This privacy policy explains how MantraStream collects, uses, and protects personal data when you use personalized affirmation audio. It distinguishes account data held by the service from personal goals, settings, and audio saved on your device.
Privacy Policy Highlights
Data we collect
- Account details: Google account ID, verified email address, display name, and avatar URL. MantraStream does not receive or store your Google password.
- Subscription state: Billing account and subscription identifiers, plan, status, renewal or trial end, and cancellation state. Stripe handles payment-card data; MantraStream does not store full card numbers.
- Application state: Whether onboarding is complete and secure records that keep you signed in. The session cookie is protected from access by browser scripts.
- Usage totals: Daily counts of text and audio creation and any failed requests. These counts enforce plan limits without retaining the underlying text.
- Operational diagnostics: Request IDs, success or failure, response time, and limited error events. Logs exclude goals, generated affirmations, email addresses, cookies, authentication tokens, and payment details.
Goals, emphasized topics, avoided phrases, player preferences, generated affirmation lines, and personalized audio are not saved to your account. Settings and audio stay on the device where you use MantraStream. The text needed for a request is sent to our processing service only while that request is completed.
How we use your information
- Sign you in through Google and maintain a MantraStream session.
- Create the affirmation text and speech you request.
- Keep playback flowing and make some recently played audio available offline on the same device.
- Process subscriptions, trials, invoices, and the customer portal through Stripe.
- Apply plan limits and investigate service failures or abuse.
Legal bases
We process personal data to fulfill our contract with you, comply with legal requirements such as accounting and fraud prevention, and obtain consent where the law requires it.
Data Sharing
Service providers
- Google: Authenticates your account and returns the basic profile and verified email scopes that you approve.
- Stripe: Processes payments, Checkout, the customer portal, invoices, and subscription events.
- Cloudflare: Provides hosting, security, data storage, and the text and speech processing used to deliver MantraStream.
We share only the data needed for sign-in, billing, security, and text or speech processing. Each provider handles that data under its own terms and privacy commitments.
Legal disclosures
We may disclose information if compelled by law, court order, or lawful request from public authorities. If a request is overly broad, we contest it where feasible.
Data Retention and Security
Retention
- Account and subscription state remain while the account is active and until a verified deletion request is completed, subject to financial or legal retention duties.
- Application sessions expire after 30 days and can be revoked earlier by signing out. Expired session records are deleted on a regular schedule.
- Payment event identifiers are retained to prevent duplicate billing updates. They do not contain complete payment details.
- Daily usage totals are retained for cost control and operational review. They do not contain prompt text.
- Personalized audio remains on your device and is removed automatically over time. Clearing site data removes local goals, settings, and audio.
- Operational logs are kept only as long as needed for security, reliability, and legal obligations. Private goal text is excluded from those logs.
Safeguards
- Encryption in transit via HTTPS everywhere the service is available.
- Service credentials are kept separate from the website and are not made available to visitors.
Your Choices and Rights
Manage or delete data
- Update goals and preferences directly inside the app.
- Clear the site's browser data to remove goals, settings, and audio saved on that device.
- Cancel a subscription through the Stripe customer portal.
- Request account deletion by emailing support@mantrastream.com from the verified Google address used for the account. We verify the request before deleting account, session, subscription, and usage data that we are permitted to delete. Stripe may retain transaction records where law requires it.
Cookies and local storage
We use strictly necessary cookies for sign-in, your active session, and security checks. On-device storage holds goals, player settings, and audio. We do not run third-party advertising or social tracking scripts.
Children’s privacy
MantraStream is not directed to individuals under 16. If you believe a minor has provided personal data, contact support@mantrastream.com so we can delete it promptly.
Cross-Border Data Transfers
Google, Stripe, and Cloudflare operate internationally. Data may be processed in regions described in their service documentation and agreements. Where required, transfers rely on applicable contractual and legal safeguards.
Updates to This Policy
When this policy changes, the published page and effective date are updated. Any additional notice depends on the nature of the change and applicable law.
Effective date: August 14, 2026
For questions about this privacy policy or data practices, email support@mantrastream.com.