Privacy Policy

Last updated 2 November 2026

Magnavia is a guided journey for the mind, body and soul, made by Entropious, Inc., a Michigan corporation ("we", "us"). This policy says what the app keeps about you, why, who helps us run it, and how to have it removed. We do not sell your data, show ads, or use your data to advertise to you.

If you are in danger, don't rely on this app. Call or text 988 in the US or Canada, or your local emergency number. Nobody at Magnavia watches what you write as you write it.

What we keep

Your account

When you sign in with Google or Apple we receive your name, email address and profile photo from them. If you walk as a guest, we keep an anonymous account id only. Your account id ties everything below together.

Your road

• The journey, guide, practice and training goal you choose, and your body setup (where you train, the equipment you own, session length, experience).
• The questions at the start, if you answer them (what brought you here and what you are dealing with, which can be personal, such as urges or a heartbreak). They choose which roads we show you first and how the app first asks you to begin. They are kept with your road. They are not sent to Analytics, or to an AI with your letters.
• The starting check-in (mood, focus, energy, discipline, a few words about why you began) and the check-ins at each 30-day gate.
• Your progress: days walked, flame and embers, the trials you finished, reflections, saved insights, evening examens and the waystones you found, and the roads you have walked to their end.
• Your touchstone: each time you open it in a hard moment, the moment you name (anger, fear, a craving, a heavy day, doubt, wanting to give up), which day's line you held, whether it held, and the line you write about it if you write one.
• Your lines: what you say back after a teaching, where you expect to meet the idea, what you noticed in a practice.
• Footprints, only if you turn them on (they are off until you do): the line you say back goes to our server, which adds it, with no name or account id, to a count and a few recent lines that walkers of the same road see on that day. Anyone on that road can read it, so leave out anything that could identify you. Lines with links aren't accepted, and lines that read like a crisis or fail our filter are counted but not shown. Walkers can report a line, and we may remove it.
• Anything you report (a footprint, a chronicle post or a fellow): what you reported, and your account id so we can follow up. Who you have blocked or hidden is kept with your road.
• If you name a witness: their first name and email address, and the week we last wrote to them. We first email them once to ask whether they agree; only if they say yes do we email them once a week with counts only (days walked, flame, records, the day reached), never your words. Each note carries a link that stops them.
• If you chose the printed Book of the Road: your postal address (United States or Canada), the print file of your Book, and where the order stands. The address is used to post the Book and shown to us for that purpose.
• Your journal: moods, feelings and the words you write.
• Letters from your guide and the questions you ask, including counsel threads.
• Your reminder plan: the time and place you chose, and your time zone.

Your training

• The sets, weights, repetitions and times you log, records, notes, swaps, the readiness answers you give before a session, weigh-ins, and the coach's learned settings.
• Your body check: joints to protect, what to avoid, and the answers to the health questions (for example heart conditions or pregnancy). These only make the plan gentler; they are kept with your account so the coach can respect them on every phone you use. If you write notes about your body, the app reads them on your phone; when our server is configured, the text is also sent to it to be read into the same ticks (see "Who helps us").

Provisions (food)

• Your goal, targets and food settings, the meals and foods you log, your pantry, weigh-ins you enter, and meal plans. These are kept with your account.
• Searching foods happens on your phone, from a food list inside the app.
• Barcodes: when you scan one, your phone asks Open Food Facts, an open food database, for that product. They receive the barcode and, like any website, your IP address, and no account information.
• Photos: a photo of a plate, a nutrition label, a menu or a fridge goes through our server to an AI model to be read (Google Gemini, or DeepSeek if Gemini isn't available). We keep what you log from it, not the photo. The provider handles it under its own terms (see "Your guide's letters and AI").
• Typed meals and meal plans: what you type for the app to read, and a meal-plan request (your targets, what you like and avoid, your training days), go through our server to DeepSeek.

Apple Health and Health Connect

Only if you switch it on. For training, Magnavia reads last night's sleep, heart rate variability and resting heart rate to suggest an answer in the pre-workout check, and writes each finished workout as a strength-training session. If you also turn it on in Provisions, it reads your weigh-ins and food other apps logged, and writes the meals you log. What the app reads from Health stays on your phone: those readings are not sent to our server or to any AI, not used for advertising, and not sold. Two things that come from them can leave the phone: the answer you confirm in the pre-workout check is saved with the workout, and your daily calorie and protein targets, which the phone works out and which can reflect a weigh-in from Health, are numbers that a meal-plan request carries. You can switch it off in Training settings or in Provisions, and revoke access in the Health app or Health Connect at any time.

The use of information received from Health Connect adheres to the Health Connect Permissions policy, including its Limited Use requirements. Data from Apple Health is used only as described here, and never for advertising or data mining.

Fellowships

If you found or join a fellowship, its members see your display name and photo, the road you walk (guide, practice, training goal), your standing and day count, the chronicle of the band (days placed, gates crossed, torches, embers and nudges), and only the reflections you choose to share. Your journal is never shared.

Subscriptions

Payments are handled by Apple or Google; we never see your card. RevenueCat tells us whether your account has the full road, when a plan renews or ends, and which product you bought, keyed by your account id.

Notifications

Reminders are scheduled on your phone. If you allow notifications, the app also registers a push token with our server, with your time zone and reminder time, so a letter, a fellow's nudge or an ember can reach you when the app is closed.

App version

Once a day the app records which version it is running and on which platform (iOS or Android), with your account, so we can see who a required update would affect before we ask for it.

Crash reports and usage

Release builds send crash reports (Firebase Crashlytics: the error, device model, system version and your account id) and a few usage events (Google Analytics for Firebase: for example that a day was walked, a paywall was shown or onboarding was finished, with numbers like the day count, plus device and approximate region). If you open your touchstone we record that it was opened, never which moment you named or whether the line held. These never contain your journal, reflections, letters, health readings or the content of your training notes. Analytics runs without advertising ids, and nothing is used for advertising. You can turn both off in Settings → Share crash reports & usage.

Why we use it

• To give you the journey: today's trials, your progress, your coach's prescriptions and your keepsakes, on every phone you sign in on.
• To write your guide's letters and answer your questions.
• To run fellowships between the people you choose to walk with.
• To know whether you have the full road, and to grant referral months.
• To remind you at the time you chose, and to fix what breaks.

Where the law asks for a legal basis: the contract with you (providing the app you signed up for), your consent (Apple Health / Health Connect, letting your guide read your journal, notifications, the health questions) and our legitimate interest in keeping the app working (crash reports and usage events).

Your guide's letters and AI

Letters are written by an AI model through our server. A Sunday letter for a member can be written while the app is closed, from your first name, journey and day counts only. For every other letter, the app sends what that letter is about: your first name, your question, your journey and day, flame, the day's titles, your plan, your starting ratings, the moods and feelings you logged, and a summary of your training and food. Your own lines (what you said back, what you noticed, your evening examen, and when you reached for your touchstone this week) are included while "My lines" is on in Settings → What your guide may read (it is on by default and the app tells you the first time you write one). Journal excerpts and your starting words are included only if you turn on "My journal". Your letter is saved with your road. Our server doesn't keep what it was written from, apart from errors in its logs.

Letters are written by Anthropic's Claude. If Claude can't be reached or declines, the same text goes to DeepSeek instead, journal excerpts included if you allowed them. If both fail, your phone writes a simpler letter itself.

If what you write sounds like danger

When you write to your guide, the app and our server first look for plain words about suicide or self-harm in your question, your counsel thread, your lines, your examen and any journal excerpts being sent. If they find them, those words are not sent to an AI: you get a fixed letter with people to call. This check is a list of phrases, so it can miss things. Anything it doesn't catch, including veiled or indirect words, goes to the AI model with the rest of the letter, and the model is asked to watch for signs of danger. If it sees one, or if the letter names 988, the letter opens at once instead of at dawn. If you have no letters left that day, your question may be read once by Claude, only to look for risk, up to a few times a week, and nothing from that read is stored. This can be wrong in both directions, nobody at Magnavia is alerted, and it is not a crisis service. In danger, call or text 988 in the US or Canada, or your local emergency number.

What the AI companies do with it

We send what each task needs and we don't use your words to train AI models. We can't promise the same on behalf of every provider: each handles what it receives under its own terms for business customers, and those terms differ. DeepSeek operates in China. Letters and other AI writing are not therapy or medical, nutrition or legal advice.

Who helps us

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging, Crashlytics, Analytics, App Check): stores your account and data, delivers pushes and checks that requests come from the real app, in Google Cloud data centers.
• RevenueCat: subscription status.
• Apple and Google: sign-in, payments, and, if you allow it, Apple Health / Health Connect on your phone.
• Anthropic (Claude): writes your guide's letters, and may read a question for danger, from the text our server sends.
• DeepSeek: reads body notes and meals you type, writes meal plans, and takes over a letter or a photo when the first choice is unavailable, from what our server sends.
• Google Gemini: reads the Provisions photos you take or choose.
• Open Food Facts: looks up barcodes you scan, directly from your phone.
• Resend: delivers the weekly note to a witness you named, if you named one.
• A print service (for the printed Book of the Road, if you chose it): receives your Book's print file and your postal address to print and post it.
• Our own server (the Magnavia companion service), which writes letters, sends pushes and keeps membership in step.

Each processes data to provide its service to us. They operate in the United States, China (DeepSeek) and other countries; where the law requires, transfers are covered by standard contractual clauses or equivalent safeguards.

How long we keep it

For as long as you have an account. Settings → Delete Account deletes your account and everything kept under it (your road, journal, training, food, letters, check-ins, devices and rewards), your Book's print file and order, what you posted in a fellowship's chronicle, your reports, your footprint lines and the membership, usage, referral and reminder records our server keeps, and removes you from every fellowship. Three things can stay: footprint lines left before 2 November 2026, which carry nothing that lets us find them, though the count they were part of keeps no name; your purchase history with Apple or Google; and what our print service already has for a Book at the press. If the deletion could not reach our server, write to us and we remove the rest, including any Book order already at the press. A guest account that is logged out cannot be opened again; write to us and we will delete it.

On your phone

When you sign out or delete your account, the app removes your road, drafts, exports and its copy of what it read from this phone. The one exception: if you sign out of a Google or Apple account before your latest changes could reach our server, those changes alone wait on the phone for your next sign-in, and they go if someone else signs in first. A file you shared elsewhere (a journal export, a Book PDF) stays wherever you sent it.

Your rights

You can see most of your data in the app, correct it there, and delete it with your account. You may also ask us for a copy of your data, to correct or delete it, to restrict or object to its use, or (in the EU, UK and similar places) to complain to your data-protection authority. California residents have the right to know, delete and correct, and we do not sell or share personal information for cross-context behavioral advertising. Write to bilal@entropious.com; we answer within 30 days.

Children

Magnavia is not meant for children under 13 (under 16 in the EU and UK), and we don't knowingly keep their data. If you believe a child has an account, write to us and we will delete it.

Security

Data travels encrypted and is stored by Google Cloud with access limited by security rules: other walkers cannot read your road, and only our server can change your membership. Your road is not sealed from us. The people who run Magnavia can read and export a walker's data with an administrator account, to answer a request like the ones above, to look into a report or to fix a problem, and we don't do it otherwise. On your phone, your road, journal and letters are kept out of iCloud and Android backups, and on iPhone the app's own copy of them can't be read while the phone is locked, and the same goes for the draft of a line you haven't finished, which stays on your phone. A few small settings can be in an iPhone backup until you sign out. No method is perfect, but we work to keep it safe.

Changes

If we change this policy in a way that matters, we will say so in the app before it takes effect.

Contact

Entropious, Inc. · Michigan, USA · bilal@entropious.com