Magda — Privacy Policy

Last updated: January 17, 2026

This Privacy Policy explains how Magda (operated by Fabio Jonathan Arifin) collects, uses, and discloses information when you use the Magda mobile application and related services.

Contact

Operator: Fabio
Contact: fabio@echoforge.to

Data We Collect

• Account information: email and display name (provided at sign-up).
• Calendars & events: calendar events and metadata if you grant calendar access. Imported calendar events are used to detect conflicts and display your schedule.
• Transcriptions (speech-to-text): We process speech input into text (transcriptions). No voice recordings are stored.
• Usage & analytics: anonymous or pseudonymized usage data for product improvement (PostHog).
• Payment & subscription status: stored via RevenueCat (we do not store credit card details).
• Advertising optimization: We use TikTok and Facebook (Meta) SDKs to track installations and subscription events to optimize our advertising campaigns.

How We Use Your Data

• Provide and operate the Magda service (task parsing, scheduling, timeline display).
• Process speech input using OpenAI (GPT-4o mini) to extract tasks and metadata.
• Sync and show your calendar events (read-only import when you grant permission).
• Authenticate and manage accounts via Supabase.
• Manage subscriptions and entitlements via RevenueCat.
• Analyze app performance and user behaviour using PostHog.
• Optimize advertising campaigns using TikTok and Facebook (Meta) SDKs by tracking app installs and subscriptions.
• Send service-related communications (support, critical notices) via Zoho mail.

Third-Party Services

We rely on third-party providers: Supabase (authentication & database), OpenAI (transcription and parsing using GPT-4o mini), RevenueCat (subscription management), PostHog (analytics), TikTok and Facebook (advertising optimization), and Zoho (email). These providers may process data in the United States or other jurisdictions.

No Voice Recordings

Magda uses on-device or platform speech-to-text to convert spoken words to text. We do not store raw audio/voice recordings. Only the resulting transcriptions (text) are sent to our backend and to OpenAI for parsing.

Payment & Refunds

Subscriptions are processed via the App Store / Google Play through RevenueCat. We do not store or process payment card data. Cancellation and refund policies are governed by the platform (Apple / Google); please contact the store for refunds. We maintain subscription status to grant or revoke access.

Data Retention & Deletion

When you delete your account, we will delete your personal data and associated records promptly. You can delete your account from inside the app (Settings → Delete account). After deletion, your data will be removed and will not be used to rebuild profiles.

Your Rights

• Access: You may request a copy of personal data we hold about you.
• Correction: You may request correction of inaccurate information.
• Deletion: You can delete your account and personal data in-app.
• Opt-out: You can opt out of analytics collection in Settings.

Security

We use industry-standard measures to protect data in transit and at rest (TLS, authentication via Supabase). While we work to secure data, no system is fully secure; we cannot guarantee absolute security.

Children's Privacy

Our service is not directed to children under 13 years of age. We do not knowingly collect any data from children under 13. If you are under 13, please do not use Magda.

International Transfers

Data may be transferred to, stored, and processed in the United States and other jurisdictions where our providers operate.

Changes to this Policy

We may update this policy from time to time. If we make material changes, we will notify you through the app or by email.

Contact

For questions or requests: fabio@echoforge.to