Privacy Policy

1. Introduction

Tracking Contracts (“we”, “our”, or “us”) operates the Mantra Samaya mobile application. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our app, in compliance with the General Data Protection Regulation (GDPR).

2. Data We Collect

The data we collect depends on how you use the app (Free vs. Premium/Cloud features).

Free Tier (Local Only)

If you use the app without creating an account, all mantra counts, practice histories, and streaks are stored strictly locally on your device. We do not collect, transmit, or have access to this data.

Account & Cloud Sync (Premium/Sangha Users)

If you create an account to back up your data or join a group accumulation, we collect:

• Account Information: Your email address and a secure password.
• Spiritual Data: Your practice logs, mantra counts, and streaks, synced securely to our servers to prevent data loss.
• User-Generated Media: Any custom images (Thangkas) or audio files you upload for your personal practice.

3. How We Use Your Data

We only use your data to provide and improve the service. Specifically, to:

• Create and manage your account.
• Synchronize your practice data across your devices.
• Facilitate group accumulations (Sangha campaigns) by aggregating anonymous count totals.
• Provide customer support.

We do not sell, rent, or trade your personal data to third parties. We do not use your data for targeted advertising.

4. Third-Party Services

We utilize trusted third-party service providers to operate our app efficiently. These providers are bound by strict data processing agreements:

• Supabase: Used for database hosting, secure user authentication, and cloud storage for user-uploaded media. Data is encrypted in transit and at rest.
• Google Play / Apple App Store: Used to securely process native In-App Purchases. We do not have access to your credit card or payment details.
• Stripe: Used exclusively on our web dashboard to process B2B organizational subscriptions.

5. Data Retention and Deletion

We retain your account data only for as long as your account is active. You can delete your account and all associated cloud data at any time directly within the app settings. Upon deletion, your personal data and media files are permanently removed from our servers. You also have the option to export your practice history (via CSV) before deletion.

6. Your GDPR Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Request the correction of inaccurate data.
• Request the deletion of your data (Right to be Forgotten).
• Export your data in a portable format (CSV).

7. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: