy documentation.

5. Age Verification & Protection of Minors

We take the protection of minors seriously and comply with applicable laws, including the Texas App Store Accountability Act (SB 2420).

• Android: We use the Google Play Age Signals API to read your age category from your Google Play account. We receive only an age range — never your exact date of birth.
• iOS 26+: We may request your age range through Apple's Declared Age Range system dialog. We receive only a range, never an exact date of birth.
• Evaluated on-device: Your age range is used only locally on your device to determine feature eligibility. It is never stored on our servers or shared with third parties.
• Restrictions for minors: Users identified as under 18 retain full access to the daily lessons, but the Communities and AI Living Companion features are restricted. If parental supervision approval is denied, access to the app may be fully blocked as required by law.

6. Content Safety & AI Handling

As an interactive app, we provide in-app tools for you to block other users or report any concerning user-generated or AI-generated content. We do not use your private reflections, community messages, or journal entries for any purpose other than providing them back to you for your own study.

7. Your Rights (GDPR Compliance)

Under EU law, you have the following rights:

• Right to Access: You can request a copy of all data we hold about you.
• Right to Erasure: You can delete your account and all associated data (lessons, journals, and logs) directly within the app settings.
• Right to Rectification: You can update your profile information at any time.
• Data Portability: You can request an export of your personal journal entries.

8. Account and Data Deletion

You have the right to delete your account and all associated data at any time. You can do this in two ways:

• Inside the App: Go to Settings > Delete Account. This action is immediate.
• Via Web (Email): If you no longer have the app installed, please email us at support@amiracleinmind.org with the subject "Account Deletion Request." Please include the email address you registered with. We will process your request within 7 days.

Data that will be deleted: Your email address, User ID, personal journal entries, community messages, and chat history with the AI guide.

Data that may be retained: Financial transaction data (subscription history) is securely retained by Google Play and RevenueCat for legal tax compliance purposes and cannot be deleted by us.

9. Data Retention

We retain your data only as long as your account is active. If you choose to delete your account, your data is wiped from our active Supabase databases immediately, though it may persist in encrypted backups for up to 30 days.