Privacy Policy

Last updated: August 26, 2026

Amaranto makes personalized audio sessions. To do that, you tell us things that are personal: your goals, your fears, what blocks you. This policy explains exactly what we collect, what we do with it, and what we will never do with it.

The short version: we collect only what the product needs, we use no advertising trackers, and we never sell your data. Ever.

Who we are

Amaranto is operated by a two person founding team based in San Antonio, Texas. We are the data controller for the information described here.

• Address: 335 Abiso Avenue, San Antonio, TX 78209, US
• Contact: [email protected]

This policy covers amaranto.app, my.amaranto.app, the Amaranto app for iOS and Android, and the emails we send.

What we collect

Waitlist. If you join the waitlist we store your name, email address, preferred language, the time you signed up, and your browser type.

Account. You sign in with Google, or with Apple in the mobile app. They share your name and email address with us, and Google also shares your profile picture. We never see your password. If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's relay address.

Session inputs. During onboarding and weekly check-ins you share your goals, fears, mental blockers, and how sessions land for you. This is the most personal data we hold. We use it for exactly one thing: writing and adjusting your sessions.

Generated content. We store the scripts and audio files we generate for you, so you can replay them and so future sessions can build on past ones.

Billing. If you subscribe on the web, payments run through Stripe, which collects your card details. If you subscribe in the app, Apple or Google processes the payment and we never see your card. In every case we store only your subscription status, plan, and renewal date. We receive a purchase identifier from the store so we can keep your access in sync.

Usage events. We record anonymous product events, such as a session being started or finished, to understand what works. These carry account identifiers, never the content of your answers, your goals, or your sessions.

Technical logs. Our servers log IP addresses for rate limiting and abuse prevention.

What we do not collect

• No advertising trackers, pixels, or ad identifiers.
• No analytics cookies.
• No location tracking.
• No access to your contacts, photos, microphone, or camera.
• No data brokers, no buying or selling of personal data in any direction.

Cookies

On the web we use only cookies the service cannot work without: one that keeps you signed in, one that remembers your language, and one that connects a waitlist invite to your new account. That is why you see no cookie consent banner: there is nothing optional to consent to. The mobile app uses no cookies for tracking; it stores your session token securely on the device.

How we use your data

1. To write and generate your personalized sessions.
2. To operate your account, subscription, and library.
3. To send service emails: welcome, session ready, billing, account notices. Non-essential emails have an unsubscribe link that works with one click.
4. To keep the service safe: rate limiting, abuse prevention.

We do not use your data for advertising. We do not share it with anyone except the processors below.

Who processes your data

Running Amaranto takes a small set of providers. Each receives only what its job requires, under terms that limit use to providing the service:

• Google and Apple, for sign-in.
• Stripe, for web payments. Apple and Google Play, for in-app purchases. A subscription platform keeps that state in sync across them.
• Hosting, network and storage providers, which run our servers and hold your audio. They are established infrastructure companies with independently audited security programs, they process your data only on our instructions under a data processing agreement, and everything they hold is encrypted in transit and at rest.
• An email delivery provider, for the emails we send you.
• A product analytics provider, for the anonymous product events described above.
• Leading AI providers, which turn your answers into the script and the voice of your sessions. We use their business APIs, never their consumer products.

Your data is never used to train any model, and it is never kept for quality review. Not theirs, not ours, not anyone's. Your goals and fears exist for one purpose: your sessions.

Every one of them is bound by a written agreement to protect your data to the same standard set out in this policy, to use it only to provide the service to us, and never for their own purposes. Any company we add later is held to the same terms before it touches anything of yours.

A current list of our sub-processors is available on request at [email protected].

Some of these providers are located in the United States. If you use Amaranto from outside the US, your data is transferred and processed there.

Data retention

We keep your data while your account is active. Delete your account, from the app under You, from my.amaranto.app/delete-account, or by asking us, and we delete your account data, session inputs, and generated audio from our systems. Waitlist entries are deleted on request at any time. We may keep minimal billing records where the law requires it.

Withdrawing your consent

Before your first session we ask, in the app, for your permission to send your answers to the AI providers that write the script and generate the voice. Nothing is sent before you agree.

You can take that permission back at any time, in the app under You, next to sign out. From that moment we stop sending your answers and no new meditations can be built. The sessions you already have stay available, and we ask again if you decide to continue later. To erase everything instead, delete your account.

Your rights

You can delete your account and all of its data yourself, at any time. In the app it is under You. On the web it is at my.amaranto.app/delete-account, which works even if you have already uninstalled the app. You can also email [email protected] from your account address and we will:

• Send you a copy of the data we hold about you.
• Correct anything that is wrong.
• Delete your account and data.
• Remove you from the waitlist or any email list.

Depending on where you live, you may also have the right to object to or restrict processing, to data portability, and to complain to your local data protection authority. We answer within 30 days, usually much faster. There are two of us and we read everything.

Security

All data moves over encrypted connections. Generated audio and session data live in access-controlled storage, and audio is served only through short-lived signed links tied to your account. Access is limited to the two founders. If a breach ever affects your data, we will tell you directly and quickly.

Children

Amaranto is not for children. We do not knowingly collect data from anyone under 16. If that happened, tell us and we delete it.

Changes

If this policy changes in a way that matters, we announce it on the site and by email before it takes effect. The date at the top always reflects the latest version.

Contact

Questions about your data: [email protected].