Bedrock Privacy Policy

BEDROCK is operated by Mandorla Path LLC. If you have questions about this policy or your data, contact us at bedrocks.partners@gmail.com.

Account information. When you create an account, we collect your email address and authentication credentials so we can sign you in and secure your account.

Content you enter. Anything you choose to save in the app — such as notes, sessions, journal entries, or progress — is stored so it is available to you across devices.

Push and device tokens. If you enable notifications, we collect a push/device token from your platform’s push service (APNs, FCM, or a VAPID-based web push provider) so we can deliver the Morning Brief and phase notifications you choose to receive.

Device information. We collect your operating system version, app version, and a device identifier used only for delivery and diagnostics. We do not collect advertising IDs and we do not use device information for tracking.

Health and cycle data. You may choose to save sensitive wellness information in BEDROCK, such as cycle dates, daily logs (energy, symptoms, needs, notes), journal entries, and AI companion messages. This data is encrypted, controlled by the account holder, and never sold or used to train AI models.

Subscriptions. We collect purchase and entitlement information through RevenueCat and the Apple App Store or Google Play Store. We do not store payment card details ourselves.

Analytics. We collect aggregate, privacy-first product analytics. This data is used only to improve BEDROCK and excludes all cycle, log, journal, and AI content. We do not use advertising or marketing analytics SDKs.

Technical data. Our hosting infrastructure automatically logs basic request data such as IP address, browser type, and timestamps for security and reliability purposes.

Information we do not collect. We do not collect precise location data. We do not sell or share your personal information for cross-context behavioral advertising.

• To create and maintain your account and sign you in.
• To store and display the content you save in BEDROCK, including your cycle data and journal entries.
• To deliver the push notifications you enable, such as the Morning Brief and phase reminders.
• To process subscriptions and manage entitlements through RevenueCat and the app stores.
• To operate, secure, debug, and improve the service, including preventing abuse.
• To respond to your support requests and send essential service-related messages.

BEDROCK covers personal wellness topics. Please share only what you are comfortable storing. We do not use the content you enter to build profiles about you, and we do not disclose it to third parties except as described in this policy. The account holder chooses what is shared and can pause or revoke access at any time within the app.

AI companion messages are processed by Anthropic on a server-side, per-request basis. We do not use your messages to train AI models, and we do not retain or share them beyond what is needed to provide the service to you.

Subscription purchases and receipts are processed by RevenueCat in coordination with Apple App Store and Google Play. We receive entitlement status (for example, whether you are subscribed) but we do not store your payment card or billing address.

We use privacy-first analytics to understand how the app is used in the aggregate. Analytics excludes all cycle, log, journal, and AI content. We do not use advertising or marketing analytics providers.

Push notifications are optional. If you enable them, your device token is shared with the push delivery service (APNs, FCM, or a VAPID-based provider) solely to send notifications to your device. You can turn off notifications at any time in your device settings or in the app.

We rely on third-party providers to host the app, store data, handle authentication, process subscriptions, deliver notifications, and power AI features. Our current processors include:

• Supabase — database and authentication.
• Anthropic — AI companion processing, server-side.
• RevenueCat — subscription and entitlement management.
• Apple Push Notification Service (APNs), Firebase Cloud Messaging (FCM), or a VAPID-based web push provider — push notification delivery.
• Privacy-first analytics provider — aggregate product analytics, if enabled.

These providers process information only to deliver services to us and are bound by their own security and confidentiality obligations.

We do not sell your personal information. We do not share your cycle, log, journal, or AI content for advertising or marketing. We share data only with the processors listed above, when required by law, or to protect our rights and users.

We retain your account information and saved content for as long as your account is active. You may request deletion of your account and associated data at any time by emailing bedrocks.partners@gmail.com. We will delete or de-identify your data within a reasonable period, except where we are required to retain records by law.

We use industry-standard safeguards, including encryption in transit and access controls that restrict account data to the authenticated account owner. Sensitive health and wellness data is encrypted and user-controlled. No online service can guarantee absolute security, so we cannot promise that unauthorized access will never occur.

Depending on your state of residence — including California, Colorado, Connecticut, Texas, Virginia, and other states with comprehensive privacy laws — you may have the right to access, correct, delete, or obtain a portable copy of your personal information, and to appeal a denied request.

To exercise any of these rights, email bedrocks.partners@gmail.com. We will not discriminate against you for exercising a privacy right. We may need to verify your identity, typically by confirming control of the email address on your account.

BEDROCK is intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

BEDROCK is currently intended for users in the United States. By using the app, you understand that your information may be processed in the U.S. and subject to U.S. law.

We may update this policy as BEDROCK evolves. When we do, we will revise the “Last updated” date above, and for material changes we will provide additional notice in the app or by email.

Questions or privacy requests can be sent to bedrocks.partners@gmail.com.