Amani Privacy Policy

Effective date: November 6, 2026

Amani is operated by Nauman Mohiuddin, an individual developer based in Canada ("Amani", "we", "us"). You can reach us about privacy at nmohiuddin7@gmail.com. Full policy online: https://amaniapp.pages.dev/privacy.

This policy explains what Amani does with information, in plain language. The short version: Amani works on your device. There is no Amani account, no Amani server that stores your content, no ads, no tracking and no analytics. Your name, answers, journal, moods and voice notes stay on your device. The only information that leaves it is what the App Store or Google Play and RevenueCat need to process your subscription, plus the ordinary technical details of downloading voice recordings for your language.

1. What stays on your device

• Wellness vault. Journal pages, drafts, mood check-ins, intentions, rituals, saved insights and optional voice notes are encrypted on your device (AES-GCM). The encryption key is kept in the secure storage of your phone (iOS Keychain or Android Keystore through Expo SecureStore). Amani does not upload, sync or back up this data to any Amani server. If you lose the key (for example by erasing the app's data or changing phones without exporting), we cannot recover it.
• Profile and preferences. Your first name, onboarding answers (goal, obstacles, tone), language, voice and sound choices, reminder times, streak, saved affirmations, milestones and progress are stored on your device in the app's local storage. This storage is not encrypted by Amani beyond what your device provides. Please do not put sensitive information in your name field.
• Affirmations and sessions. Affirmations are chosen on your device from the library built into the app. The guided sessions and spoken affirmations are pre-recorded audio. English recordings ship inside the app; for other languages, the app downloads that language's recordings once and keeps them on your device (see section 2). Nothing is generated by a cloud service while you use Amani.
• Voice notes. The microphone is used only if you choose to record a voice note. Recordings are limited in length, saved encrypted on your device, and are never sent to us or to anyone else.
• Reminders. Daily reminders are local notifications scheduled on your device. We do not use push notification tokens and do not send notifications from a server.
• Home Screen and Lock Screen widgets. To show today's affirmation and your streak, the app shares a small amount of display data (for example the affirmation text, your streak count and language) with its own widget through an App Group on your device. This data does not leave your device.
• Export. In Settings you can export your wellness data as a file. Where you save or send that file is your choice, and the destination app's own policy applies to that copy.
• Sharing. If you share an affirmation or a card, you choose the destination app, and that app's privacy policy applies.

2. What is sent off your device

Purchases. Subscriptions are processed by Apple (App Store) or Google (Google Play); we never see your card number. We use RevenueCat to manage and verify subscriptions. RevenueCat receives an anonymous app user ID, your purchase and subscription history and entitlement status, and technical details such as store country and app version. We use this only to unlock premium features and restore purchases. RevenueCat does not receive your name, answers, journal or any other content you create in Amani.

Voice downloads. When you choose a language other than English, the app downloads that language's voice recordings from our content host (Cloudflare). Like any download, this request carries your device's IP address and basic technical details (such as the app version), which the host processes to deliver the files. The request contains nothing about you or your use of Amani, and we do not use it to identify or track you.

Nothing else. Amani does not send your name, answers, journal, moods, voice notes or affirmations to us or to any AI provider. We do not use advertising SDKs, analytics SDKs, crash-reporting SDKs that track you, or data brokers. We do not sell or share your information for advertising and we do not track you across other companies' apps or websites.

3. Service providers

• RevenueCat: subscription management and verification.
• Cloudflare: hosting and delivery of the voice recordings for non-English languages.
• Apple and Google: payments, subscription billing and app distribution, under their own privacy policies.

These providers process data to provide those features and may keep it for the periods set out in their own policies. Data may be processed in countries other than yours. RevenueCat and Cloudflare may process data in the United States and other countries. Where the law requires it, these transfers rely on the providers' standard contractual clauses or equivalent safeguards.

4. How long we keep data

• On your device: until you delete it, delete the app or erase its data. Operating-system backups (for example iCloud or Google backups) may contain app data according to your device settings.
• Purchase records: kept by Apple, Google and RevenueCat as needed to provide and verify subscriptions and meet legal obligations.

We hold no other personal information about you, so there is nothing else for us to keep.

5. Your choices and rights

In Settings you can change your preferences, turn off reminders, delete your private wellness history, export your data, and use "Delete my data" to erase everything Amani keeps on this device. Deleting your data does not cancel a subscription; manage subscriptions in your Apple ID or Google Play settings.

Depending on where you live (for example under the GDPR, UK GDPR, LGPD or CCPA/CPRA) you may have the right to access, correct, delete or export your data, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. Almost everything Amani knows about you is already on your device under your control. For purchase data held by Apple, Google or RevenueCat, or for any question, contact nmohiuddin7@gmail.com and we will respond within the time required by law. Where the GDPR or UK GDPR applies, we process purchase data because it is necessary to provide the subscription you asked for (contract) and to meet legal obligations; delivering voice downloads relies on our legitimate interest in providing the app's audio. In Canada, we handle personal information in line with PIPEDA and applicable provincial laws.

6. Children

Amani is not directed to children under 13 (or the higher minimum age in your country; under 16 in some parts of the European Economic Area). Please do not use Amani if you are below that age. If you believe a child has provided personal information, contact nmohiuddin7@gmail.com and we will delete it.

7. Security

Wellness data is encrypted on your device. Purchase traffic to the stores and RevenueCat uses HTTPS. No system is perfectly secure, so please keep your device protected with a passcode or biometrics.

8. Not medical advice

Amani is a self-reflection and mindset tool. It is not a medical device and does not provide diagnosis, treatment, therapy or crisis support. See our Terms of Use.

9. Changes

If we change this policy in a way that matters, we will update the effective date and, where required, tell you in the app. The latest version is always available in the app (Settings > Terms and privacy) and at https://amaniapp.pages.dev/privacy.

10. Contact

Nauman Mohiuddin, an individual developer based in Canada
Email: nmohiuddin7@gmail.com
Support: https://amaniapp.pages.dev/support