Privacy policy

Our promise

Your data is yours. We never sell your data, never share it with advertisers, and never use it for any purpose other than running your plan. You can download or permanently delete everything with one tap.

What we collect

Account details (an email address or a sign-in from Apple or Google), your country and language, the issue you choose, your answers to short questionnaires, your plan progress, mood check-ins, and anything you write in your journal or coach chat.

We don’t need your real name. Date of birth is optional; you confirm that you are 18 or over.

If you choose a faith track, we store that choice. Your faith choice and your health data are stored separately from each other and from your account.

Special category data and consent

Health information and religious belief are special category data under the GDPR and UK GDPR. We ask for your explicit consent for each one separately, and you can withdraw it at any time in Settings.

How we use it

Only to run your plan: building and adapting it, reminders, check-ins and the coach. Mendaly has no advertising SDKs and no third-party tracking. Product analytics are anonymous and aggregated.

Your health data and faith choice are never used for marketing.

AI processing

To build your plan and answer coach questions, the relevant plan and chat data is sent to our AI provider only to generate the response. Our contract with the provider forbids training on your data, and we use its zero-data-retention option.

Security

Data is encrypted in transit and at rest. Journal and chat entries are encrypted separately for each person.

Export and delete

You can export everything (JSON or PDF) with one tap. If you delete your account, all your data is removed within 30 days, including backups.

Stories and research

Your story is published only if you give separate consent, and you can withdraw it at any time; it is removed within 7 days.

Research use happens only if you opt in separately, fully anonymised. It is off by default.

Contact

Our data protection contact will be listed here before launch.