Skip to content
Manifestationby AGI Research Lab LLC

Updated 29 October 2026.

Manifestation privacy policy

Updated 29 October 2026. This policy describes Manifest v0.95 and retained services for earlier versions. Account recovery depends on service availability; guest use remains available.

This policy covers the iPhone app Manifest Your Future: All in 1, shown as Manifest on your Home Screen and called Manifestation on this website. It is published by AGI Research Lab LLC, which is responsible for the personal information described here. For privacy questions or requests, contact 683lab@gmail.com.

The short version

  • Your futures, daily progress, journal and recordings are stored on your iPhone. You can use the app as a guest. Manifestation does not automatically upload or sync this private journey to our servers. Signing in is not a backup. In-app photos and voice journal recordings are excluded from iCloud and computer backups; export and save an encrypted backup to preserve them.
  • Optional Apple or Google sign-in supports encrypted journey-file recovery. It does not automatically upload your journey or synchronize devices. Our separate recovery service stores account and app-verification information and protected recovery keys; it does not receive your journey file or its contents.
  • The optional Energy Pool receives the stories and moderation requests you choose to send. Its community identity is separate from your recovery account.
  • Apple scene creation uses Apple’s Image Playground on supported devices. Depending on the OS, Apple can process requests using Private Cloud Compute; this is separate from Manifest’s on-device writing suggestions. New online Gemini image creation is unavailable in v0.95. Existing online balances and available results remain recoverable through the optional account service.
  • Apple handles App Store payments. Manifest verifies local Pro access, early member pricing eligibility and retained photo-import access from Apple’s signed purchase information on your device. A public membership-offer check sends no purchase history or private journey content to our hosting service. Apple can independently send signed subscription events to our configured server endpoint, even without Manifest sign-in; the handling is described under Purchases. Older account-linked purchase recovery is separate and can send signed transactions to our service. We do not receive payment-card details.
  • We do not sell personal information, use your journal for advertising, or include advertising or product-analytics SDKs in the iPhone app. Limited account-activity counts, service reliability and abuse-prevention records are described below.
  • The few providers that help run these features protect your information at least as well as this policy does, and use it only to provide their service. Visiting this website is distinct from using the iPhone app.

Your private journey on the iPhone

Depending on the features you use, the app stores preferences, goals and their details, envisioned scenes, a default photo of you if you choose one, achievement dates and supporting photos, alarm settings, ritual and activity history, focus sessions, journal entries, practice answers, voice recordings and transcripts, tags and links to the answers where you use a recording, reading bookmarks, sound choices and month-tagged counts of successfully saved generated scenes.

Imported images are copied through Apple's system picker. The app does not need access to your entire photo library and does not change your originals. Its private image copies are normalized and have source metadata such as location removed. Local image fingerprints can detect reuse; they do not identify faces or verify that an achievement happened. The camera is used only when you take a selfie in Create a scene.

Manifestation does not automatically upload or sync these records to our servers. Signing in does not publish your progress or give the account console access to your journey. You decide whether to submit an Energy Pool story or share an achievement, recording or export. Account requests, the Energy Pool, online scene generation and morning weather have the separate data handling described below.

Apple device backups are separate from our account service. Some app data, including the local progress database and certain preferences or drafts, may be included according to your device-backup settings. In-app photos and voice journal recordings use iOS file protection and are excluded from iCloud and computer backups. Do not assume reinstalling the app or signing in restores the complete journey. When protected export is available, save a protected journey file somewhere you control and keep access to its owning account.

You can keep recording and reviewing local progress without a connection or an account. Some speech features first need Apple language assets; the natural voice comes with the app. Signing in, creating or reopening a protected export, fetching new lessons or weather, recovering earlier online scenes and submitting a story need an internet connection. An account-service outage does not erase or lock the journey already stored on the iPhone.

Local diagnostics use bounded event codes, counts and coarse time buckets rather than the content of your journal. They are not automatically uploaded by the app. Information you deliberately send with a support request is handled as support correspondence.

Optional account recovery

Signing in is optional. Opening the account screen as a guest does not itself contact the recovery service. Choosing a sign-in provider or checking the connection does. When you are signed in, the app may check the existing connection and renew its session.

Apple or Google verifies your identity. The app does not ask for your provider password. The configured native flows do not request your name, email address or contacts for the recovery account: the service uses the provider's stable account identifier and its own randomly generated account ID. The provider may show account information in its own sign-in screen. Provider identifiers are still personal information even when they are not an email address.

You may add or change an optional display name and choose a built-in account symbol in Settings. These are private account details, not a public profile or Energy Pool signature. They are saved to the account service, so they can appear when you sign in on another device. Authorized account operators can see these details for administration; do not use the field for sensitive journal information. You may clear the name at any time. We do not import your provider’s name or photo.

Our account service uses Cloudflare infrastructure. To provide and protect accounts and recovery it processes:

  • the provider identifier, the app's account ID and explicitly linked sign-in methods;
  • your optional chosen display name, built-in account-symbol selection, account creation date and profile revision/date;
  • one last-successful-account-activity timestamp, updated at most once per hour, for recent account-activity counts;
  • Apple App Attest app/device verification material, public verification keys, counters and enrollment records;
  • short-lived sign-in challenges and session records, including hashed access/refresh-token references and timestamps;
  • protected provider credentials where needed for authentication or revocation;
  • an identifier and encrypted recovery key for each protected export;
  • existing online-scene credit balances and request records, and signed Apple transaction/renewal information when you use older account-linked purchase recovery (see Purchases and Create a scene);
  • deletion and operational records needed to prevent removed accounts from being restored by old data or to finish provider revocation.

Ordinary requests expose connection information, including IP addresses, to the hosting provider. The account service uses a hash derived from the request IP for rate limiting. Optional service-health metrics contain aggregate route categories, result categories, hour buckets, request counts and elapsed times; they do not contain journal content, account identifiers, tokens or full request bodies.

Account credentials on the iPhone are kept in this device's Keychain and are not included in journey exports or iCloud Keychain synchronization. Linking another provider is an explicit action. We do not merge accounts just because two providers may use the same email address.

Encrypted export and recovery

In Settings → Account & backup, you can sign in and choose to create a protected journey file. Its contents are encrypted on the iPhone before the share sheet opens. “Backup prepared” means the file is ready to save, not that it has been saved outside the app. You choose where to save the file, such as Files or a storage provider you trust. The recovery service does not receive the file, photos, recordings or transcripts.

Reopening a protected file requires the account that owns it, a compatible verified Manifestation app, an internet connection and the service's surviving recovery key. Signing into another device alone does not transfer the file; you must bring the saved file with you. A different account cannot request its recovery key through the app.

This is account-recoverable encryption, not a claim that the service operator can never access a key. The service can release a recovery key after verification; someone with both the necessary service keys and a copy of an export could decrypt it. Protect exported files and your provider account accordingly.

Signing out preserves the journey already on your iPhone. Deleting the recovery account removes its recovery keys, so its protected exports can no longer be reopened through recovery. A previously restored local journey and copies you saved outside the app are not erased by account deletion. Older unencrypted exports remain unencrypted; importing one and creating a protected export does not change old copies.

Recent account activity means successful authenticated account operations, such as sign-in, session renewal or a profile check. It is not a count of daily app visits and does not include guest use or offline journal activity. We do not send recordings, goals, practice answers or a timeline of app events to produce these counts.

Voice recordings, transcription and local intelligence

The app uses the microphone with permission when you explicitly record a voice answer, journal entry, celebration, bedtime message or your own wake-up call, and during Smart Wake nights you start (see below). It saves your recordings locally. Practice/journal recordings can be transcribed with Apple's on-device speech tools; language assets may need an optional download. The original recording remains available if transcription cannot finish. Recordings and transcripts are not sent to our account service or the Energy Pool.

The app’s Apple on-device intelligence features can help phrase an answer, prepare guidance or vary encouragement using relevant information in the app. Those features run on the iPhone and do not send that text to our servers. Availability depends on the device, language and model readiness; prepared guidance remains available when they cannot run. Online scene generation sends data to our service only when you choose it, and is described below; cloud coaching remains limited to development builds. Both are separate from the on-device features above.

The Kokoro natural voice comes with the app and runs on your iPhone: nothing is downloaded for it, and your journal and narration text never leave the device. Only if the app’s own voice files were damaged would Manifest offer to download them again from Hugging Face (huggingface.co); Hugging Face and its download network would then receive ordinary connection information, such as your IP address, for that transfer; see Hugging Face’s privacy policy. Narration is generated locally from text on the iPhone. Recorded guidance bundled with the app is separate from generated narration.

Create a scene

The full bundled image library is available without sending a request to an image service. If you choose Apple scene creation, Manifest passes your chosen words and any reference photo to Apple’s Image Playground interface. It does not send that request to our Gemini service. Image Playground availability depends on your device, OS, region, language, settings and Apple’s model readiness. Processing can use Apple’s Private Cloud Compute; it is not an unconditional on-device-only feature. See Apple’s Image Playground explanation. Saved results remain in your local Scene library until you remove them or share a copy. Free allows 9 new generated scenes successfully saved per calendar month on this iPhone; Pro imposes no Manifest save quota. The calendar month resets at 00:00 UTC on its first day. The allowance counts completed saves on the device, not attempts or cancelled or failed saves. Library scenes, reusing saved scenes, personal-photo imports and edits do not consume it. Apple’s independent device, availability and service limits still apply to both plans. These local usage counts are not sent with membership-offer metadata.

You can select a photo with Apple’s picker or take one when the app offers its camera. A default photo is saved on your iPhone; it goes to Photos only if you choose to save it there. Use only a photo you have permission to use. Image creation does not verify an achievement or change a real-world outcome.

Earlier online image requests and recovery: new online generation is unavailable in v0.95. You can choose to sign in to check an existing balance or recover a result while it remains available. Earlier requests sent the selected words and, only if included, a reference photo through our Cloudflare-hosted service to Google’s paid Gemini API. The private journal, recordings and full goal history were not attached. Saving a recovered scene is a separate choice.

For its paid Gemini service, Google does not use prompts or responses to improve its products. Its published abuse-monitoring policy describes 55-day retention of submitted content and responses for policy enforcement and required disclosures; this is separate from our result-collection window. See Google’s paid-service terms and abuse-monitoring policy.

Our current iOS image service does not persist the prompt or reference photo. Generated output is held in process memory, available to collect for up to 10 minutes, and is removed on delivery, cancellation or expiry cleanup; a service restart can remove it sooner. Output is not written to the service database or a results bucket. Account-linked request fingerprints, status, timestamps, credit balances and purchase verification records are stored separately for recovery, accounting and duplicate prevention. A request fingerprint is not an anonymous record. Provider infrastructure and historical deployments have their own handling; contact us about an earlier request.

Development-only cloud coaching and narration

Cloud coaching is not part of the public release; it remains limited to enabled development builds. When enabled, choosing New ideas in the goal editor sends that future’s category, title, target summary and accumulated focus minutes through the same service to Google to suggest a mantra, next step and scene idea. It does not send the whole journal, individual focus photos or voice recordings.

Current narration uses local speech generation or recorded guidance. Earlier test versions offered cloud narration that sent the requested script through our Worker to Google or ElevenLabs; the current app does not call those legacy speech services. Removing previous cloud narration in voice settings clears its local saved narration and consent; it does not itself erase a provider’s historical records. Contact us about an earlier submission.

Morning weather

Morning weather is on when you first set up the app. At the end of setup, iOS asks whether Manifest may use your location while you use the app; if you don't allow it, no forecast is requested. You can turn weather off at any time in Settings → Morning ritual or in an alarm's More options. If you set up the app before 14 October 2026, your earlier choice is kept. When weather is on and location is allowed, the app sends your location to Apple Weather (WeatherKit) only to request a forecast, and shows it in your morning ritual with the Apple Weather mark and a link to Apple's weather data sources. It saves a location rounded to two decimal places on the iPhone as a hint for a later forecast, not a location trail.

Turning morning weather off in the app stops its requests, cancels pending weather work and removes that saved location and forecast. Removing location permission has the same effect when the app receives the permission change; late results cannot restore the cleared data. If Apple Weather is unavailable, the weather stays hidden. There is no alternate weather provider.

Earlier test builds (2026.9.82 and before): if WeatherKit was unavailable, the app could request a forecast from Open-Meteo using coordinates rounded to two decimal places. Open-Meteo received those coordinates and ordinary connection information such as an IP address. Its published policy describes troubleshooting logs that may include coordinates and are deleted after 90 days; see Open-Meteo’s privacy policy. Those older builds could continue forecasting from a previously cached location after location permission was revoked. The new behavior does not erase information already received by a provider. Contact 683lab@gmail.com with questions about an earlier request.

Sleep, Apple Health and the Watch

The optional sleep summary reads the sleep Apple Health has already recorded on your iPhone, with your permission. Turn it on in Settings → Morning ritual → Sleep from Apple Health. Access is read-only: the app never writes to Apple Health. The summary looks back at a past night; it does not diagnose sleep stages or decide when Smart Wake or an alarm rings. Health records stay on the iPhone. They are not sent to our account or Pool services or used for advertising.

In builds where Smart Wake is available, it runs only for a night you explicitly start. With the iPhone source, microphone sound is reduced to activity features locally and raw analysis audio is discarded. Before a chosen listening-start time, the microphone is not opened. The app must be in the foreground when phone listening begins; choosing a later time does not bypass that requirement. Watch-assisted wake is off by default. When enabled, movement is processed on the Watch. If you separately allow heart-rate access, recent readings from that Watch can support the estimate during the active wake window. Up to 256 readings from the preceding 15 minutes are queried; they stay in memory on the Watch and are cleared when sensing stops. Manifest does not save or transmit these readings, start a workout, or force continuous heart-rate sampling. Without recent readings, the estimate uses movement only. Wake plans and session status pass between your paired devices. These estimates are not sleep-stage measurements. A separately scheduled iPhone alarm remains set; that does not guarantee that either device will alert or that you will wake. Watch sensing requires an explicit Start for tonight action on the Watch and includes a wrist vibration. You can switch Watch-assisted wake off on the Watch; your iPhone alarm stays set. Public availability depends on physical-device qualification; earlier test-build handling remains described here.

The app keeps up to 14 past Smart Wake summaries and the current plan in protected local storage excluded from journey exports and device backup. Delete that history in Settings; stopping phone sensing can also request cancellation on the paired Watch. Deleting history is not confirmation that the Watch has stopped. Minimum connection and cancellation ownership records remain until cleanup is confirmed, so a disconnected Watch is not falsely reported as cleared. Some older engineering builds may have left legacy sleep records, which have a separate deletion control. Apple Health records remain under your Health controls.

Alarms, notifications and sharing

Manifest covers its window in the app switcher and offers a separate setting to hide content during screen recording or sharing. This cover is not biometric authentication: a person using your unlocked iPhone can open the app.

App-level locking and alarms: Apple documents that alarms from an app hidden or protected using iOS’s app-level Require Face ID / Touch ID / Passcode feature can fail. This is different from locking your iPhone normally. Keep using your device passcode and Lock Screen; do not use the app-level locking or hiding feature for Manifest if you rely on its alarms. See Apple’s AlarmKit FAQ.

iOS receives the alarm schedules and labels needed to deliver your alarms. An alarm label can appear on the Lock Screen. Optional reminders and focus notifications use generic notification text. The widget reads its app data on the device and does not make its own network requests. If you pick a song you own from your music library as an alarm sound, the app keeps a short excerpt on the iPhone for the alarm; it is never uploaded.

When you choose to share an achievement certificate, report, scene, recording or file, the destination receives that item. Review the preview and included content first. If you choose Save Image, iOS asks once whether Manifestation may add that image to Photos. This add-only access cannot see your library or change existing items. The saved copy follows your Photos and iCloud settings. Removing the app's copy does not remove copies at another destination. Opening a citation, support link or privacy page also contacts that website.

Energy Pool

Reading published lessons and stories does not require the recovery account. Ordinary service requests still expose connection information to the host. Offering a story sends the words and signature you choose, an optional goal category and an anonymous per-install token; the service stores a hash of that token. Your private goals, recordings, transcripts, images and journal do not accompany the submission.

Submissions are moderated before publication, and reports are reviewed within 24 hours. When moderator email notifications are configured, Resend sends operational notices to 683lab@gmail.com: submission time, character count, story ID, queue counts and review links, or a report’s story ID, status and open-report count. These notices do not contain the story’s words, signature or topic, or the reporter’s identity, reason or words. The editor reads the content in the Pool console. If an edit is offered, you approve it before that version publishes. Reports send the story ID, selected reason and install-token hash. Blocking is a local preference. Withdrawing removes a story from the public feed, subject to short content-cache delays. After withdrawing a story, use My stories → Ask to delete it completely, or email 683lab@gmail.com with the story ID. Until then, the story and its moderation details stay on the Pool server, including declined and withdrawn stories. Published stories carry a short code derived from that anonymous token so readers can block a writer on their own device; the code does not identify you.

Recovery-account deletion does not delete Pool posts, because the identities are separate. Remove posts in the Pool or contact support.

Sound library

When you choose a preview, full-song stream or offline download, Manifest requests that audio from our Cloudflare-hosted sound library. Checking for new sounds requests the collection metadata. Cloudflare receives the requested file address and ordinary connection information, including your IP address. These requests do not include your journal, goals, recordings, Health information, favorite sounds, taste preferences or Apple purchase details. Manifest does not add listening analytics to these requests.

Favorites and less-like-this preferences stay on your iPhone. Downloaded songs are stored locally, excluded from backups, and removable in Sound library → Downloads. Short previews use a separate, purgeable cache capped at 50 MB. Clearing that cache or removing a listening download does not remove audio used by existing alarms, saved mixes, or personal recordings. Audio transfers use Wi-Fi by default; you can allow cellular audio, and Low Data Mode pauses new transfers. Full-song playback and downloads marked Pro require active Pro access in the app; previews remain available to everyone.

Purchases

Apple handles App Store payment and subscription management. The app verifies local Pro membership using Apple’s signed purchase information on the device. This eligibility check does not require a Manifest account, and the app does not upload purchase records for that check. Monthly and Annual plans provide the same Pro features. Apple displays the actual localized price, trial eligibility and renewal terms before a purchase is confirmed.

When early enrollment is offered, it stays open until the owner closes it; no automatic deadline or installation timer is used. Early member price eligibility and the Annual photo-import bonus are derived from verified Apple purchase history on the device, including relevant expired purchases and refunds. A free trial or zero-priced code alone does not establish either paid benefit. After a qualifying paid, non-refunded early member payment, the early member rate stays available to the same Apple Account for life, even after cancellation and return. This retains price eligibility, not free or lifetime Pro access: Pro features still require an active subscription. Restore purchases checks the same Apple Account; deleting a Manifest recovery account does not delete Apple’s purchase history.

Public membership-offer metadata

When Manifest checks membership offer availability, including from the Membership page, it can make a read-only GET request for membership-offer.json, on the existing Cloudflare sound-library host. The response contains public enrollment-availability metadata, not a personalized price or membership grant. Apple remains the source of localized prices and purchase verification. The host receives the requested file address and ordinary connection information, including your IP address. The app sends no receipt, purchase history, journal, goals, recordings, account identifier, device identifier, authentication token or query parameter, and this request does not use cookies. The app keeps a short-lived copy of the public response in memory; it does not add listening or product analytics to this request. Cloudflare’s infrastructure may process ordinary hosting logs under its separate controls; this is not a promise that the provider keeps no connection records.

Apple server notifications and older purchase recovery

Apple can independently send signed subscription events to our configured account-service endpoint, including events for the four current local Pro products, whether or not you sign in to Manifest. These deliveries pass through our hosting service. Our handler verifies the notification and its nested transaction, then acknowledges and discards events for those four local products before looking up an account or storing purchase details. They do not create a Manifest account, add an account purchase record or grant online credits. Hosting providers may still process ordinary connection records under their own controls; this is not a promise of zero provider log retention.

Older purchases linked to online credits use a separate recovery path. If you choose that recovery, the app can send the signed Apple transaction to our account service. The service verifies it with Apple and links product, transaction-chain, renewal/expiry, refund/revocation and credit records to the account. Apple server notifications for a supported, already-linked older purchase can update those account records. We do not receive your payment-card details or attach your journal, recordings or Health records to purchase verification.

Deleting the Manifest account does not cancel an Apple subscription. Manage cancellation through Apple’s subscription settings. Account deletion can remove online credit/result access and backup recovery keys, while local saved work remains on your iPhone. Purchase-chain ownership and deletion records can remain as described below.

Service providers

We share personal information only with the providers below, only for the purpose named, and only as much as that purpose needs. Each provider that processes it on our behalf (Cloudflare, Google for the Gemini API and Resend) is bound by a written data-processing agreement to protect it at least as well as this policy describes, to use it only to provide its service to us and not to sell it. The services you use through your iPhone’s own system features (Sign in with Apple, Google sign-in, Apple Weather, Image Playground, App Attest, the App Store and TestFlight) and the Hugging Face repair-download host handle information under their own privacy policies, which give it the same or greater protection than this policy; we chose them for that reason.

  • Cloudflare hosts our sound library and public membership-offer metadata, account, image and Energy Pool services, and so processes the requests those services receive, including IP addresses.
  • Google runs the paid Gemini API that makes online scenes (see Create a scene), and Google sign-in if you choose it.
  • Apple provides Sign in with Apple, Apple Weather, Image Playground, App Attest app verification, the App Store and TestFlight.
  • Resend delivers the content-free moderation notices described under Energy Pool.
  • Hugging Face hosts a repair copy of the natural voice files, downloaded only if the app’s own copy is damaged, and receives only ordinary connection information.

We may disclose information if the law requires it, to protect people’s safety, or as part of a transfer of the app to a new owner who keeps this policy’s protections.

Retention and deletion

Retention differs by record. A data-access expiry and physical cleanup are separate: scheduled cleanup removes expired service records, and outages can delay that cleanup. Deletion retries continue until confirmed. The following describes current retention rules, rather than promising that every copy held by every provider disappears at one instant:

  • On your iPhone: your journey stays until you remove it with an app control or delete the app. Keychain sign-in credentials can survive reinstalling; sign out or delete your account to remove them. Copies you saved elsewhere follow that destination's controls.
  • Account and recovery: your account record, linked sign-in identities, profile, linked app-verification records, the time of your last successful account action and your backup keys stay until you delete your account. A backup's key is also erased when you revoke that backup. Sessions last 15 minutes and renew for up to 30 days from your last use; signing out erases the session. Sign-in challenges expire after 5 minutes and are erased within about 15 minutes. App-verification records that never link to an account are erased after 1 day.
  • Account deletion: erases the account record, sign-in identities, sessions, linked devices and backup keys at once. The account database keeps the random account number and the deletion time for 35 days, so the deletion is applied again if we ever restore a backup, and then erase them. The separate legacy commerce service retains an opaque deletion marker and purchase-chain ownership binding to prevent reassignment and late work. These records have no automatic expiry and remain linked rather than anonymous. Pending commerce cleanup is retained until it succeeds; the 35-day account-database period does not apply to those records. If Apple can't be reached at that moment, we keep the encrypted Apple sign-in token and your Apple account identifier for up to 30 days, only to retry revoking the app's access, and then erase them.
  • Earlier online scenes: the current iOS service does not persist prompts or reference photos. Generated output is available from process memory for up to 10 minutes and removed by delivery, cancellation or expiry cleanup; restart can remove it sooner. Request fingerprints, status, times and credits remain with the account until deletion cleanup. Google’s separate retention is described under Create a scene. Purchase ownership/deletion markers are the exception described above.
  • Service health: hourly request counts with no identifiers are kept for 30 days. Our service does not store your IP address; our host's rate limiter counts requests per minute using a scrambled form of it.
  • Energy Pool: stories, their moderation details and reports stay until you ask us to delete them (see Energy Pool). Daily anti-spam counters, tied to your install's anonymous token and to a daily-changing scramble of your network address, expire after 1 to 2 days.
  • Moderation notices and support email: these stay in our inbox while they help us moderate or answer you, and we delete them when you ask.
  • Security records: if we ever revoke an account's sessions for security, a record of that action, without journal content, is kept for one year.
  • Database backups: the account-service operational retention policy limits database backups to 30 days. Restore procedures must reapply later account deletions before reopening access. The legacy commerce ledger, hosting logs and separate support mailbox have independent retention controls; the account database limit is not a promise about all of them. Contact us about a specific record or earlier request.

We use support correspondence to respond to your request. Do not send passwords, sign-in codes, recovery keys, sensitive recordings or journey files unless there is a specific, agreed reason to do so. We will not ask for your Apple or Google password. For a deletion request or question, contact 683lab@gmail.com.

Your rights, including in the EU and UK

Most of your information never leaves your iPhone, so you can see, export or delete it yourself in the app. For information our services hold, email 683lab@gmail.com. We answer within one month and do not charge for reasonable requests. We may need to confirm the request comes from you, for example by asking you to sign in to the app.

Wherever you live, you can ask to access, correct or delete your information, ask us to restrict or stop using it, and receive information you gave us in a portable format; a protected journey file already gives you your journey. Where we rely on your consent, you can withdraw it at any time, for example by turning off a permission in iOS Settings or not sending a request, without affecting what happened before.

If you are in the European Economic Area or the United Kingdom, AGI Research Lab LLC is the controller of the information our services process. We rely on these legal bases:

  • Contract: to provide what you ask for, such as account recovery, encrypted backup keys, online scenes, weather forecasts, Energy Pool submissions and support replies.
  • Consent: for iPhone permissions you grant (such as microphone, camera, location and Apple Health) and for each online scene request.
  • Legitimate interests: to keep our services secure and available, such as App Attest verification, rate limiting with an IP-derived hash, abuse prevention, aggregate service-health metrics and records that stop deleted accounts from being restored. You can object to this use.
  • Legal obligation: where the law requires us to keep or disclose information.

We do not make decisions with legal or similarly significant effects about you by automated means. You can complain to the data protection authority where you live or work; in the UK, that is the Information Commissioner’s Office. We would welcome the chance to help first.

We are based in the United States, and our providers may process information in the United States and other countries. Where EU or UK law requires it, these transfers rely on safeguards such as the EU–U.S. Data Privacy Framework and its UK Extension, or the European Commission’s Standard Contractual Clauses, as provided in each provider’s terms.

This website

This policy page is hosted on agi-thinktank.com. The website has separate hosting, analytics and account features; those are distinct from the iPhone app. See the website privacy page for the website's separate practices.

Adults, security and changes

Manifestation is intended for people aged 13 and older, subject to the App Store age rating and content information shown in your region. It is not a medical service. Use a device passcode and other protections appropriate for a private journal. No system can guarantee absolute security or permanent recovery; keep your chosen file copies and sign-in access safe.

We update this page when material data handling changes. The app's explanations and App Store disclosures should describe the same data handling. Contact us if you notice a difference or need clarification.

Questions and requests: 683lab@gmail.com · Manifestation support.

What changed on 29 October 2026

Added the public membership-offer metadata request to the existing Cloudflare sound host. Distinguished on-device Pro eligibility checks from independent Apple server notifications, including the verified discard path for local Pro events and retained handling for older account-linked purchases. Clarified recurring Pro access, owner-controlled early enrollment, paid early member rate retention and the Annual photo-import bonus. Explained the local Free allowance of 9 successfully saved generated scenes per calendar month and no Manifest save quota on Pro. Updated the app name and intended audience for the 0.95 release. The natural voice remains bundled and generated locally; only a damaged bundled copy can offer a repair download.

What changed on 25 October 2026

Added the optional sound library: audio requests to Cloudflare, local favorites, offline downloads, preview caching, cellular choices and removal controls.

What changed on 21 October 2026

Clarified local Apple membership versus older account-linked purchase recovery, server-held export recovery keys, record-specific deletion exceptions, Apple-managed image processing, and current v0.95 availability. Added the distinction between iOS app-level locking/hiding and an ordinary locked iPhone. The following dated notes describe older versions and do not override the current sections above.

What changed on 14 October 2026

This page now names the App Store app, Manifest: Rise & Rest. It lists the providers that help run the app and confirms they protect your information at least as well as this policy, gives a concrete retention period for each kind of record, and explains your rights, including in the EU and UK. Create a scene is described as it works in the app: Image Playground on the iPhone, the camera selfie and default photo, the Include my photo switch and Google’s paid Gemini API, which does not use requests for training. Our image service holds a finished scene for no more than 10 minutes to deliver it.

Morning weather is now on from the start for new users. iOS asks for location permission at the end of setup, and you can turn weather off at any time. Earlier choices are kept.

What changed on 13 October 2026

Morning weather is now available to everyone as an option, still using Apple Weather only. The sleep summary from Apple Health can now also be turned on in Settings → Morning ritual.

What changed on 12 October 2026

Manifestation is free, with no ads and no in-app purchases, so this page no longer describes checking purchases. Online scene generation is described as 2 free images per account, which cannot be bought.

What changed on 10 October 2026

Online scene generation (personal vision image creation) is now part of the app, replacing the earlier development-only disclosure. This page now describes how an image request sends your prompt words and any photo you choose to our image service and Google’s Gemini API; what our service and Google keep; and that the generated scene is delivered once and not kept by our service. Cloud coaching and cloud narration remain limited to development builds.

What changed on 1 October 2026

Clarified the app's scope, manual backups and device-backup exclusions, account-authorized recovery, Apple-only weather, the voice-pack host, add-only Photos saving, content-free Pool email notices and AGI Research Lab LLC as the publisher. These wording updates do not announce that account-service qualification or App Store release is complete.