Privacy Policy for Quope: Manifestation Rituals

Effective date: October 2, 2026
Last updated: October 2, 2026

1. Introduction

Quope: Manifestation Rituals ("the App," "we," "us") is developed by Naoko Hamasaki, trading as 39 Daisies.

Quope is built to keep what you create private. Your recordings, photos, journal and everything else you make in the App stay on your iPhone. If backup is on, a copy goes to your own iCloud account. We cannot see this data, and it is never stored on our servers.

This Privacy Policy explains what data the App handles, where it is kept, and your rights.

If you don't agree with this policy, please don't use the App.

2. Data Controller & Contact Information

Data Controller:

EU Representative (for users in the EU/EEA):
To be appointed. In the interim, contact the data controller.

3. What Data the App Handles

A. Content You Create (on your device and in your own iCloud only)

Your Voice Affirmations

• Audio recordings of your affirmations (3-6-9 ritual)
• Metadata: date created, duration, the affirmation text

Solace Recordings

• Audio messages you record for moments of calm or overwhelm
• Can be your own voice or a trusted person's voice
• Metadata: date created, labels

Vision Board Photos & Clips

• Images and video clips you pin to your Vision boards, captions, board names

Journal Entries

• Text you write, highlights you mark, dates

Manifestations, Affirmations & Daily Practice

• Affirmation and manifestation text, daily intentions, Power Words, daily moods, your profile photo, Anchor Vision, display name and App settings

Where it is stored:

• On your iPhone.
• If iCloud backup is on, also in your own iCloud account. This is the private App area Apple keeps for Quope, and only your devices can access it.
• It is never sent to or stored on Quope's servers. We have no access to it.

B. Age Check

• When you first open the App, you enter your birth year.
• It is used only to decide which features are available (see Section 12).
• It is stored only on your iPhone. It is not backed up and never sent to us.

C. Subscription & Payment Data

• Your subscription plan (Monthly or Annual), status (trial, active, expired) and purchase and renewal dates.
• Purchases are handled by Apple. Subscription status is managed by RevenueCat.
• The App identifies you to RevenueCat with a random customer ID, not your name or email. If you signed in with an earlier version of the App, your earlier account identifier is used instead.
• Our server receives subscription events from RevenueCat, such as trial start and end dates and the product purchased. These are linked to that customer ID and are used to manage your subscription.
• We never see or store card numbers.

D. Crash Reports

• The App contains no analytics, advertising or tracking tools.
• If you have turned on Share With App Developers in iOS Settings (Privacy & Security → Analytics & Improvements), Apple may share anonymous crash reports with us. You can turn this off at any time in iOS Settings.

E. Accounts Created With Earlier Versions

Earlier versions of the App offered Sign in with Apple and a cloud backup on our servers. Both have been removed:

• The server backup has been permanently deleted. Our servers no longer accept backups.
• If you signed in with an earlier version, we still hold a basic account record (your Apple ID email or private relay address, and an account identifier) until you delete it. You can do this in the App (see Section 8) or by emailing us.
• New accounts can no longer be created, including from earlier versions of the App.

4. Legal Basis for Processing (GDPR Article 6)

5. How Data Is Collected

Data you provide directly:

• Everything you create in the App. It stays on your device and in your own iCloud.
• Your birth year, which stays on your device only.

Data from third parties:

• Apple: purchase confirmation, and crash reports if you opted in.
• RevenueCat: subscription status, trial eligibility and purchase dates.

6. How We Use Data

iCloud Backup

• iCloud backup is on by default, free and requires no account.
• The App copies your data to your own iCloud account in the background, so you can restore it after reinstalling or on a new iPhone ("Restore from iCloud" during setup).
• The backup is stored and protected by Apple under your iCloud account. Quope cannot read it.
• You can turn it off at any time: You tab → iCloud backup. You can also delete the backup there ("Turn off and delete backup").
• It requires being signed in to iCloud on your iPhone, and it uses your iCloud storage.

Subscriptions

• We use subscription data to provide premium features, trials and renewals, and to handle cancellations.

What We Don't Do

• We do not collect, see or store your recordings, photos, journal or other content.
• We do not sell your data.
• We do not share your data with advertisers or marketers.
• We do not use your data to train AI models.
• We do not track you across apps or websites, or build behavioral profiles.

7. Data Storage & Security

Where Data Is Stored

Security

• On your iPhone: protected by iOS data protection and your passcode or Face ID.
• In iCloud: Apple encrypts your data in transit and at rest. If you turn on Apple's Advanced Data Protection, your iCloud backup is end-to-end encrypted and even Apple cannot read it. See support.apple.com/102651.
• Our server: receives subscription records only, over HTTPS/TLS.

8. Data Retention & Deletion

Deleting an earlier-version account from the App also deletes your iCloud backup and the data on your iPhone.

9. Third-Party Service Providers

Apple (iCloud, App Store, Crash Reports)

• Role: Provides iCloud storage under your own Apple account, processes payments, and delivers crash reports if you opt in.
• Privacy policy: apple.com/privacy

RevenueCat (Subscription Management)

• Role: Data Processor
• Data processed: Customer ID, subscription status, trial eligibility, purchase dates (not card data)
• Location: US
• Privacy policy: revenuecat.com/privacy

Render (Server Hosting)

• Role: Data Processor
• Data processed: Subscription records received from RevenueCat
• Location: US (Virginia)
• Privacy policy: render.com/privacy

Supabase (Database)

• Role: Data Processor
• Data processed: Subscription records; account records from earlier versions
• Location: US
• DPA: supabase.com/legal/dpa
• Privacy policy: supabase.com/privacy

10. International Data Transfers (GDPR Article 46)

For Users in the EU/EEA

Subscription records, and account records from earlier versions, may be processed in the United States by RevenueCat, Render and Supabase. These transfers are protected by Standard Contractual Clauses (SCCs) in our processors' data processing agreements. You may request details of the transfer mechanism.

Your content is not transferred to us. Where it is stored in iCloud is governed by your agreement with Apple.

11. Your Rights (GDPR & CCPA)

If You Are in the EU/EEA (GDPR Rights)

• Access (Art. 15) and Portability (Art. 20): Request a copy of the subscription or account data we hold. Your content is already fully in your possession, on your iPhone and in your iCloud.
• Rectification (Art. 16): Ask us to correct inaccurate data.
• Erasure (Art. 17): Ask us to delete the data we hold. You can delete your content and iCloud backup yourself at any time (see Section 8).
• Restriction (Art. 18) and Objection (Art. 21): Contact us about any processing of your data. You can stop iCloud backup at any time from the You tab.
• Complaint (Art. 77): Lodge a complaint with your local data protection authority.

We respond within 30 days.

If You Are in California (CCPA Rights)

You have the right to know what personal information we collect, to request its deletion, and not to be discriminated against for exercising your rights. We do not sell or share personal information.

12. Children

• Quope asks for your birth year when you first open the App. The year stays on your iPhone.
• People under 13 can use the App with these features turned off: Your Voice, Solace recordings and video clips. The App cannot record audio for them. Photos and text remain available.
• As with every user, anything a child creates stays on the iPhone and in the family's own iCloud. We do not collect it.
• We do not knowingly collect personal information from children under 13.
• If you believe we hold information about a child under 13, contact us at 39daisiesportal@gmail.com and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and post the new version at the same address. If a change materially affects how your data is handled, we will ask for your consent where required.

14. Contact Us

Data Controller:

We aim to respond to all data requests within 30 days (GDPR Article 12).