Legal

Privacy Policy

Last updated: October 7, 2026  ·  Applies to this website and apps by Engin Aytekin

This Privacy Policy describes how your information is handled across the following apps:

Summary

• No account, no login, no profile. App use does not require your email or phone number; information you voluntarily send to support or through this website is processed to respond to your request. Some apps let you enter a first name to personalize them; it is stored only on your device and never transmitted.
• Personal writing, recordings and attached photos are stored locally. Device backups, technical analytics and the historical Heart Coherence health events described below are separate.
• We collect app usage analytics, crash and diagnostic logs, device and installation identifiers, and your subscription status.
• That data is sent to a small set of service providers: PostHog (analytics), RevenueCat (purchase validation), Expo (app updates), and Apple / Google (notifications, distribution, payments).
• Two ad-supported apps, It Works - Manifest List and 55x5 - Manifestation Ritual, also share your device Advertising ID with Google for ads. The other apps contain no advertising.
• We do not sell your personal data.

Information We Collect

• Usage analytics: installation-associated events such as screen views, features used, session length, and onboarding and paywall funnel steps. Collected via PostHog.
• Device and technical information: device model, operating system and version, app version and build, language, time zone, and screen dimensions.
• Diagnostics and crash logs: when the app hits an error, we log the error message, a stack trace, and basic device state so it can be fixed. Collected via PostHog.
• Purchase and subscription status: when you buy a subscription, your App Store or Google Play purchase receipt / token is sent to RevenueCat to verify it and to tell the app whether your subscription is active.
• Update checks: on launch, the app contacts Expo's update service to check for a JavaScript update. The request includes a random installation identifier, the platform, and the app's runtime version.
• Notification registration: if you enable reminders, the operating system's push service (Apple Push Notification service, or Firebase Cloud Messaging on Android) issues a device token; on Android, Firebase Cloud Messaging also registers a Firebase installation identifier with Google. Notifications are used only to deliver your own reminders and re-engagement nudges, never for third-party marketing.

Device or Other Identifiers

Several of the services above receive an identifier that is specific to your device or app installation:

• A random analytics identifier generated by PostHog
• A random customer identifier generated by RevenueCat
• A random installation identifier used by the Expo update service
• On Android, a Firebase installation identifier used by Firebase Cloud Messaging
• In It Works and 55x5 only, the device Advertising ID (see Advertising below)

These identifiers let the apps function, count usage accurately, and, in the two ad-supported apps, show ads. They are never combined with your name, email, or contact information: the apps never receive your email or contact details, and a first name you choose to enter never leaves your device.

Advertising (It Works and 55x5 only)

Two apps, It Works - Manifest List and 55x5 - Manifestation Ritual, are supported by ads served through Google AdMob. To serve and measure those ads, Google's advertising SDK collects your device Advertising ID together with standard technical data (device model, operating system, approximate IP-based location, and ad interactions) and processes it on Google's servers. This is a sharing of data with a third party for advertising purposes.

• 55x5 requests non-personalized ads only.
• It Works may request personalized ads where permitted; on iOS this happens only if you allow tracking when prompted.

You can reset or limit your Advertising ID in your device settings (Android: Settings → Privacy → Ads; iOS: Settings → Privacy & Security → Tracking and Apple Advertising). The other apps contain no advertising SDKs.

Information We Do Not Collect

• Contact information is not required to use the apps. If you email support or submit a website form, we receive the information you provide. A first name entered for in-app personalization is stored on-device.
• The content of your intentions, journal entries, affirmations, or scripting
• Precise or GPS location: analytics providers may infer only an approximate region from your IP address
• Your contacts
• Photos or camera, beyond images you personally attach inside an app (for example a vision board or evidence photo), which are stored only on your device
• Microphone audio, except in Lullaby Method, 369 Method - Manifestation, and Declare, which record your own voice locally on-device; those recordings are never transmitted anywhere

Third-Party Services

The apps use the following third-party services, each with its own privacy policy:

• PostHog: product analytics and crash / diagnostic logging. Privacy Policy
• RevenueCat: subscription and in-app purchase validation. Privacy Policy
• Expo: over-the-air app update delivery. Privacy Policy
• Google (Firebase Cloud Messaging, and AdMob in It Works and 55x5): push message delivery on Android, and advertising in the two ad-supported apps. Privacy Policy
• Apple App Store / Google Play: app distribution and payment processing, subject to Apple's and Google's respective privacy policies.

Per-App Notes

• Lumios: lets you attach photos to a vision board; images are stored only on your device.
• It Works - Manifest List: ad-supported through Google AdMob (see Advertising above); lets you attach photos to list items, stored only on your device.
• Wish Fulfilled: no data collection beyond the common set described above.
• 55x5 - Manifestation Ritual: ad-supported through Google AdMob, non-personalized ads only (see Advertising above).
• Shadow Forge: shadow work responses, body check-ins, and gratitude notes are stored only on your device and are not accessible to the developer. Intended for users aged 18 and older.
• 369 Method - Manifestation: can record your own voice for affirmations, and stores an optional birth date you enter for numerology; both stay on your device.
• Lullaby Method: records your own voice for sleep sessions; recordings stay on your device.
• Heart Coherence: with your permission, reads heart rate and heart rate variability from Apple Health or Health Connect (see Health Data below).
• Revision Method: SP Manifest: lets you attach photos to Vault entries; images are stored only on your device.
• Declare: can optionally record your own voice reading your declaration; the recording stays on your device. No financial accounts, bank connections, or real money transactions of any kind - the amount and goal you enter are never transmitted anywhere. Intended for users aged 17 and older.

Data Storage and Retention

Personal writing, recordings and attached photos are stored in app-local storage. Usage events, practice statistics and historical Heart Coherence self-reports must not be confused with local-only content. Removing the app does not erase provider records and may not remove device backups.

Shadow Forge journal entries: all shadow work session responses, body check-ins, and gratitude notes are stored exclusively on your device and are never transmitted to any server or third party. This data is not accessible to the developer.

Analytics, diagnostic, purchase and form records can remain with the relevant service providers after you stop using an app or this website. PostHog keeps analytics events for the period its plan sets, which is 1 year on the plan we use. RevenueCat publishes no fixed period for purchase records and keeps them while our account is active, unless we delete them. We are still reviewing historical health-related records, and we do not promise that they will be removed automatically. Contact support for retention information or to request deletion of records associated with your installation or form submission. A local app reset is not a provider-side deletion request.

Health Data (Heart Coherence)

With your permission, Heart Coherence reads supported heart rate or heart rate variability samples from Apple HealthKit on iOS or Health Connect on Android. Availability differs by platform, wearable and sync settings. These observations are not a diagnosis or proof that a breathing session caused a physiological change.

Historical analytics: earlier versions sent self-reported tension ratings, a derived heart-rate difference, health-permission events and HRV-feature usage events to PostHog. An October 2026 review confirmed that health-related records remain in analytics. Our previous blanket statement that health data was never uploaded did not accurately describe this history.

We have prepared source-code changes to stop those health-specific analytics events and disable UI autocapture and session replay. This notice does not mean every installed version has received the changes, or that historical records have been deleted. Older versions may continue to send their existing events. General usage analytics can also include selected practice types and onboarding goals.

You can revoke Apple Health or Health Connect permission in your device settings. That prevents further health access but does not erase existing third-party records or disable unrelated usage analytics. To request review or deletion of installation-associated data, contact support@enginaytekin.com. Do not email raw health readings or private journal entries. We do not use health information for advertising.

Local reset and remote records

An in-app clear-data action resets the local records described in that app. It does not by itself delete PostHog or RevenueCat records, cancel a subscription, or revoke health permissions. Uninstalling removes app-local data subject to your device's backup and restore behavior; it does not erase server-side records.

Website analytics choices

Optional PostHog analytics is disabled in this website release, including for browsers that previously accepted it. This does not delete historical records or change analytics inside the mobile apps. Website hosting still processes requests needed to deliver pages, and forms process information you choose to submit. If optional analytics is reintroduced, the notice and controls will be reviewed before it is enabled.

Website forms and messages

If you submit a contact form, subscribe for updates, or email us, we receive the details you choose to provide, such as your email address and message. Website forms use Netlify Forms; submissions can be stored by Netlify and accessed by the site operator. See Netlify's privacy notice. Contact and newsletter requests are separate from website analytics permission. Do not submit health records or sensitive personal writing. Contact support to ask about access, removal or stopping update messages.

Where Your Data Is Processed

Service providers, including PostHog, RevenueCat, Expo, Google and Netlify, may process data outside your country, including in the United States. Contact support for information about the applicable provider arrangements and safeguards. This notice does not certify that a particular transfer mechanism has been verified for every service.

Your Rights

You can request access to, correction of, or deletion of any personal data associated with your app installation by contacting us at the address below. Analytics may be associated with an installation identifier even without a name or account. Contact us to request access or deletion; we may need information sufficient to locate the relevant installation without asking for your journal content. See how to request deletion.

Privacy rights and requirements depend on your jurisdiction and the type of processing. You may contact us to request access, correction or deletion, or to raise an objection or concern. You may also contact your local data protection authority. Disclosing historical collection here does not provide retrospective consent or establish a lawful basis for it.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising, other than the Advertising ID sharing described above for It Works and 55x5.

Uninstalling affects app-local storage; device backups and third-party records require separate consideration as described above.

Children's Privacy

These apps are not directed at children under the age of 13, and Shadow Forge is intended only for users aged 18 and older and Declare only for users aged 17 and older. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We will update this notice when our practices change. Updating a notice is not a substitute for consent where consent is required.

Mental Health Disclaimer

Shadow Forge is a self-guided journaling tool designed to support personal reflection based on Jungian psychological concepts. It is not a medical device, clinical service, psychotherapy, or substitute for professional mental health treatment.

The app does not provide diagnoses, clinical assessments, or therapeutic interventions. Content is for informational and self-reflective purposes only.

Shadow work and introspective journaling may surface strong emotions. Users should exercise personal judgment about their readiness to engage with this type of content. If you experience distress, suicidal thoughts, or a mental health crisis, please immediately contact a licensed mental health professional or a crisis service in your country.

Contact

For privacy-related questions or requests, contact us at:
support@enginaytekin.com