Last updated: October 8, 2026
This Privacy Policy describes how Light Mandalas Co., Ltd. handles information when you use the Mandala Breeze mobile application, including device control, Premium subscriptions, activation codes, and Create with AI.
Mandala Breeze connects to compatible Mandala Breeze and Mandala Scan devices through Bluetooth. Basic device features operate locally. Subscription verification, activation and version checks, and Create with AI use online services as described below. You do not need to create a separate Light Mandalas account to use the application.
For the purposes of this Privacy Policy:
Bluetooth connection details, device readings, scan results, preferences, and saved programs are processed on your Device for the features you use. The current iOS application does not automatically upload raw sensor readings or scan results to our AI service. If you include a result or other personal information in an AI message or a support request, that information is transmitted with your request.
Apple processes App Store purchases and payments. We use RevenueCat to manage Premium access and purchase restoration. RevenueCat receives an app user identifier, purchase and transaction records, product identifiers, subscription status, and technical information needed to provide its service. The app user identifier is derived from a signing identity stored on your Device; it is not your name or email address. It can still link subscription activity to an app installation or purchase.
Our server verifies subscription status with RevenueCat when you request subscriber access to Create with AI. We do not receive your full payment card details or Apple account password.
Our AppSync service receives the activation code, when supplied, an app device identifier, device name where supplied, platform, app and operating-system versions, and connection information such as your IP address. These records support code activation, device limits, access checks, updates, troubleshooting, and service security. Activation records may also contain contact details provided when a code is issued or when you contact us.
When you choose Create with AI, your message is sent to our AppSync service and then to OpenAI to generate a playlist. OpenAI receives the message, requested language, and playlist instructions and catalog. Our current playlist integration does not add your activation code, RevenueCat identifier, or raw sensor readings to the model input.
AppSync also processes your language, time zone, app and device identifiers, subscription or activation verification details, request authentication information, and generated playlist. It records messages and responses for troubleshooting, along with technical request records and daily usage counts. We use your time zone to apply the daily playlist allowance.
AI messages may contain personal or health-related information if you choose to enter it. Please avoid including names, contact details, medical records, or other sensitive information that is unnecessary for a playlist request. Create with AI is for wellness and relaxation support and is not a medical service.
If you contact us, we receive the contact details, message, and attachments you choose to provide so that we can respond.
The Application uses Bluetooth to discover, connect to, receive readings from, and control compatible devices. Bluetooth permissions are used for these device features. Bluetooth scanning is not used to determine your geographic location. You may manage Bluetooth permissions in your Device settings; disabling them prevents the relevant device features from working.
The current Application does not use advertising SDKs or collect data to track you across other companies' apps and websites for advertising.
Saved programs, preferences, and locally saved results remain on your Device until you remove them or the applicable app data. Some identifiers are stored in the operating system's Keychain and may survive reinstallation. Deleting the app does not cancel an App Store subscription or automatically delete server or purchase records.
AppSync's routine AI-history cleanup removes message and response content from records older than 30 days and deletes AI-history records older than 180 days. Cleanup occurs during service operation, so removal is not guaranteed at the exact expiry time. Other activation, purchase-verification, usage, security, and support records are retained as needed for those purposes and applicable legal requirements. Backup copies may remain until they are replaced or expire.
Our service providers also apply their own retention practices. We request that OpenAI not store responses as retrievable API application state; this does not eliminate OpenAI's separate abuse-monitoring or other permitted retention. See OpenAI's API data controls.
We share information needed to provide the Service with Apple for App Store purchases, RevenueCat for subscription management, OpenAI for AI playlist generation, and hosting providers for our online services. Information may also be disclosed when required by law or necessary to protect the Service and its users. We do not sell your Personal Data.
These providers may process information in countries other than your own. Their relevant terms and privacy information are available here:
Online service connections use HTTPS. We restrict administrative access to server records and use signed requests to verify subscriber AI access. These measures reduce risk but cannot guarantee that every transmission or storage system is completely secure.
You can choose not to use Create with AI, manage device permissions, and remove locally saved content through the available app controls. Manage or cancel an App Store subscription through your Apple account's subscription settings.
You may contact us to request access, correction, or deletion of Personal Data associated with your use of the Service, subject to applicable law and records we need to retain. To locate relevant records, we may ask for an activation code, app identifier, or purchase reference. Do not send a payment card number or account password. Requests concerning purchases may also require action through Apple; deleting app data does not cancel a subscription.
The Application is not directed to children under 13. If you believe a child has provided Personal Data to our online services, please contact us so that we can investigate and address it.
The Application and this policy may contain links to other websites. Those websites apply their own privacy policies. Please review them before providing information.
We may update this Privacy Policy as the Application or our data practices change. Updates will be posted on this page with a revised last-updated date.
For questions or privacy requests, contact Light Mandalas Co., Ltd.: