Privacy & GDPR/PDPA Notice
Privacy Policy
We designed ManaBrain to keep your data private. This policy explains what we collect, how we use it, and how you can exercise your rights under GDPR, PDPA, and similar regulations.
Contact
If you have questions or requests (including data access or deletion), reach us at narpdevelopments@gmail.com. You can also submit a removal request via the Data Deletion page.
Data We Collect
- Account data (email, auth provider ID).
- Device & diagnostics (for crash/error logging).
- Collection data you choose to sync (cards, decks, preferences).
- Payment & subscription metadata (handled by store/processor; we do not store card numbers).
How We Use Data
- Operate the ManaBrain app and web experience.
- Personalize recommendations (decks, cards, prices, legality).
- Security, fraud prevention, and abuse detection.
- Compliance with GDPR/PDPA/CCPA obligations.
Your Rights
- Access, correct, or delete your data at any time.
- Opt-out of marketing communications.
- Request data export or data deletion via the Data Deletion page.
Data Storage & Retention
- Data is stored in secure, access-controlled infrastructure.
- Backups are encrypted at rest and in transit.
- Retention is tied to your account lifecycle; deletion requests remove personal data within statutory timelines.
Third Parties & Processors
- Analytics (GA4) for product insights.
- Payment processors and app stores for subscriptions.
- Error monitoring/logging for reliability and fraud prevention.
- We do not sell personal data or collection data.
Children's Privacy
- ManaBrain is not directed to children under 13 (or the minimum age in your jurisdiction).
International Transfers
Where data crosses borders, we apply appropriate safeguards (such as standard contractual clauses) and minimize the personal data transferred.
Updates
We may update this policy as the product evolves. We will notify users of material changes through the app or via email.