Privacy Policy

Last updated: July 22, 2026 · Effective date: July 22, 2026 · Document version: 2026-07-22

This Privacy Policy explains how The Manager ("the App," "we," "us," or "our") — an independent application developed by Jas Tandon — collects, uses, stores, shares, and protects your information when you use the App and this website (collectively, the "Service"). We are committed to a privacy-first design and to handling your data responsibly and transparently.

1. Who We Are

The Manager is an independent research and development project by Jas Tandon. It is offered free of charge with no advertising and no commercial monetization. For any privacy question, you can reach us at support@themanager-app.com. For users in the EEA/UK, references to a "data controller" mean the developer identified above.

2. Information We Collect

We collect only what is needed to provide the features you use. Creating an account sets up your profile and enables the social features; the categories below otherwise depend on which features you use — for example, if you never post, message, or share, we have no posts, messages, or shared content of yours to process.

a. Account & identity information

You create an account with an email address, password, unique public username/handle, first name, and last name. Firebase Authentication stores the email, verification status, authentication record, and account identifier; we do not receive your plaintext password. First and last name support account identity and cross-device recovery and remain in local storage, a private functions-only backend account record, and, if enabled, your personal iCloud backup. Your handle is public and searchable. During account creation and when saving Edit Profile, you may provide a different public display name. The App clearly tells you that leaving that field blank uses your profile first and last name publicly on your profile, The Wall, and related social surfaces. An existing private profile name is not converted until you affirmatively save that disclosed choice. You may also choose a public profile photo, pronouns, and bio.

b. Content you create

Goals, tasks, milestones, habits, to-do lists, journals (including voice journals), calendar and focus blocks, food diary entries, and notes. Most of this stays on your device. Eligible non-health content may be included in your personal iCloud backup. It is only sent to our backend when required for an account feature or when you actively share or collaborate (see below).

c. Social & collaboration data (only if you use social features)

• Social graph: who you follow and who follows you, and follow requests.
• Activity & posts: posts, comments, reactions/cheers, shared "wins," and the items you choose to share to followers. You control what is shared and whether names or only generic summaries are visible.
• Direct messages: the content of messages you send to other users, and read/delivery status.
• Collaboration: goals, tasks, milestones, or lists you choose to share with specific people, accountability partnerships, and challenges.
• Safety signals: reports you submit and blocks you create, which we use to keep the community safe.

d. Health, fitness & nutrition data

If you use the health features, you may enter or grant access to data such as intermittent-fasting sessions, glucose and blood-pressure readings, weight, food and calorie/macro logs, and (with your explicit permission) data from Apple HealthKit such as steps, active energy, and exercise minutes. You may also optionally provide your age and biological sex to personalize fitness guidance; these are stored on your device. See Section 6 for special handling.

e. Device & technical information

• Push notifications: a device push token (via Apple Push Notification service / Firebase Cloud Messaging) so we can deliver notifications you enable.
• Integrity, account sessions & abuse prevention: app-attestation signals (Apple App Check), a hashed per-installation/device identifier and coarse iPhone/iPad label for a short-lived active-device session lease, and rate-limiting signals that protect the Service from abuse.
• Diagnostics: standard, largely anonymous crash and performance telemetry provided through Apple's platform to help us fix problems.
• Operational logs: limited server-side logs needed for security, abuse prevention, debugging, and reliability. Identifiers in routine operational logs are pseudonymized (hashed), not stored as raw account IDs.

f. Optional financial data

Where the optional finance feature is enabled, you may choose to connect a bank or card account through Plaid. In that case Plaid provides account and transaction information so the App can display your spending insights. We do not receive or store your bank login credentials — those are handled by Plaid. If you do not use this feature, no financial-institution data is collected.

g. Support & website information

If you email us, we receive your message and contact details. The website host may receive standard request logs such as IP address, browser, time, and requested path for security and delivery. Website fonts, scripts, images, and badges are self-hosted; links to the App Store load Apple content only after you follow them. We do not use advertising or cross-site tracking cookies.

3. How We Use Information

• To provide, maintain, and operate the App's features that you choose to use.
• To sync your account, deliver social interactions and direct messages, and enable collaboration.
• To generate your personal insights, dashboards, streaks, gamification, and (optionally) AI assistance.
• To send notifications you have enabled.
• To keep the Service secure — preventing fraud, abuse, and spam, and enforcing our Terms.
• To respond to your support requests and comply with legal obligations.

We do not sell your personal information, we do not serve advertising, and we do not use your health, fitness, or financial data for advertising or unrelated profiling.

4. Legal Bases for Processing (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract to provide requested account and Service functions; consent for optional permissions and integrations where consent is the appropriate basis; legitimate interests to secure the Service, prevent abuse, maintain reliability, and operate proportionate moderation, balanced against your rights; and legal obligation where required by law. Special-category health data relies on separate explicit consent under Article 9(2)(a), which you can withdraw at any time.

5. Where Your Data Is Stored

Your personal content is stored locally on your device. If you enable backup, eligible non-health content is stored in your own iCloud account (we do not host your backups). You can also export a copy of the data stored on your device to the Files app at any time; server-hosted social content — your messages, public profile, and posts shared to others' feeds — is not included in that export (deleting your account removes it everywhere instead). Private account-recovery fields, active-device lease metadata, and data required for social, messaging, collaboration, and account features are processed and stored on our cloud backend (Google Firebase / Cloud Firestore), which may operate on servers in the United States.

6. Health & Fitness Data — Special Handling

Optional health processing requires a separate explicit in-App consent as well as any applicable HealthKit permission. You can withdraw consent in the App and revoke HealthKit access in iOS Settings. Health and nutrition entries remain on your device and are excluded from automatic iCloud backups. A user-directed Files export can include app-entered health information; you choose and control its destination. Health information is not placed in public profiles or people search.

7. Artificial Intelligence Features

The App includes an assistant and a fitness coach using Apple on-device models and optional cloud providers including OpenAI, Google Gemini, and Anthropic. The "Share app context" control defaults on for new installations, but no private app context is sent until you affirmatively accept the onboarding disclosure for the signed-in account. If you decline or turn it off, private app, health, finance, calendar, email, journal, and social context is withheld from model tools and execution. When enabled and consented, only context relevant to your request is sent to the selected provider. If you supply your own API key, requests may go directly to that provider under its terms. AI responses can be inaccurate and are not professional advice.

8. How We Share Information

We share information only as needed to run the Service:

• Service providers: Apple (push notifications, iCloud, HealthKit), Google Firebase (authentication, backend, database, messaging, app integrity), AI providers (only when you use cloud AI features), and Plaid (only if you link a financial account). These providers process data on our behalf under their own terms and security obligations.
• Other users: content you choose to share — your public profile, posts, shared items, and direct messages — is visible to the people you share it with, according to your privacy settings.
• Legal & safety: we may disclose information if required by law or to protect the rights, safety, and security of our users, the public, or the Service.

We do not sell or "share" (as defined by the CCPA/CPRA) your personal information, and we do not disclose it for cross-context behavioral advertising.

9. Data Retention

We keep account, private account-recovery, and social data while the account is active. Active-device lease metadata is released on logout where connectivity permits, becomes available for takeover after seven days without renewal, and is deleted with the account. On-device and personal iCloud data persists until you delete it, remove the backup, delete the account, or remove the App, subject to operating-system behavior. Account deletion removes legal-acceptance records unless a documented legal hold or law requires a specific record. A minimal moderation category, disposition, expiry, and pseudonymous marker may remain for up to 180 days to prevent repeat abuse and ban evasion; raw deleted-account identifiers, names, and reporter free text are removed. Provider-generated operational logs follow the provider account's configured retention and applicable terms.

10. Security

We use industry-standard safeguards, including encryption in transit, authenticated access controls, server-side validation, app-attestation (App Check), and rate limiting to protect against abuse. On-device data is protected by your device's security features (passcode, Face ID / Touch ID). No method of transmission or storage is 100% secure, but we work to protect your information and to respond promptly to any issue.

11. Your Rights & Choices

Depending on where you live, you may have some or all of the following rights. We honor these requests regardless of location wherever practicable:

• Access / Know & Portability: request a copy of your data. You can self-serve this any time in the App via Profile > Privacy > Data & Account > Download my data, which exports a portable copy of the data stored on your device. Server-hosted social content (messages, your public profile, posts shared to others' feeds) is not included in that export; you can request it by email, and deleting your account removes it everywhere.
• Correction: edit your profile and content in the App, or ask us to correct information.
• Deletion / Erasure: permanently delete your account and its data in Profile > Privacy > Data & Account > Delete Account. This erases the cloud account and social footprint, revokes connected Plaid access, frees the username, removes local account data, and removes the App's per-user automatic iCloud backup directory. The workflow fails closed and asks you to retry if a required deletion step cannot be confirmed. The limited de-identified 180-day moderation exception above may apply.
• Object / Restrict / Withdraw consent (GDPR): you may object to or restrict certain processing, and withdraw consent (e.g., HealthKit, AI context sharing, notifications) at any time.
• Opt-out of sale/share & limit sensitive data (CCPA/CPRA): we do not sell or share your personal information, so there is nothing to opt out of; we use sensitive information only to provide the features you request.
• Non-discrimination: we will not discriminate against you for exercising any of these rights.

To exercise a right that you cannot complete in the App, email support@themanager-app.com. EEA/UK users also have the right to lodge a complaint with their local data protection authority.

12. Children's Privacy

The Service is not directed to children and requires users to be at least 13 years old. We do not knowingly permit accounts for children under 13. If you believe a child created an account, contact us so we can investigate and delete it.

13. International Users & Transfers

We are based in, and Firebase/Google Cloud and other providers may process data in, the United States and other countries. Where EEA/UK data is transferred to a country without an adequacy decision, we rely as applicable on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, provider Data Privacy Framework certification where valid, and supplementary technical and organizational safeguards.

14. Changes to This Policy

We may update this Privacy Policy. Material changes receive a new version and SHA-256 fingerprint, and the App requires acceptance of the new exact document set before access to gated functions. Older clients cannot bypass the current backend acceptance requirement.

15. Contact Us

Questions, requests, or concerns about this Privacy Policy or your data? Email us at support@themanager-app.com.