Your device and journal

Sound, motion, graphics settings and expedition discoveries stay in local storage on your device. The journal is not uploaded or synchronized. You can clear it inside the journal; this does not remove a purchase.

The native apps do not run the website’s Vercel interaction analytics. The website records coarse interaction events such as which expedition was opened, without sending journal answers, names or a purchase identifier through those events.

The optional purchase

The native apps use Apple or Google billing and RevenueCat to verify purchase history and restore access. RevenueCat generates an anonymous native customer identifier; no advertising identifiers are requested by this integration. Opening the configured expedition purchase view can contact RevenueCat even if you do not buy.

Web checkout uses RevenueCat Billing and Stripe. RevenueCat receives your verified account identifier and email for checkout, purchase receipts and access recovery. Payment-card details are handled by Stripe or the mobile store, not stored in the Mayon app. Refunds and revoked purchases can remove access when the provider updates the purchase record. Offline native access relies on the official SDK’s cached customer information, not a journal flag.

Native purchases restore with the same store account. Web purchases restore with the same verified email. Web and mobile-store purchases are separate; cross-platform transfer is not currently offered. A web purchase does not synchronize your journal.

Read RevenueCat’s privacy policy and Stripe’s privacy policy for their handling of purchase and payment data.

Web purchase recovery

Buying or recovering the web pack requires email sign-in. Supabase processes your email and authentication records and stores a sign-in session in this browser. Resend delivers the sign-in email. RevenueCat receives a purchase identifier derived from your verified account ID to associate the pack with that account. Free exploration does not require sign-in.

Signing out clears access to the web pack in this browser; it does not delete your account or purchase. Contact support to request account or purchase-data deletion. Deleting recovery records may prevent future restoration. Journal entries remain on the device and can be cleared separately. Web recovery requires an internet connection; locally saved progress does not establish ownership.

Read Supabase’s privacy policy and Resend’s privacy policy. Email sign-in codes are for you alone: do not send them to support.

Ask the Mountain · optional AI guide in 2.2

The AI pilot is for adults aged 18 or older. A neutral age-group screen runs locally before the question form appears. The selected age group is kept only for the current app session. The server receives an adult-eligibility confirmation with a question, not your date of birth or selected age band. Younger users and users who do not choose an age can still use the experiments, evidence and classroom resources. The guide asks permission before sending a question. If you agree, your question, selected expedition stop, app language and answer style go through Mayon’s server to OpenAI, together with selected research summaries. Do not include personal or sensitive information. The guide does not send your email, purchase identifier, journal or saved notes to OpenAI. Each question is independent; earlier questions and answers are not submitted as conversation history. A second OpenAI request checks the proposed answer against the same evidence before it is shown.

We request that OpenAI not store Responses API conversation state (store: false). This is not a promise of zero retention: OpenAI’s default abuse-monitoring logs can retain content for up to 30 days, with exceptions described in its data controls. API data is not used for model training by default. Hosting infrastructure also processes network addresses to deliver requests.

To limit costs and abuse, the AI service runs on Cloudflare Workers and uses a dedicated Cloudflare D1 database. It stores a salted hash of the request’s network address and a timestamp for each admitted question, not the question or answer. These quota records are removed by daily cleanup after 35 days. People on the same network may share a limit. This AI service does not use Vercel or Supabase.

AI answers remain in this app session unless you explicitly save an editable field note on this device. Notes do not sync or establish a purchase. Clear them using Clear journal. You can withdraw AI permission inside the guide. Report this answer opens an in-app form. If you explicitly agree and send it, the question, displayed answer, chosen reason and evidence version go to Maha Strategies through Cloudflare for review. Reports are stored in the dedicated Cloudflare database for up to 35 days with a hashed network identifier for abuse prevention. Reports are not sent to OpenAI or published. Do not include personal information.

Answers are educational explanations of historical research, not live activity, forecasts or safety instructions. Citations identify supporting research summaries; they do not guarantee an AI answer is correct. The permanent Expedition Pack does not include unlimited cloud AI availability. The expedition and its evidence panels remain available when AI is offline or reaches its usage limit.

Optional email updates and rating requests

Adults may optionally use a separate Mayon signup form hosted by Cloudflare. Submitting the form sends your email, chosen topic and consent to that service; Resend sends a confirmation email. You join only after confirming. No marketing consent is inferred from a purchase or account sign-in, and no signup is required to use free learning resources.

The service uses Cloudflare bot protection and a separate small Cloudflare database, not Supabase. It temporarily stores a pending email address, consent version, topic, timestamps and hashed network/address identifiers to prevent abuse. Pending email addresses expire after 24 hours and are removed by daily cleanup within 48 hours; successful confirmations remove the pending address immediately. Short-lived hashed quota/confirmation records are retained for up to 35 days. Confirmed subscriber addresses and topic choices are managed in Resend for Maha Strategies. Each update must include Resend's unsubscribe/preferences link; changes apply to subsequent updates. We do not sell your address or add you to unrelated lists. Contact mayone@mahastrategies.com to request deletion. Do not submit student or sensitive personal information.

After you complete the free Journey Inside, mobile apps may request a rating through Apple or Google. The device stores request timestamps to limit interruptions to no more than three attempts per year, at least 120 days apart. These are attempts, not confirmation that a prompt appeared or a rating was submitted. Ratings are optional and do not unlock content.

Help and data requests

Contact mayone@mahastrategies.com for purchase support, a refund request or a request concerning purchase data. Include the platform and receipt reference, and do not send your password, sign-in code or payment-card details. Store transaction records are subject to the store’s own retention policies.

The publisher’s main privacy policy provides additional information.