Privacy Policy

Effective date: June 3, 2026

Mena ("Mena", "we", "us", or "our") is a mobile application that supports people through breakup recovery using guided exercises, journaling, mood tracking, and an AI companion. This Privacy Policy explains what we collect, how we use it, who we share it with, the legal bases we rely on, and the choices and rights you have. Your privacy matters deeply to us — much of what you share with Mena is personal and emotional, and we treat it that way.

1. Information you provide

• Account information — your email address and authentication details when you sign up with email, Apple, or Google.
• Onboarding profile — answers you give during setup (e.g. relationship context, how you're feeling, what you want to work on). This personalizes your experience.
• Your content — journal entries, messages you send to the Mena AI companion, mood and daily check-ins, exercise responses, and tasks you complete.
• Feedback — any messages you submit through the in-app feedback form.

2. Sensitive information & your consent

Because Mena is a breakup-recovery tool, some of what you choose to share — for example journal entries, mood check-ins, or messages about your emotional state — may reveal information about your mental or emotional wellbeing. In some places this is treated as "sensitive" or "special category" personal data, and under certain US state laws it is treated as "sensitive personal information" or "consumer health data" (see Sections 3 and 8). We process this information only with your consent, which you give when you agree to this Privacy Policy at sign-up and each time you choose to enter such content. We use it solely to operate the features you ask for (such as personalizing exercises and generating AI responses) and never to make decisions that produce legal or similarly significant effects about you. You can withdraw your consent at any time by deleting the relevant content or your account, and you have the right to limit our use of your sensitive personal information as described in Section 10.

3. Consumer health data

Some of the information you share with Mena — including journal entries, mood and check-in data, exercise responses, and messages about your emotional or mental state — may qualify as "consumer health data" under laws such as Washington's My Health My Data Act, Nevada's SB 370, and the Connecticut Data Privacy Act. We treat this information with particular care:

• Consent before collection. We collect consumer health data only after you affirmatively agree to this Privacy Policy, and only when you choose to provide it to operate a feature you have requested.
• How we use it. We use it solely to provide and personalize the features you ask for — personalizing exercises, generating AI responses, and tracking your progress. We do not use it for advertising, and we do not sell it.
• Sharing. We share consumer health data only with the service providers listed in Section 7 that are necessary to run the app (such as Supabase for secure storage and Anthropic to generate AI responses), and only to provide the features you request. We will not share or sell your consumer health data to any other third party without first obtaining your separate consent.
• Your rights. You may withdraw your consent, and request to access or delete your consumer health data, at any time — by deleting the relevant content or your account in-app, or by emailing us at mood.remmo94@gmail.com. We will not discriminate against you for exercising these rights.
• We do not use geofencing to track or collect any consumer health data around health-care facilities.

4. Information collected automatically

• Usage and product analytics — which features you use, screens you view, and in-app events, used to improve the app.
• Diagnostics — crash reports and error logs that help us fix problems.
• Device information — device type, operating system version, and app version.

On iOS, we ask for your permission before any tracking through Apple's App Tracking Transparency prompt. You can decline, and you can change this anytime in your device Settings.

5. How we use your information

• To provide and personalize the app's exercises, journaling, and AI companion.
• To generate AI responses tailored to what you've shared.
• To maintain your account, sync your data across sessions, and process your subscription.
• To understand how the app is used and improve it.
• To diagnose crashes and keep the app stable and secure.
• To respond to your feedback and support requests.

6. Legal bases for processing (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases:

• Consent — for sensitive content you choose to enter and for optional tracking/analytics. You may withdraw consent at any time.
• Performance of a contract — to provide the app and the features you request, and to manage your account and subscription.
• Legitimate interests — to keep the app secure, prevent abuse, and improve our service, balanced against your rights.
• Legal obligation — where we must retain or disclose data to comply with the law.

7. How your information is shared

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law. We share data only with the service providers that operate Mena, and only as needed to run the app:

• Supabase — secure database, authentication, hosting, and storage where your account and content are kept.
• Anthropic — when you chat with the Mena AI companion, your messages and relevant context are sent to Anthropic's Claude API to generate a response. Your Anthropic-processed messages are not used to train their models.
• PostHog — product analytics and crash/error reporting.
• Superwall — manages and displays our subscription paywall.
• Apple & Google — sign-in (if you choose it) and, for Apple, subscription billing through the App Store.

We may also disclose information if required by law, valid legal process, to protect the rights, property, or safety of users or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will require the recipient to honor this policy).

8. Categories of personal information we collect (California)

For California residents, this section describes the categories of personal information we have collected in the past 12 months, the sources, the business purposes, and the categories of recipients:

• Identifiers (email address, account/user ID) — collected from you and your sign-in provider; used to create, secure, and operate your account; shared with our hosting and authentication provider.
• Account & profile information (onboarding answers, preferences) — collected from you; used to personalize the app; shared with our hosting provider.
• Sensitive personal information (information about your mental or emotional health: journal entries, mood and check-in data, messages to the AI) — collected from you; used solely to provide the features you request; shared with our hosting provider and, for AI responses, Anthropic.
• Commercial information (subscription and transaction status) — collected from you and Apple; used to manage your subscription; shared with Apple and our paywall provider.
• Internet & device activity (usage and analytics events, crash logs, device type, OS and app version) — collected automatically; used to improve and stabilize the app; shared with our analytics provider.

We do not sell or "share" (for cross-context behavioral advertising) any of these categories, and we do not use or disclose your sensitive personal information for purposes other than those permitted under the California Privacy Rights Act (CPRA).

9. Data retention

We keep your information for as long as your account is active. When you delete your account, we delete your personal data and content from our active systems within 30 days. Some records may persist for up to 90 days in encrypted backups before they are overwritten, or longer where retention is required to comply with law, resolve disputes, or enforce our agreements. Diagnostic and aggregated analytics data that no longer identifies you may be kept for longer.

10. Your choices and rights

• Delete your account — you can permanently delete your account and associated data at any time from within the app's settings.
• Access, correction & portability — you can update your profile in the app, or contact us to request a copy of your data or its correction or deletion.
• Withdraw consent — you can withdraw consent for sensitive-data or health-data processing or for tracking at any time, without affecting prior lawful processing.
• Limit sensitive personal information — California residents may direct us to limit the use of their sensitive personal information to what is necessary to provide the app. Because that is already the only way we use it, no further action is required, but you may contact us to confirm.
• Tracking — you can decline tracking via the App Tracking Transparency prompt or your device Settings.
• Global Privacy Control — where required, we treat a recognized opt-out preference signal (such as Global Privacy Control) as a valid request to opt out of the sale or sharing of personal information. We do neither, but we honor the signal.
• California (CCPA/CPRA) — you may request to know, delete, or correct your personal information, to limit the use of sensitive personal information, and to opt out of sale/sharing (we do neither). We will not discriminate against you for exercising these rights.
• EEA/UK (GDPR) — you have rights of access, rectification, erasure, restriction, objection, and portability, and the right to lodge a complaint with your local supervisory authority.

To exercise any right, email us at mood.remmo94@gmail.com. We will verify your request and respond within the time required by applicable law.

11. Security & breach handling

We use industry-standard measures to protect your data, including encryption in transit, encryption at rest through our infrastructure provider, and access controls so that you can only access your own content. No system is perfectly secure, but we work to keep your information safe. In the event of a data breach affecting your personal information, we will notify affected users and the relevant authorities as required by applicable law.

12. Children and minors

Mena is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13; if you believe a child under 13 has provided us information, contact us and we will delete it.

If you are between 13 and 17, you may use Mena only with the involvement and permission of a parent or legal guardian, who should review this Privacy Policy with you and consents to your use of the app and to our processing of your information (including the sensitive and health-related content described in Sections 2 and 3). Where we knowingly process the personal information of a user under 16 in the EEA or UK, we rely on parental or guardian consent as the legal basis for that processing to the extent required by law. We do not knowingly sell or "share" the personal information of users under 16, and we do not use the personal information of minors for targeted or behavioral advertising.

13. International users

We operate from the United States, and your information may be processed in the United States and other countries where our service providers operate. These countries may have different data-protection laws than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, notify you in the app. Material changes will be communicated before they take effect.

15. Contact us

Questions about this policy or your data? Email us at mood.remmo94@gmail.com.