Welcome to Awakened by Karla Maree, created and operated by Karla Maree. Your personal journal and essential wellbeing resources can be used without an account.
This policy describes the app’s current practices, not planned features. Information saved in your browser on your device is different from information stored on external servers.
Accounts and signing in
Account registration sends your email address and password to the authentication service provided through Lovable Cloud. Online account records include an account identifier, registration date and email-confirmation status. An optional name may be available from sign-in information, including Google sign-in; email registration does not require a name.
This information supports sign-in, confirmation and password-reset emails, matching purchases and membership access, and account management. The registration flow requests email confirmation. Google sign-in also involves Google processing sign-in information under its own policy.
Account records are stored online. Session information is kept in browser storage to maintain sign-in. Owner controls show account email, available name, join date, confirmation status and membership details, not passwords. Signing out does not delete account records or your device journal.
Device-only journals and photographs
Personal journal entries, photographs, stickers and journal reflections are stored in this browser on this device. The journal does not upload them to the app’s servers, link them to your account or automatically sync them between devices. Karla’s owner controls cannot view this device-only journal.
The journal stored in your browser is not encrypted. Its optional passphrase is a privacy screen, not encryption of the stored content. Someone with access to your device or browser storage may still access it. Please take care on shared devices.
Local entries remain until deleted or browser data is cleared, and may be lost if the browser is reset or the device is lost. Signing out or ending VIP access does not remove them.
Journal backups, exports and deletion
Backups are generated on your device and downloaded, not uploaded by the backup feature. Without a backup passphrase, the file is readable. With a passphrase, the backup file is encrypted locally using AES-GCM and a passphrase-derived key. This protects the exported file, not the original browser journal. Lost backup passphrases cannot be recovered.
Restoring a backup reads it locally and adds entries by identifier without overwriting existing moments. Print and other readable exports can be read by anyone with access to those copies.
You can delete individual moments or use “Clear this device” to remove local app data. This does not delete online accounts, server records, downloads, printed copies or device backups. Remove those separately. Local deletion is not a guarantee of forensic erasure or removal from device backups.
Quizzes, favourites and preferences
Self-Love Language quiz selections are stored in local browser storage. Core Archetype quiz selections are stored in the tab’s session storage. These quiz features do not send selections to an account database. Retaking updates selections; clearing relevant browser data removes them. Tab-session storage normally ends with that browser session.
Favourites, bookmarks, reading positions and device preferences are also stored locally. Favourites contain resource references, not private writing. They remain until changed or cleared, do not automatically follow you between devices, and are not private to a particular account on a shared browser.
Signed-in completion tracking for the 13 Self-Love Principles stores the account identifier, lesson number and completion time online. This is separate from journal writing. A lesson can be marked incomplete again.
Optional online workbook reflections
Optional saves for Learning to Love, You, the Core Archetype workbook and the invitation-only Curiouser companion are separate from the device journal and each other. Saving uses an account and a workbook passphrase.
The saving code encrypts writing in your browser using AES-GCM with a passphrase-derived key before sending it to Lovable Cloud. These features do not send your passphrase or derived key. Online records contain encrypted writing, account identifiers, block or week identifiers, update times, revisions and information needed to unlock the encrypted copy. Pending encrypted copies may remain on the device for interrupted-save retries.
Ordinary account access is restricted to that account’s records. Owner screens do not display private writing. Privileged hosting or database operators can access stored encrypted records and associated information, but those records do not provide your passphrase or readable writing through these features. Encryption cannot guarantee protection against every device compromise or unauthorised access.
There is no workbook passphrase recovery. VIP expiry does not automatically delete saved reflections. Where offered, deletion controls remove the selected writing from the active database and its corresponding current-device pending copy after successful deletion. Remove downloaded or other-device copies separately. Provider backup retention has not been verified. Reflection downloads create readable files, which you should protect like a printed journal.
Square payments, purchases and membership
Payments take place through Square. Checkout information, including payment details, is handled by Square under its own policy. App purchase records do not store your full card number or card security code.
Account-linked book records store account and book identifiers, amounts, currency, payment status, transaction references and timestamps online. Verification and refund information support access, duplicate-purchase prevention and transaction history. A success or return page alone does not prove payment.
VIP checkout links are separate from book purchases. Karla personally activates VIP after confirming payment and matching the payment email to a confirmed app account. Membership and manual-access records contain email, a matched account identifier where available, plan or resource, status, activation and expiry dates where applicable, administrative notes and change history. Pending email grants may exist before an account is registered.
Karla can access purchase and membership information needed to administer access, review transactions and provide support. Square retains its own customer and transaction records; deleting app information does not automatically delete Square records. Individual book purchases do not grant VIP membership.
Events and invitations
Registering interest stores your account identifier, event and registration time online. Karla can view and export registration lists containing emails, available names and registration dates. Withdrawing removes that registration from the active database, not previously exported copies.
The future live Learning to Love, You interest form can be used without an account. It stores your first name, email, optional phone number, offering, source, submission time, contact acknowledgement, separate optional marketing choice and follow-up status in Lovable Cloud. Karla’s authorised owner area can read and update these records. Agreeing to contact about the offering does not also opt you into marketing. You can request correction, withdrawal of consent or deletion by emailing Karla.
The Book With Karla page loads Square’s appointment calendar on larger screens and offers a direct Square booking link. Square handles scheduling, information you provide while booking and any appointment payment under its own policy. Loading the embedded calendar sends a request to Square; the app does not copy appointment details into its interest form records.
Event and course-access grants include emails, matched account identifiers and administrative history. Companion invitations and account access are recorded online to manage entry; its owner statistics show counts, not private answers.
Following ticket, Zoom, Facebook or other external event links involves those services handling your visit and anything you provide under their own policies.
Hosting, analytics, browser storage and third parties
Lovable hosts the app; Lovable Cloud provides online authentication, database and file storage. Delivering online requests involves network information such as IP address, requested address and browser information. Providers may also process hosting, authentication and error-diagnostic records for operation and troubleshooting. When a reporting service is available, app error reporting can send the error message, stack information and current page.
Lovable visitor analytics is enabled. It provides visits, page views, visit duration, sources, countries and device types. Lovable’s documentation says it does not build visitor profiles, track people across separate visits or link visits to signed-in accounts. This is not a claim that all hosting information is anonymous. Authorised project editors and workspace administrators or owners can view these analytics.
Separately, the app records clicks on Book With Karla, the two Friday Exhale reservation options and Learning to Love, You interest registration. These records contain the selected offering, destination and server timestamp, plus a verified account identifier when signed in. The click feature does not store an anonymous visitor identifier, IP address, contact details, journal writing or quiz answers. Only the authorised owner can view click totals through the app; privileged operators can access the stored records. These totals count clicks, not confirmed appointments, payments or unique people.
The app also records simple anonymous engagement counts: daily visits, journal entries created, Self-Love Language quiz completions, meditation and practice starts, and which sections are opened. To count returning visits, your browser stores a random code that is not linked to your name, email, account or anything you write. These records contain only the type of activity, the general section, the date and, for visits, that random code. They never include journal writing, photographs, reflections, quiz answers or results, names, email addresses or IP addresses. Limits on how many counts each device can send help prevent misuse. Only Karla’s authorised owner account can view the totals, which are shown as numbers only. Clearing your browser data removes the random code. Privileged hosting operators can access the stored records. Individual engagement records are deleted automatically after 12 months.
The app uses local and session storage as described above. A hosting cookie was observed on the published site. Its purpose and duration, the complete hosting-cookie inventory, analytics retention and server-log retention have not been verified. This policy does not claim the site is cookie-free or tracking-free.
Google Fonts receives requests to supply fonts. YouTube players use the enhanced-privacy embed address and load when you choose to play. Playing or opening YouTube sends requests to YouTube; enhanced-privacy mode does not mean no collection. Hosted images and PDFs also require requests to storage or delivery services.
External providers control their own processing and retention, and information may be processed outside Australia. Exact hosting locations, provider log-retention periods and deletion from provider backups have not been confirmed for this app.
Administrator access and email enquiries
Owner controls require authorised owner access and show account, purchase, grant, membership and event-administration information. They do not show device journals, photographs or readable encrypted workbook reflections. External technical operators may have privileged access to server records and operational information; owner-screen restrictions do not mean all information is inaccessible to administrators or providers.
Email enquiries, your email address and attachments are handled outside the app through email services. There is no internal support chat or app message store for these enquiries. The mailbox provider, access arrangements and retention period have not been confirmed in this policy. Please do not email workbook passphrases, payment-card details or sensitive journal writing.
Retention
No formal retention period or automatic deletion schedule has been established for account, purchase, membership or event records. They currently remain unless removed through an available feature or authorised manual process. Ending membership or revoking access does not necessarily erase records or history.
Information no longer required may be deleted following a request and review. Some legal, taxation, accounting, purchase or transaction records may need to be retained. No fixed period is promised. Removal from the active database does not establish immediate removal from provider backups or logs.
Access, correction and deletion requests
You are welcome to request access to, correction of, or deletion of your account and personal information by contacting Karla@awakenedbykarlamaree.com.au. Please use your account email where possible, explain your request and do not send passwords. Identity may need to be verified before information is disclosed or removed.
Requests will be reviewed to identify information that can be deleted and records needed for legal, taxation, accounting or transaction purposes. There is currently no self-service account-deletion button. This policy does not introduce automatic deletion or change payment, membership or account behaviour.
Karla cannot retrieve or remotely delete your device journal or preferences. Use local deletion or browser controls and remove exported files separately. An access request cannot recover encrypted workbook writing without your passphrase; use the workbook unlock and download features where available.
For privacy questions or concerns, email Karla@awakenedbykarlamaree.com.au. This policy will be reviewed when information-handling practices change.