Privacy Policy

CraftedDay (“we,” “our,” or “us”) is operated by Bennett Levaton, doing business as CraftedDay. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to it.

By using CraftedDay, you agree to the collection and use of information as described here.

Account information. When you sign in, we collect your name and email address through our authentication provider, Clerk. If you use Apple Sign In or Google Sign In, we receive the information you authorize those services to share.

Profile data. We store the preferences you set during onboarding and in settings: your display name, meditation experience level, primary goals, and preferred voice gender.

Session content. When you generate a meditation, we store the prompt you provided, the generated script, the audio file, and the session duration. When you complete a session check-in, we store your mood response, what helped, and any optional notes you wrote.

Usage data. We record timestamps of sessions to compute stats like streaks and total time meditated. We do not track device identifiers, advertising IDs, or precise location.

We use your information to:

• Generate personalized meditation sessions tailored to your profile and history
• Improve the quality of future sessions based on your check-in feedback
• Display your session history and personal stats
• Send optional daily reminder notifications (you may disable these at any time)
• Respond to support requests

We do not sell your personal information. We do not use your data for advertising.

CraftedDay relies on the following third-party services to operate. Each has its own privacy policy.

• Clerk — authentication and identity management (clerk.com)
• Vercel — application hosting and serverless functions (vercel.com)
• PlanetScale — database storage (planetscale.com)
• Anthropic — AI generation of meditation scripts (anthropic.com). Your prompt and profile context are sent to Anthropic's API to generate your session script.
• Groq — fast AI generation of the short post-session closing line (groq.com). Limited post-session context is sent to Groq to produce a one-sentence celebration line.
• Inworld AI — text-to-speech voice synthesis (inworld.ai). The generated script is sent to Inworld to produce audio.
• Cloudflare R2 — audio file storage (cloudflare.com). Generated audio files are stored in Cloudflare R2.
• RevenueCat — subscription management (revenuecat.com). Your app user ID, subscription status, and purchase events are processed by RevenueCat to manage billing on our behalf.
• Apple — in-app purchases and subscriptions (apple.com/legal/privacy)
• Vercel Web Analytics — aggregated, privacy-friendly usage analytics (vercel.com/legal/privacy-policy). We record anonymized page-view and device-type metrics. No cross-site tracking and no advertising identifiers.

We share only the data each provider needs to perform their specific function. We do not share your information with any other third parties.

Your data is stored in a PostgreSQL database hosted on PlanetScale and audio files in Cloudflare R2, both secured with encryption at rest and in transit. We use industry-standard practices to protect your information, including HTTPS for all communications and token-based authentication via Clerk.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take reasonable precautions to protect your data.

You may request to:

• Access the personal data we hold about you
• Correct inaccurate profile information (editable in the app)
• Delete your account and all associated data

To request account deletion or a data export, email us at support@craftedday.com. We will process your request within 30 days.

CraftedDay is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

Users between 13 and 16 should have a parent or guardian review this Privacy Policy before use.

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email below.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page. Continued use of the app after changes constitutes your acceptance of the updated policy.

Questions about this Privacy Policy? Reach us at support@craftedday.com.

Bennett Levaton, DBA CraftedDay — California, United States