Privacy Policy

Effective date: September 29, 2026

MeditationForge (meditationforge.com and the MeditationForge Android app) is operated by Michael Goldsmith, a sole proprietor in New Jersey, United States, who is responsible for your data under this policy. It explains what we collect, why, who else handles it, how long we keep it, and how to delete it.

1. What we collect

1.1 Your account

• Name and email address, and either a password (stored only as a one-way hash, never in readable form) or your Google sign-in, which also gives us your Google profile picture.
• Credits and purchases: your credit balance and, for each purchase, the date, the amount, the number of credits and the payment reference. Card and bank details are handled entirely by Stripe or Google Play; we never see or store them.
• An ElevenLabs API key, only if you choose to add one in Settings. It is stored with your account and used only to send requests to ElevenLabs on your behalf.

1.2 Your meditation requests

• What you ask for: the meditation type, length, goal, any details you type in, the language, the voice and the background music.
• The script written from your request.
• Your meditations: a record of each one (type, length, goal, music, voice) and its audio file.

Meditation requests can include personal and sensitive things, such as grief, health or spiritual beliefs. Please include only what you are comfortable having processed by the services listed in section 3.

1.3 Other things you send us

• Daily meditation emails: your email address and the date you subscribed, if you sign up.
• Contact form: your name, email address and message.
• Support chat: if you use the chat assistant in the corner of the page, the messages you type, plus a short record of what you did on the site just before (pages visited, buttons clicked, form errors). Email addresses and card numbers are removed from that record before it is stored. The chat keeps a session identifier in your browser while the tab is open.

1.4 Technical data

• Web server logs: IP address, browser type, the pages requested and timestamps.
• Application logs: account IDs, credit and payment events, and errors. If generating the audio fails, a short excerpt of the script may be recorded with the error.
• Cookies: only a login session cookie that keeps you signed in, which the service needs to work. We do not use advertising or analytics cookies.

2. How we use it

• To write, voice and deliver the meditations you ask for, and to keep your library of meditations.
• To run your account, sell and deduct credits, and handle refunds.
• To answer your messages and send the daily meditation email if you subscribed.
• To keep the service secure and to find and fix problems. Saved requests (section 4) are used only to check and improve the quality of the meditations we generate.

We do not sell your personal data, and we do not use your requests, scripts or meditations to train AI models.

3. Services that process your data for us

MeditationForge runs on our own servers in the United States. The database, your audio files, our email sending and a backup script-writing model all run there. The outside services below receive only what they need for their part of the job:

• DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) writes the meditation scripts and translates scripts you supply. It receives the details of your request (type, length, goal, the details you typed and the language) or the script to be translated. DeepSeek processes this data on its servers in the People's Republic of China. It does not receive your name, email address or payment details.
• Google (Google LLC) turns scripts into speech for the Google voices (Google Cloud Text-to-Speech and Gemini text-to-speech). Google also provides Google sign-in if you use it and Google Play billing for purchases in the Android app. Messages from our contact form are delivered to a Google (Gmail) mailbox.
• Inworld AI turns scripts into speech when you choose an Inworld voice.
• ElevenLabs turns scripts into speech only if you add your own ElevenLabs API key, under your own ElevenLabs account.
• Stripe processes card payments on the website.
• AISupportForge, a support-chat service also operated by Michael Goldsmith, runs the chat assistant. To answer you, it sends your chat messages to Anthropic (Claude), which writes the replies, and to Voyage AI, which finds the relevant help content.

Each provider handles the data under its own terms and privacy policy.

4. How long we keep it

• Saved meditation requests (what you asked for and the script written from it): 15 days, then deleted automatically.
• Your meditations and their audio files: until you delete them, or until you delete your account.
• Your account, credits and purchase records: until you delete your account. Payment records held by Stripe or Google Play are kept by them under their own rules.
• Daily email subscription: until you unsubscribe (every email has a link) or delete your account.
• Contact form messages: in our mailbox for as long as they are needed to deal with your request.
• Support chat conversations, including any email address you leave in the chat: 30 days after the conversation's last message, then deleted automatically. Ask through the contact page if you want yours deleted sooner.
• Web server logs: about 5 weeks. Application logs: as long as needed for billing records and troubleshooting.
• Backups: our databases are backed up nightly to storage we control. Backups are kept for up to 12 months, then overwritten, so deleted data can remain in a backup until it expires. Backups are used only to recover from a failure.

5. Your choices and rights

• Delete your account: in Settings, at any time. It takes effect immediately and removes your account, meditations, audio files, saved requests and daily email subscription. See how to delete your account, including what to do if you can no longer sign in.
• Delete individual meditations from your meditation library.
• Get a copy of your data, or have it corrected: ask through the contact page, from the email address on your account. We will answer within 30 days.
• Unsubscribe from the daily meditation email with the link in any email.

If you are in the European Economic Area or the United Kingdom, you also have the right to object to or restrict our use of your data, and to complain to your local data protection authority. We use your data to provide the service you signed up for, and for our legitimate interests in keeping it secure and fixing problems. Your data is transferred to the United States and, for script writing, to China, as described in section 3.

If you are in California, you can ask what personal information we hold about you and ask us to delete it. We do not sell or share personal information for advertising.

6. Security

All connections to MeditationForge are encrypted (HTTPS), passwords are stored only as one-way hashes, and access to our servers and databases is restricted. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it.

7. Age

MeditationForge is intended for people aged 16 and over. We do not knowingly collect data from anyone younger. If you believe a child has given us their data, contact us and we will delete it.

8. Changes to this policy

If we change this policy, we will update the effective date at the top. If a change significantly affects how your data is used, we will also tell account holders by email.

9. Contact us

For questions about this policy or your data, use the contact page.