Provider and scope
This policy applies to the Manji app, bundle identifier com.marzer.manji. It is provided by Haloa (independent developer brand). Effective date: October 29, 2026. For privacy questions, contact [email protected].
Manji helps you keep private places, visits, notes, photos, saved sources, tags, collections and travel plans. It has no developer-operated business backend, public personal-map service or social feed.
Local records and iCloud
Confirmed records are stored on your device. When system iCloud is available and data ownership has been confirmed, the app uses the current system iCloud account’s private storage for sync. You can keep local records without iCloud. App sign-in and the system iCloud account are separate; signing in to the app does not establish that iCloud sync is available or complete.
Apple processes information needed for its iCloud services under Apple’s terms and privacy policies. Check the app’s sync status and the actual records on the other device instead of assuming that local saving proves receipt elsewhere.
Photos, screenshot recognition and location
The app reads photos or screenshots that you actively select through a system picker. Single-screenshot text recognition uses Apple Vision on the device. Recognized places remain unconfirmed suggestions until you confirm a save. A formal media record is created only when you choose to keep the image and save it.
Online maps, place search and map snapshots use Apple MapKit. Relevant queries, coordinates or map regions may be supplied to Apple when these services are requested. You can mark places manually without device-location permission. Foreground location is requested when you actively use nearby or distance filtering. The current app does not continuously track location in the background or create visits merely because you pass a place.
Apple app sign-in
Apple sign-in is used for local app identity and profile display. A minimal stable app identity identifier is stored in the system Keychain. Signing out of the app identity does not sign out of system iCloud, revoke Apple authorization or delete business records.
Subscriptions, permanent unlock and purchase information
Apple App Store processes monthly and annual Pro subscriptions and the one-time, non-consumable permanent unlock. The app uses StoreKit to obtain and verify product, transaction, expiration, refund, revocation and entitlement information. We do not receive your full payment-card number or payment password.
Permanent unlock and an existing subscription are separate purchases. Buying permanent unlock does not automatically cancel an existing monthly or annual subscription. Review or cancel renewal through Apple’s subscription management. Cancellation, expiration or refund does not automatically delete existing content; access follows the remaining valid purchases and free-tier rules. Prices, offers, eligibility and renewal terms are those shown by App Store.
Diagnostics and voluntary feedback
The anonymous-diagnostics preference is off by default. The current analytics provider is a no-op and does not upload location, notes, photos, saved-source text or usage events to a developer server. Apple may provide crash or diagnostic information according to your system settings.
If you actively send feedback by email, support receives the content and contact information you choose to send and uses it to respond to that request. Send only information needed to explain the issue; do not send passwords, payment credentials, complete private travel records or a raw database.
Sharing and private export
Artwork includes only the fields you choose to publish in its preview. Exact location, detailed addresses, private notes and expense amounts are off by default. Newly rendered share images do not copy the source image’s GPS or camera metadata. You choose a recipient or destination in the system share sheet, and that recipient or service processes the shared content under its own rules.
Private ZIP export contains confirmed entities, private fields and confirmed media, and may include precise coordinates and notes. The current ZIP is not additionally encrypted. Follow the app’s warning and choose an appropriate storage or sharing destination. Private data export remains available without a paid membership.
Managing records and contacting us
You can view, edit and export existing records. Hiding a place is not permanent deletion. Merge undo restores the related merge operation; it is not a general backup-import or recovery service. The current app does not provide one-tap clearing or ZIP import recovery.
Contact [email protected] for privacy questions or guidance on available data-management operations. We do not promise to remotely clear Apple private-cloud data on your behalf. You can manage system permissions and Apple’s iCloud settings on your device. This policy will be updated to reflect changes in actual data handling.