1. Introduction
Welcome to Menthera. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.
By using Menthera, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
2. Information We Collect
2.1 Personal Information
We collect information that you provide directly to us, including:
- Account information (name, email address, password)
- Profile information (age, gender, wellness goals)
- Payment information (processed securely through third-party providers)
- Communication preferences and settings
2.2 Conversation Data
To provide our AI companion services, we collect:
- Text conversations with AI companions
- Voice recordings (processed and deleted after transcription)
- Mood tracking and wellness assessment responses
- Session duration and frequency data
2.3 Usage Information
We automatically collect certain information about your device and usage:
- Device information (model, operating system, unique identifiers)
- App usage patterns and feature interactions
- Error reports and performance data
- IP address and general location information
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our AI companion services
- Personalize your experience and generate relevant insights
- Process payments and manage subscriptions
- Send you service updates, notifications, and support messages
- Analyze usage patterns to enhance app functionality
- Ensure security and prevent fraud
- Comply with legal obligations
- Develop new features and services
4. Data Security
We implement industry-standard security measures to protect your personal information:
- End-to-End Encryption: All conversations are encrypted in transit and at rest
- Secure Storage: Data is stored on secure servers with restricted access
- Regular Security Audits: We conduct periodic security assessments
- Access Controls: Strict authentication and authorization protocols
- Data Minimization: We only collect data necessary for service delivery
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to maintain the highest standards.
5. Information Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
- Service Providers: Third-party vendors who assist in operating our services (e.g., cloud hosting, payment processing)
- Legal Requirements: When required by law or to protect our legal rights
- Emergency Situations: To prevent harm to you or others when we believe it is necessary
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share your information
6. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal information
- Data Portability: Receive your data in a structured, machine-readable format
- Opt-Out: Unsubscribe from marketing communications at any time
- Restrict Processing: Limit how we use your information
To exercise these rights, please contact us at privacy@menthera.com. We will respond to your request within 30 days.
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal, tax, or regulatory requirements
- Resolve disputes and enforce our agreements
When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it by law.
8. Children's Privacy
Menthera is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately. If you believe we have collected information from a child under 13, please contact us at privacy@menthera.com.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your information.
10. Third-Party Services
Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.
We use the following third-party services:
- Payment processing (Stripe, Apple Pay)
- Analytics (Google Analytics, Mixpanel)
- Cloud infrastructure (AWS, Google Cloud)
- Customer support (Intercom)
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the app and updating the "Last Updated" date. Your continued use of our services after such modifications constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Menthera Privacy Team
Email: privacy@menthera.com
Phone: +1 (555) 123-4567
Address: 123 Wellness Street, San Francisco, CA 94102
13. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell your information)
- Right to non-discrimination for exercising your privacy rights
14. GDPR Compliance (EU Users)
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
Our legal basis for processing your data includes consent, contract performance, legal obligations, and legitimate interests. You have the right to lodge a complaint with your local data protection authority.