Privacy Policy

Last updated: October 16th, 2026

This Privacy Policy describes how Light Mandalas Co., Ltd. collects, uses and protects information when you use the Mandala Wand mobile application (version 6.0 and later) on iOS and Android, including the Google Play edition and the Android edition installed directly from Our website (the "direct edition").

Mandala Wand is a daily light-routine application for the Mandala Wand device. It connects to the device using Bluetooth, plays light programs, Bio-resonance codes and music, and offers optional Premium subscriptions. Create with AI requires an Activation Code and is not included in a subscription. We have designed the Application to collect as little information as possible: most of what you do in the Application stays on your Device.

Interpretation and Definitions

Definitions

For the purposes of this Privacy Policy:

• Application means Mandala Wand, the software program provided by the Company.
• Company, We, Us, or Our refers to Light Mandalas Co., Ltd., 138/1 Soi 10 Moo 9 Tambon Sanpooloei, Doisaket, Chiang Mai, Thailand.
• Device means any mobile phone, tablet, or other device that can access or use the Application.
• Personal Data means information that identifies or can reasonably identify an individual.
• Service means the Application and the online services it uses (version check, activation codes, subscriptions and Create with AI).
• Mandala Wand Device means the physical device controlled by the Application through Bluetooth.
• Mandala Scan Sensor means the optional Bluetooth sensor used by the Mandala Scan feature.
• Activation Code means a code issued by the Company that unlocks Premium features.
• Premium means the paid features of the Application, unlocked by a subscription (bought through the Apple App Store, Google Play, or Our web checkout in the Android direct edition) or an Activation Code.
• You means the individual using the Application.

Summary

• No account is required. The Application does not ask for your name, email address, phone number, location, contacts or photos. (Only the web checkout of the Android direct edition asks for your email address and payment details, to take the payment and send your receipt.)
• The Application contains no advertising or cross-app tracking. RevenueCat processes subscription records and purchase metrics to operate Premium and report subscription performance. We do not sell your information or use it for advertising.
• Your routine, reminders, own programs, session history, Mandala Scan results and imported music stay on your Device.
• Information leaves your Device only when needed for: checking for app updates, Activation Codes, subscriptions (App Store, Google Play or web checkout), and Create with AI (only when You use it).

Information We Collect

Information that stays on your Device

The following information is created and stored only on your Device. It is not sent to Us and We cannot access it:

• Your daily routine, reminder times, settings, language and the name You choose to be greeted with.
• Programs You create, programs created with AI or Mandala Scan, and programs imported from earlier versions of the Application.
• Your session history (which programs You played and when) and the programs stored on your Mandala Wand Device.
• Music files You import from the Files app (iOS) or the system file picker (Android).
• Mandala Scan readings and results.
• The identifiers of the Mandala Wand Device and Mandala Scan Sensor You paired, so the Application can reconnect.

You can remove this information at any time by deleting it in the Application or by uninstalling the Application.

Information sent to Us (Light Mandalas)

The Application uses Our own server (AppSync) for the purposes below. We collect only what is needed for each purpose:

• Update check: when the Application starts (and from time to time while it is open), it sends the app version and platform so We can tell You if an update is available or required. No identifier is needed for this check.
• Activation Codes: when You activate, check or release an Activation Code, the Application sends the code, a random installation identifier created by the Application (it is not your Apple ID, Google Account, advertising identifier or phone number), your Device model and Device name, the operating-system version and the app version. We use this to verify the code, bind it to one Device and prevent misuse.
• Create with AI (optional): when You ask the AI assistant to create a program, the Application sends the text You type, the language of the Application, your Activation Code and installation identifier. See "Create with AI" below.

Information processed by Apple, Google, RevenueCat and Stripe (subscriptions)

Premium subscriptions are sold through the Apple App Store. Payment is handled entirely by Apple; We never receive your payment card details, Apple ID or billing address.

On Android, Premium subscriptions in the Google Play edition are sold through Google Play. Payment is handled entirely by Google; We never receive your payment card details, Google Account password or billing address. Google's privacy policy is available at https://policies.google.com/privacy.

In the Android direct edition (installed from Our website, for example where Google Play is not available), subscriptions are bought on a secure checkout page in your browser operated by RevenueCat ("RevenueCat Billing"), with payments processed by Stripe, Inc. on behalf of Light Mandalas Co., Ltd. On that page You give your email address and payment details, and where required your billing address. RevenueCat and Stripe receive this information to take the payment, send your receipt and purchase email, and let You manage or cancel the subscription; We can see your email address, the purchase and its status in RevenueCat, but never your full card number. Stripe's privacy policy is available at https://stripe.com/privacy.

To manage subscriptions, the Application uses RevenueCat, Inc., a subscription-management service. RevenueCat receives your purchase and subscription status (App Store, Google Play or web checkout) together with a pseudonymous app user identifier generated on your Device (a one-way code that does not contain your name or contact details). In the Android direct edition this identifier is a one-way code derived from the Android ID that Android gives the Application, so that a subscription is found again after You reinstall the Application on the same phone; the Android ID itself is not sent. This lets the Application know whether Premium is active and lets You restore purchases. RevenueCat's privacy policy is available at https://www.revenuecat.com/privacy, and Apple's at https://www.apple.com/legal/privacy/.

Information We do not collect

Apart from the email address You give on the web checkout of the Android direct edition, We do not collect your name, email address, phone number, precise or approximate location, contacts, photos, health records, browsing history or advertising identifier. The Application does not use advertising or engagement-tracking SDKs and does not track You across apps or websites. RevenueCat processes purchase and subscription metrics as described above; these are separate from advertising or tracking your activity in the Application.

Create with AI

Create with AI is optional and requires an Activation Code; it is not included in a Subscription. Before first use, the Application asks for your consent.

When You use it, your message and the language of the Application are sent to Our server and passed to Our third-party AI service provider, which turns your request into a light program or Bio-resonance code journey chosen from the Application's own library. Your Activation Code and installation identifier are used only to check that You have access and to prevent abuse.

We keep records of AI requests for up to 30 days for troubleshooting and abuse prevention, then delete them. We do not use your messages for advertising, and We do not sell them.

Please do not include personal, medical or other sensitive details in your messages. The AI assistant is not a doctor and does not give medical advice.

Bluetooth Use

The Application uses Bluetooth only to discover, connect to and control the Mandala Wand Device, and to read the Mandala Scan Sensor when You use Mandala Scan.

Bluetooth connection information and sensor readings are processed locally on your Device. They are not sent to Our servers, not shared with third parties and not used for tracking, advertising, analytics or profiling.

The Application asks for Bluetooth permission so it can connect to these devices. It may also use Bluetooth audio to send sound to the Mandala Wand Device in Sound & Light mode.

Notifications

If You turn on routine reminders, the Application schedules local notifications on your Device. Reminders are created on your Device; We do not send push notifications and do not receive your reminder times.

How We Use Information

We use the limited information described above only to:

• tell You when an update of the Application is available or required;
• verify Activation Codes and subscriptions and unlock Premium;
• create AI programs when You ask for them;
• provide support, troubleshoot problems, and protect the Service against fraud and abuse;
• comply with legal obligations.

We do not use your information for advertising, marketing profiles or automated decisions that have legal or similarly significant effects on You.

Legal Basis

We process information to perform Our contract with You (providing the Application, Premium and Activation Codes), on the basis of your consent (Create with AI), and on the basis of Our legitimate interest in keeping the Service secure and working. We follow the Personal Data Protection Act B.E. 2562 (2019) of Thailand and, where applicable, other data-protection laws such as the GDPR.

Data Retention

• On your Device: kept until You delete it or uninstall the Application.
• Activation Code records: kept for as long as the code is valid and for a reasonable period afterwards to handle support and prevent misuse. When You release (deactivate) a code in the Application, it is unbound from your Device.
• AI request records: deleted after 30 days.
• Update checks: not stored in a way that identifies You; standard server logs (such as IP address and time) are kept for a short period for security only.
• Subscription records: kept by Apple, Google, RevenueCat and Stripe according to their policies and legal requirements (for example tax and accounting rules).

Data Sharing

We do not sell, rent or trade information. We share information only with:

• Apple, which processes App Store purchases;
• Google, which processes Google Play purchases;
• Stripe, which processes web checkout payments in the Android direct edition;
• RevenueCat, which manages subscription status;
• Our AI service provider, which processes the text of your AI requests;
• Hosting providers that run Our servers on Our behalf;
• authorities, when required by law.

These providers may process information outside Thailand. We use them only for the purposes above and require them to protect the information appropriately.

Data Security

Connections between the Application and Our servers are encrypted (HTTPS). Your Activation Code and installation identifier are stored in the secure Keychain of your Device (iOS) or in the Android Keystore and the Application's private storage (Android). We limit access to Our servers to authorised staff. No method of transmission or storage is completely secure, but We take reasonable steps to protect the information We handle.

Your Rights and Choices

• You can use all free features without sending any information to Us except the anonymous update check.
• You can decline or withdraw consent for Create with AI at any time in Settings; the AI feature will then not be used.
• You can release your Activation Code in Settings, delete local data in the Application, or uninstall the Application.
• You can manage or cancel subscriptions in your Apple Account settings (App Store), in Google Play › Payments & subscriptions (Google Play edition), or with the management link in your purchase email (Android direct edition).
• Subject to applicable law, You may ask Us to access, correct, delete or restrict the information We hold about You, object to its processing, or request a copy of it. Please contact Us using the details below and include your Activation Code if your request relates to it. You may also lodge a complaint with the data-protection authority in your country (in Thailand, the Personal Data Protection Committee).

Request deletion of your data

To request deletion of information held for Mandala Wand, email cservice@light-mandalas.com with the subject "Mandala Wand data deletion". Tell Us whether the request concerns an Activation Code, an AI request or a subscription. If needed to locate the record, include the Activation Code or the purchase email; do not send payment card details.

We will verify the request and arrange deletion of the associated activation/device bindings, AI request records and RevenueCat customer record that We control, subject to legal obligations and fraud-prevention needs. Store and payment providers may retain transaction or tax records under their own policies. The retention rules are described in "Data Retention" above. Local routines, programs, music and scan results can be deleted in the Application or by uninstalling it.

A data-deletion request does not itself cancel a renewing subscription. Cancel it separately in Apple Account settings, Google Play subscriptions, or the web purchase management link so that future payments stop.

Health and Wellness Notice

The Application and the Mandala Wand Device are designed for relaxation and personal wellness routines. They are not medical devices and are not intended to diagnose, treat, cure or prevent any disease. The Application does not collect health records. Mandala Scan results are for personal reflection only.

Children's Privacy

The Application is not directed to children under the age of 13, and We do not knowingly collect Personal Data from children. If You believe a child has provided information through the Application (for example, in an AI request), please contact Us and We will delete it.

Links to Other Websites

The Application may contain links to websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party's website. We strongly advise You to review the Privacy Policy of every website You visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when We add new features. Any changes will be posted on this page with an updated "Last updated" date. If a change materially affects how We use your information, We will tell You in the Application.

Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, You can contact Us:

• By email: cservice@light-mandalas.com
• By visiting this page on our website: https://light-mandalas.com/contact-us/
• By phone number: +6691 628 9936
• By post: Light Mandalas Co., Ltd., 138/1 Soi 10 Moo 9 Tambon Sanpooloei, Doisaket, Chiang Mai, Thailand

Subscription terms: Mandala Wand Terms of Use