Privacy Policy

Effective 31 July 2026 · Shamanda & mooneyecollective.com

The short version. We collect the least we can. Your private writing in the app stays on your phone and is never uploaded. We run no advertising, no third-party analytics, and no tracking SDKs. We do not sell your information, and we never will.

01 Who we are

Moon Eye Collective makes Shamanda, an app for shamanic practice, collective dreaming, and the activism that grows out of both. This policy covers the Shamanda mobile app and this website. Where this policy says "we" or "us," it means Moon Eye Collective. We are the controller of the information described here.

02 What we collect

Your account

Your email address, when you create an account. If you use Sign in with Apple and choose Hide My Email, we receive Apple's private relay address instead of your real one, which is fine by us. You can add a display name; you don't have to.

You can use a good deal of Shamanda without an account at all, including the drum timer.

Your practice

Which Journeys you have started or finished, and how far you got
Drum timer sessions: length, which drum sound, and whether you finished
Whether you opened the day's Vision, whether you marked its action done, and any reflection you choose to type there
Your current and longest streak, and how many Journeys you have completed
Your timezone, so daily content arrives on the right day

If you use the drum timer without an account, the session is recorded with no user attached to it: just a duration, a sound, and a timestamp.

What you choose to post

Anything you share into the community feed is visible to other people in the app. Please treat it as public.

Beta feedback

While Shamanda is in beta, the in-app feedback tool sends us the name or handle you type, the category you pick, your message, which screen you were on, and the app version and build. This tool is only present in beta builds.

03 What stays on your phone

Your private writing never leaves your device. Dream entries and other personal journal writing are stored inside the app's own sandboxed storage on your phone: in app files and in the device keychain. They are not uploaded to our servers, we cannot read them, and they are never included in crash reports.

They are included in your phone's own backup if you back your phone up, and they are deleted when you delete the app.

04 How we use it

To give you an account and keep you signed in
To remember where you are in a Journey and carry your streak forward
To show the daily Vision and how many people are dreaming with you
To run the community feed
To understand, in aggregate, which practices people actually use, so we know what to make more of
To fix things that break, and to answer you when you write to us
To meet our legal obligations

We do not sell your information and we do not share it for advertising. We do use a small number of service providers to run the app. They process data on our instructions and for no purpose of their own.

Supabase: our database, accounts, and file storage (United States)
Expo / EAS: delivers app updates to your device
Apple App Store and Google Play: distribution and payments
RevenueCat: subscription status, once PRO subscriptions are live
Sentry: crash reports, once enabled. Personal data collection is switched off in our configuration, and your journal writing is never part of a crash report
Vercel: hosts this website
Google Workspace: our email, if you write to us

We will also disclose information if the law genuinely requires it, or to protect someone's safety. If Moon Eye Collective is ever acquired or merged, information may transfer as part of that, and this policy travels with it.

06 What we don't do

No advertising, no ad networks, no advertising identifiers
No third-party analytics or tracking SDKs: there are none in the app
No location tracking. The app never asks for your location
No microphone or camera access. The app plays audio; it does not record
No selling or sharing of personal information, as those terms are used under California law
No reading, mining, or training on your private journal entries: they aren't ours to read, and they aren't on our servers to begin with

07 Notifications

Shamanda's notifications (the drum timer's completion cue, practice reminders, and lunar shifts) are scheduled entirely on your device. There is no push server and no device token sent to us. We are never told when one fires. You are asked for permission only when you do something that needs it, never on first launch, and you can turn them off in your phone's settings at any time.

08 Purchases

PRO subscriptions are billed by Apple or Google, not by us. We never see or handle your card details. We receive confirmation of whether your subscription is active and when it renews or lapses, so the app can unlock the right content.

09 How long we keep it

Account and practice data is kept while your account exists. When you ask us to delete your account, we delete your profile, practice history, Vision participation, and community posts. Anonymous timer sessions carry no identifier and so cannot be traced back to you; they remain as aggregate counts. Beta feedback is kept until the beta closes. Backups roll off within 30 days.

10 Your choices and rights

Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or send you a copy. Write to hello@mooneyecollective.com and we will respond within 30 days. We will not treat you differently for asking.

To delete everything at once: delete your account by writing to us, then delete the app from your phone. That removes the private, on-device writing too.

If you are in the UK, EU, or EEA

Our legal bases are: contract, for the account and practice data needed to give you the app you asked for; legitimate interests, for keeping the service working, secure, and improving; consent, for notifications; and legal obligation where one applies. You may withdraw consent at any time, object to processing based on legitimate interests, request portability, and complain to your local supervisory authority.

If you are in California

You have the rights to know, delete, correct, and to opt out of sale or sharing. There is nothing to opt out of: we do not sell or share personal information, and we have not in the preceding twelve months.

11 Children

Shamanda is not directed to children under 13, and we do not knowingly collect information from them. If you are in the EEA or UK, the minimum age is 16. If you believe a child has given us information, write to us and we will delete it.

12 Security

Everything travels over TLS. Our database enforces row-level security, so one person's rows cannot be read by another. Credentials on your device are held in the iOS Keychain or Android Keystore. Journey audio for PRO members is served through short-lived signed links rather than open URLs. No system is perfect, and we won't pretend otherwise. But we treat this as part of the practice, not an afterthought.

13 Where your data lives

Our servers are in the United States. If you use Shamanda from outside the US, your information is transferred there. For transfers out of the UK, EU, or EEA we rely on the European Commission's Standard Contractual Clauses with our providers.

14 Changes

If we change this policy we will update the date at the top, and for anything material we will tell you in the app before it takes effect.

15 Contact

Moon Eye Collective · hello@mooneyecollective.com

Write to us about anything in this policy. A real person reads it.