Privacy policy

Our promise

Your data is yours. We never sell your data, never share it with advertisers, and never use it for any purpose other than running your plan. You can download or permanently delete everything with one tap.

What we collect

Account details (an email address or a sign-in from Apple or Google), your country and language, the issue you choose, your answers to short questionnaires, your plan progress, mood check-ins, and anything you write in your journal or coach chat.

We don’t need your real name. Date of birth is optional; you confirm that you are 18 or over.

If you choose a faith track, we store that choice. Your faith choice and your health data are stored separately from each other and from your account.

Special category data and consent

Health information and religious belief are special category data under the GDPR and UK GDPR. We ask for your explicit consent for each one separately, and you can withdraw it at any time in Settings.

How we use it

Only to run your plan: building and adapting it, reminders, check-ins and the coach. Mendaly has no advertising SDKs and no third-party tracking. Product analytics are anonymous and aggregated.

Your health data and faith choice are never used for marketing.

AI processing

To build your plan and answer coach questions, the relevant plan and chat data is sent to our AI provider only to generate the response. Our contract with the provider forbids training on your data, and we use its zero-data-retention option.

Security

Data is encrypted in transit and at rest. Journal and chat entries are encrypted separately for each person.

Export and delete

You can export everything (JSON or PDF) with one tap. If you delete your account, all your data is removed within 30 days, including backups.

Stories and research

Your story is published only if you give separate consent, and you can withdraw it at any time; it is removed within 7 days.

Research use happens only if you opt in separately, fully anonymised. It is off by default.

Pre-launch sign-ups and pre-orders

Before launch, the waitlist and pre-order forms collect only what you type in: your email (optional on the waitlist), first name (optional), the plan you would pick, your answers to our short questions, the devices you use and your country (optional). We never ask about your health or faith on these forms.

We use this only to email you about the launch and to understand demand. It is stored in its own database, apart from any app data, and is never sold or shared for advertising.

If you pay for a pre-order, Stripe processes the payment. We never see or store your card number; we receive the amount, currency, payment status and your email.

Emails are sent through our email provider, Resend. Card payments are handled by Stripe. Both act only on our instructions.

To see, correct or delete your sign-up, email support@mendaly.com from the address you used. We delete it within 30 days, except payment records we must keep by law.

Contact

Mendaly is run by Goagentic Labs. For any privacy question, email support@mendaly.com.