Violet Shield — Privacy Policy

1. Information on your device

• Your playlists, favourites, session history, settings, first name if entered, and imported music are stored by the app on your device. These items are not automatically uploaded to Light Mandalas.
• Bluetooth connects the app to your Violet Shield lamp and, when used, a Mandala Scan sensor. Heart-rhythm readings are processed on the device and are not automatically sent to Light Mandalas, RevenueCat or the AI provider.
• Your operating system may include eligible app data in its backup or device-transfer services, depending on your settings. Those services are controlled by your operating-system provider.
• We do not show advertisements, use advertising tracking, or sell personal data. Subscription records and technical service logs are used to operate the features described in this policy.

2. Information sent for online features

App updates

The app sends its name, version and platform to the Light Mandalas AppSync service to check for available or required updates. As with other internet requests, the receiving service can see the connection's IP address.

Activation codes

If you enter an activation code, AppSync receives that code, a randomly generated installation identifier, device model, operating-system version, app version and platform. This information verifies the code, links the permitted device, and supports activation, removal and misuse prevention.

Subscriptions

RevenueCat manages and verifies Premium subscription access. It receives an app user identifier created from a device-generated key, purchase and subscription records, product identifiers, subscription status, and technical information such as platform, app and operating-system versions. The identifier is used to link a purchase to the app; it is not your name or an advertising identifier. Subscription status may be checked when the app opens, returns to the foreground, or uses Premium.

• iOS: Apple processes App Store purchases and provides purchase information used to verify access through RevenueCat.
• Google Play Android: Google processes Google Play purchases and provides purchase information used to verify access through RevenueCat.
• Direct Android APK: If you choose a card subscription, a RevenueCat Billing checkout opens in your browser. RevenueCat and Stripe process the checkout, including your email address, payment details, any required billing information, subscription records and information needed for payment security. Your app user identifier is included in the checkout link to connect the purchase to your app. Email is used for receipts, subscription management and purchase recovery.

Violet Shield does not collect your full card number or card security code. Payment details are entered with the payment provider. Light Mandalas may receive subscription status, receipts and limited billing or payment-method information needed for support and accounting.

Create with AI

Create with AI is optional. Before your first request, the app asks for your agreement to send the text you enter. AppSync receives that text, the app language, app and platform information, an installation identifier, and either your activation code or a subscriber identifier with a public key and signed proof used to verify access. Your private signing key remains on your device.

AppSync sends your request text, playlist instructions and relevant language information to OpenAI to generate a playlist. Activation codes and subscriber proof are used by AppSync for access checks and are not needed as part of the AI prompt. We retain request and response records as described below for troubleshooting, service quality and misuse prevention.

Please avoid entering names, contact details, medical information or other sensitive personal information into Create with AI. Information you type into the request is sent for processing even if that information would otherwise remain on your device.

Support

If you contact us, we receive the information you choose to provide, such as your email address, message, receipt reference or activation details. Please do not send full card details, passwords, private keys or purchase-recovery links.

3. Device permissions

Bluetooth or Nearby devices permission is used to connect to supported hardware. Android 10 and 11 may require location permission to discover Bluetooth devices; the app does not use that permission to collect or track your geographic location. Notifications and background playback permissions support running sessions. Access to imported music is limited to the files you select through the device's file picker.

You can manage these permissions in your device settings. Refusing a permission may prevent the related hardware or playback feature from working.

4. Service providers and international processing

We use Light Mandalas AppSync for updates, activation and AI access; RevenueCat for subscription management; Apple or Google for store payments; Stripe for direct card payments; and OpenAI for AI generation. We share information needed for the relevant service and may disclose information where required by law or necessary to investigate fraud and protect the service.

These providers may process information outside your country, including in the United States. Their privacy information explains their processing, safeguards and retention:

• Apple Privacy Policy
• Google Privacy Policy
• RevenueCat Privacy Policy
• Stripe Privacy Policy
• OpenAI Privacy Policy and API data privacy information

We use encrypted HTTPS connections for online requests and device security facilities for subscription signing keys. No storage or transmission system can be guaranteed completely secure.

5. How long information is kept

• Local app data: remains until you remove it, clear app data or uninstall, subject to your device's backup and secure-storage behaviour. Uninstalling may leave operating-system backups or some secure-storage records.
• Activation records: are kept while the code is active and as needed afterwards for support, security and resolving disputes.
• AI request text and generated output on AppSync: are configured for a 30-day retention period, with older content cleared by routine cleanup. Technical request records, including status, timing, language, service identifiers and IP address, are configured for removal after 180 days. Routine cleanup can take additional time to complete.
• Billing and support records: are retained as needed to manage subscriptions, respond to requests, resolve disputes and meet accounting or legal obligations. Payment and AI providers apply their own retention rules. OpenAI's API may retain inputs and outputs for up to 30 days for service and abuse monitoring, with exceptions described in its API data policy.

Copies required for legal obligations, security investigations or backup recovery may take longer to remove. Deleting the app does not delete records already held by us or the payment providers.

6. Your choices and privacy requests

• The app's free presets, frequency library, playlists, Mandala Scan and Music Light do not require a Premium subscription or activation code.
• You can withdraw agreement to send AI requests in the app's Create with AI settings. This stops future AI requests; it does not automatically erase earlier requests or cancel a subscription.
• You can remove an activation code from the device through the app's activation settings. Subscription cancellation is handled by the provider where you purchased it; see the Subscription Terms.
• Contact info@light-mandalas.com to request access, correction or deletion of data linked to your app, activation or AI requests. Where applicable, you may also request restriction or portability, object to processing, withdraw consent, or contact your local data-protection authority.

We may ask for information needed to verify that a request relates to your records. We do not need your private signing key or full card details. Some records may need to be retained to meet legal obligations or resolve disputes. Removing data does not itself cancel recurring payments.

7. Children

Violet Shield is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided personal data through the service, contact us so we can investigate and take appropriate action.

8. Wellness notice

Violet Shield supports wellness and relaxation practices. It is not a medical device and does not diagnose, treat or cure any condition. AI-generated playlists are not medical advice.

9. Changes and contact

We will update this page when our practices change and revise the date above. If a change requires additional consent, we will request it through the relevant feature.

Light Mandalas Co., Ltd.
info@light-mandalas.com
light-mandalas.com