Privacy policy
Last updated: 1 November 2026
Menti is a self-care app for iPhone. You trust it with personal things, like how you feel, what you write in your journal and how you sleep. This policy explains, in plain English, what we collect, why, who helps us run the app, how long we keep things and the choices you have.
Who we are
Menti (“Menti”, “we”, “us”) is an independent app made and run in the United Kingdom. We are the data controller for the personal information described in this policy, which means we decide how and why it is used.
For anything about privacy, including using your rights, email support@mentiapp.com. We don’t have a separate data protection officer because we’re a very small business, so your message comes straight to the person responsible.
The short version
- We use your information to run Menti for you. We don’t sell it, and we don’t use it for advertising.
- Journal entries and mood notes are encrypted on your iPhone before they’re saved to the cloud.
- Raw Apple Health data stays on your iPhone. We only save the daily wellness scores Menti works out from it.
- If you use AI features, what you send is passed to our AI providers (OpenAI for text, Google for Live Talk voice) so they can reply. They don’t get your name or email address.
- Menti is for adults aged 18 and over.
- You can delete your account and data at any time in Profile → Delete Account.
Information we collect
| Type | What it includes | Where it comes from |
|---|---|---|
| Account details | Your email address, a unique account ID and, if you choose, your name. If you sign in with Apple or Google, we receive the details they share with us (Apple lets you hide your email address). | You, or Apple or Google when you sign in with them |
| About you | Answers you give when you set up Menti, such as your age, gender, goals, stress level, sleep quality, eating habits, things affecting your mental health, how happy you feel and your meditation experience. | You |
| Wellbeing content | Mood check-ins, journal entries, habits, goals, sleep logs, breathing, meditation and sound sessions, and your companion’s progress and accessories. | You, as you use the app |
| AI conversations | Messages you send to Menti’s AI features and the replies, short summaries the app keeps so conversations can carry on from where you left off, and transcripts of Live Talk voice sessions. Live Talk audio is streamed to produce a reply and is not recorded or saved. | You, and our AI providers’ replies |
| Apple Health | Only if you allow it: steps, activity, sleep and mindful minutes. Menti reads these on your iPhone to work out daily wellness scores, and saves those scores, not the raw Health data. | Apple Health on your iPhone |
| Safety signals | If something you write suggests you may be at risk, Menti shows crisis support and records the alert level, the time and your account ID. The record does not include what you wrote. | Generated by the app |
| Purchases | Your subscription or lifetime status, free trial dates, product purchased and an anonymous purchase ID. We never see your card or bank details; Apple handles payment. | Apple and RevenueCat |
| Consent records | When you agreed to things like the AI sessions or Live Talk notice, and which version you saw. | Generated by the app |
| Usage and device | Which screens and features are used, app version, device model, iOS version, language, approximate location from your IP address (country or region), crash reports and performance data, and device checks that confirm requests come from the real Menti app. | Generated by the app and our providers |
| Messages to us | Anything you send when you email support. | You |
Face ID lock is handled entirely by iOS. Menti never receives your face data. Notifications and reminders are scheduled on your iPhone.
How we use it and our lawful bases
UK data protection law requires us to have a lawful basis for each use of your information. Here’s what we rely on.
| Why we use it | Lawful basis |
|---|---|
| Creating your account, saving and syncing your entries, running the companion and features you ask for, and handling premium access and your trial | Contract: we need it to provide the app you’ve signed up for |
| Using information about your mental and physical health, such as moods, journal content, set-up answers, Apple Health data, wellness scores, AI conversations and safety signals | Your explicit consent, which you give in the app. You can withdraw it at any time by stopping the feature, turning off Apple Health access in iOS Settings, or deleting your account. |
| Showing crisis resources when you may be at risk | Your explicit consent, and where needed to protect someone’s life, vital interests |
| Understanding how the app is used, fixing crashes and improving Menti | Legitimate interests in keeping the app working well. This uses usage and diagnostic data, not your journal or chat content. |
| Keeping Menti secure and preventing fraud and misuse | Legitimate interests in protecting you, the app and our providers |
| Replying to support requests | Legitimate interests in helping you, or contract where it relates to your account |
| Keeping records we’re legally required to keep, and dealing with legal claims | Legal obligation, or legitimate interests in defending legal claims |
Withdrawing consent doesn’t affect anything we did before you withdrew it, but some features can’t work without it. Where we rely on legitimate interests, you can object, and we’ll stop unless we have a strong reason to continue.
We don’t make decisions about you that have legal or similarly significant effects using automated processing alone. Menti’s safety check is automated, but all it does is show you support options.
AI features
Menti offers optional AI features, including chat with Menti, guided reflection and therapy-style sessions, insights, and Live Talk voice conversations. The AI is a computer program, not a person, and not a therapist.
- What’s sent. The messages you send, recent messages from the same conversation (up to about 40) so replies make sense, and, for sessions that use your history, a short summary of your recent moods, journal themes, habits, sleep and wellness scores. Your name and email address are not sent.
- Text features use OpenAI’s API. We ask OpenAI not to store conversations for later use. Under OpenAI’s API terms, data sent through the API is not used to train its models by default, and may be kept for up to 30 days to detect abuse, unless the law requires longer.
- Live Talk uses Google’s Gemini API, provided through Firebase. Your voice is streamed to Google to produce a spoken reply and a transcript. Google processes it under its Gemini API terms and may keep it for a limited time to prevent abuse and meet legal requirements. Before your first Live Talk session we explain this and ask you to agree.
- Saved conversations. Your chats and Live Talk transcripts are saved to your account so you can see them again, until you delete them or your account.
AI replies can be wrong, incomplete or unsuitable. Please don’t rely on them for medical, legal or financial decisions, and don’t share other people’s private information in chats.
How we protect your information
- Everything is sent over encrypted connections (HTTPS/TLS) and stored encrypted by our cloud provider.
- Journal entries and mood notes are also encrypted on your iPhone (AES-GCM) before they’re uploaded. The key is linked to your account so you can restore your entries on a new device, which means this is not end-to-end encryption.
- Your data can only be read by your own account, enforced by security rules on our database. Device checks (Firebase App Check) help block requests that don’t come from the real Menti app.
- You can add a Face ID lock to Menti in Settings.
No system is perfectly secure. If a breach affects your information and puts you at risk, we’ll tell you and the regulator as the law requires.
Who we share it with
We don’t sell your personal information or share it for advertising. We only share it with providers who help run Menti, who are only allowed to use it to provide their service to us:
- Google (Firebase): sign-in, database and cloud storage, device checks, analytics, crash reporting and performance monitoring, and the Gemini API for Live Talk. Firebase privacy
- OpenAI: text AI features. OpenAI privacy
- RevenueCat: manages premium access and subscription status. RevenueCat privacy
- Cloudflare: runs a small server that may pass AI requests to our AI providers and check premium access. Cloudflare privacy
- Apple: App Store payments, Sign in with Apple and Apple Health. Apple’s own privacy policy applies to what Apple collects.
- Vercel: hosts this website.
We may also share information if the law requires it, to protect someone from serious harm, to defend legal claims, or if Menti is ever sold or transferred to a new owner (who would have to protect it in the same way, and we’d let you know first).
International transfers
Some of our providers store or process information in the United States and other countries outside the UK. When that happens, we rely on the protections UK law allows, such as the UK-US Data Bridge for providers certified under it, or the UK International Data Transfer Addendum to the European Commission’s standard contractual clauses.
How long we keep it
| Information | How long |
|---|---|
| Account, wellbeing content, AI conversations and wellness scores | Until you delete them or your account. Deleting your account removes them straight away from the live database. |
| Safety signals | Up to 12 months, then deleted |
| Analytics data | Up to 14 months |
| Crash reports | Up to 90 days |
| AI provider logs | Up to 30 days, under our providers’ terms |
| Purchase records | As long as needed for your purchases to work and for tax and accounting law (usually 6 years) |
| Support emails | Up to 2 years after we last hear from you |
After you delete your account, copies held by our providers may take up to 30 days to clear from their systems.
Your rights
Under UK data protection law you have the right to:
- get a copy of your personal information
- have inaccurate information corrected
- have your information deleted
- restrict or object to how we use it
- receive information you gave us in a portable format
- withdraw your consent at any time
You can delete everything yourself in Profile → Delete Account. Deleting the app doesn’t delete your account, and deleting your account doesn’t cancel an Apple subscription, so cancel that in your Apple Account settings too. For anything else, email support@mentiapp.com. We may need to confirm it’s really you, and we’ll reply within one month.
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
If you live in the United States
Some US states, including California, give residents extra privacy rights. This section explains how they apply to Menti.
- What we collect. Identifiers (email, account ID), personal information you give us, sensitive personal information about your health and wellbeing, commercial information (purchases), internet and device activity, approximate location, and inferences such as wellness scores. The sources and purposes are described above.
- No selling, no sharing for ads. We don’t sell personal information, don’t share it for cross-context behavioural advertising, and don’t use sensitive information for anything beyond providing the app you asked for. We have no actual knowledge of selling or sharing information about anyone under 16.
- Your rights. Depending on where you live, you can ask to know what we hold, get a copy, correct it, delete it, and limit or opt out of certain uses. Email support@mentiapp.com. You can use an authorised agent, and we’ll ask for proof they can act for you. We won’t treat you differently for using your rights. If we turn down your request, you can appeal by replying to our answer.
- Consumer health data. In states with consumer health data laws, such as Washington, Nevada and Connecticut, the health and wellbeing information in this policy counts as consumer health data. We collect it to provide the features you use, share it only with the providers listed above, never sell it, and you can access or delete it, or withdraw consent, using the steps above.
Children
Menti is for adults aged 18 and over, and we don’t knowingly collect information from anyone younger. If you think someone under 18 has given us information, email support@mentiapp.com and we’ll delete it.
This website
mentiapp.com doesn’t use cookies, analytics or advertising trackers. Our hosting provider, Vercel, processes basic technical information such as IP addresses to deliver pages and keep the site secure.
Changes to this policy
We’ll update this policy when Menti changes. The date at the top shows when it last changed. If we make a significant change, we’ll tell you in the app before it takes effect.
Contact
Questions, requests or worries about your privacy: support@mentiapp.com.