Privacy Policy

Last updated: July 8, 2026

1. Who we are

This privacy policy describes how Miracles and Manifesting (“we”, “us”, “the Service”), operated by Gabor Nyakas, based in Debrecen, Hungary, collects and processes your personal data.

For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller.

Contact: gabor.nyakas.dev@gmail.com

2. What data we collect

The Service is a daily practice with an AI coach, so it stores more than a bare account — here is the full picture:

  • Account data — Your email address; a password only if you choose password sign-in (stored solely as a secure hash by our authentication provider); an optional display name.
  • Practice data — Your enrollment in a teaching and your lesson progress — when you start a lesson, read a teaching, complete a practice, or finish a teaching.
  • Coaching conversations and journal — The messages you exchange with the AI coach, kept as your journal history, and any journal entries you write.
  • Learning memory — A generated summary of your learning context, used so the coach can meet you where you left off.
  • Settings and notifications — Your timezone (so lessons unlock on your local day) and, if you enable notifications, a push subscription for your browser or device.
  • Billing data — Your subscription status and payment provider identifiers if you subscribe to Pro. Card details go directly to Stripe — we never see or store them.
  • Technical data — IP address, browser type, and timestamps in standard server logs, used solely for security and operating the Service.

When you talk to the AI coach, your messages are sent to our AI provider (Anthropic) to generate replies. We do not use your conversations to train AI models, and under Anthropic’s commercial API terms they are not used for model training either.

3. Why we process your data (legal bases)

Creating and managing your account, delivering lessons and coaching

Performance of a contract (Art. 6(1)(b))

Sending sign-in emails and daily lesson reminder emails

Performance of a contract (Art. 6(1)(b))

Processing subscription payments and keeping billing records

Performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c))

Security, abuse prevention, server logs

Legitimate interest (Art. 6(1)(f))

Aggregated, cookie-free usage and performance analytics

Legitimate interest (Art. 6(1)(f))

Push notifications, if you turn them on

Consent (Art. 6(1)(a)) — you can withdraw anytime

Optional product updates or announcements

Consent (Art. 6(1)(a)) — you can withdraw anytime

We do not sell your personal data. We do not share your data with advertisers.

4. Who we share data with

We use a small number of service providers (data processors) to run the Service:

  • Database and authentication: Supabase — your account, practice, journal, and coaching data are stored in Supabase’s infrastructure in the United States
  • Hosting and analytics: Vercel
  • Email delivery: Resend
  • AI coach responses: Anthropic — your coaching messages are sent to Anthropic to generate replies
  • Payments: Stripe — payment details are collected and processed by Stripe

Each provider processes data only on our instructions under a data processing agreement.

These providers are located in the United States, and your data — including journal and coaching content — is stored there. Where data is transferred outside the EU/EEA, we rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

5. How long we keep your data

  • Account and practice data (including journal and coaching history): as long as your account is active
  • After account deletion: removed within 30 days, except where a longer period is required by law (for example, billing records kept for tax and accounting purposes)
  • Server logs: 90 days

6. Your rights (EU/EEA users)

Under the GDPR you have the right to:

  • Access the data we hold about you
  • Correct inaccurate data
  • Delete your data (“right to be forgotten”)
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent at any time

To exercise any of these rights, email us at gabor.nyakas.dev@gmail.com. We respond within 30 days.

You may also lodge a complaint with your local supervisory authority. In Hungary this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) — naih.hu.

7. Your rights (California users)

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to not be discriminated against for exercising these rights. We do not sell or share personal information as defined by the CCPA/CPRA. To make a request, email gabor.nyakas.dev@gmail.com.

8. Emails and unsubscribing

We send transactional emails triggered by your actions — such as magic sign-in links — and, as part of the practice you signed up for, daily lesson reminder emails. Every reminder or announcement email includes an unsubscribe link, and unsubscribing stops those emails immediately. Optional product updates are sent only with your consent.

9. Cookies and analytics

We use only essential cookies required to keep you signed in and operate the Service. We do not use advertising or third-party tracking cookies.

We use Vercel Analytics and Speed Insights to understand aggregate usage and performance. These are cookie-free, do not track you across sites, and do not build individual profiles.

10. Security

We protect your data with industry-standard measures, including encryption in transit (HTTPS), hashed credentials, and access controls. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the relevant authority as required by law.

11. Children

The Service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the Service evolves. Material changes will be announced by email or in-app notice. The “Last updated” date at the top reflects the current version.

13. Contact

Gabor Nyakas
4032 Debrecen, Hungary
Email: gabor.nyakas.dev@gmail.com