Privacy policy

Last updated: August 1, 2026

Envisioned ("we," "our," or "us") is operated from Spain and is committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information we collect

When you use Envisioned, we may collect the following information:

• Account information: Your name and email address when you create an account or sign in with Google.
• Goal data: The visions, milestones, tasks, habits, check-ins, and related content you create within the app.
• Images: Cover images you upload for your visions and milestone memories, stored securely in the cloud.
• AI interactions: When you use the AI vision builder, the text you provide (such as goal descriptions) is sent to a third-party AI provider to generate milestone suggestions. We do not store these prompts or responses beyond your current session.
• Subscription data: Information related to your subscription status, trial period, and payment history, processed through Apple's App Store.
• Usage data: Anonymous analytics about how you interact with the app, including screen views and feature usage, to help us improve the experience.

Legal basis for processing

We process your personal data on the following legal bases under the GDPR:

• Contract performance: To provide you with the Envisioned service, sync your data, and manage your subscription.
• Legitimate interest: To improve the app, fix bugs, and understand how features are used.
• Consent: For optional analytics and marketing communications, which you can withdraw at any time.

How we use your information

We use your information to:

• Provide and maintain the Envisioned app and its features, including the AI vision builder
• Sync your data across devices
• Manage your subscription and free trial
• Improve and personalise your experience
• Communicate with you about updates or changes to the service

Data storage and security

Your data is stored securely using Google Firebase services, with servers located in the EU/EEA where available. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, or destruction. These measures include encryption in transit and at rest, access controls, and regular security reviews.

Third-party services

We use the following third-party services:

• Google Firebase: For authentication (including Google Sign-In), data storage, cloud functions, and image storage. Firebase Privacy Policy
• Google Analytics: For anonymous usage analytics. Google Privacy Policy
• Apple App Store: For subscription billing and payment processing. We do not receive or store your payment card details. Apple Privacy Policy
• AI provider: For generating milestone suggestions via the AI vision builder. Goal descriptions you enter are sent to the provider for processing but are not stored by us or used to train AI models.

International data transfers

Some of our third-party service providers may process data outside the EU/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with the GDPR.

Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Anonymous, aggregated analytics data that cannot identify you may be retained indefinitely.

Your rights under the GDPR

As a data subject, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Data portability: Request your data in a structured, machine-readable format.
• Restriction: Request that we limit the processing of your data.
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at santiagobox6@gmail.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).

Children's privacy

Envisioned is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page, updating the "Last updated" date, and where appropriate, notifying you via the app. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at santiagobox6@gmail.com.