Privacy policy

1. Who we are

Mentulis is published by Mentulis Inc., 678 Atwood Crescent, Pickering, Ontario L1W 3W4, Canada (“we”, “us”). We are responsible for your personal information under this policy. Questions or requests: info@mentulis.com.

Our Privacy Officer, Sheheryar Masood, is responsible for protecting your personal information and for answering your questions and requests. You can reach them at info@mentulis.com or by mail at Mentulis Inc., Attention: Privacy Officer, 678 Atwood Crescent, Pickering, Ontario L1W 3W4, Canada.

2. What stays on your phone

Your mood check-ins, journal entries, tool and self-test results, your answers about how you’ve been feeling and your goals, and your chats with Pip are stored only on your device, in an encrypted database. We cannot see them, and they are never part of your account backup.

Deleting the app, or using “Reset my data” in Profile, erases this information. “Export my data” gives you a copy at any time.

3. What we process, and why

We only collect what we need to provide a feature you choose to use:

• Your account: you sign in with Google (or Apple on iPhone). We store your email address, first name, country, gender (you can choose “Prefer not to say”), app language and an account ID, to run your account, adapt the app to you (for example crisis lines and prices for your country) and produce anonymous, combined statistics. We only send you service emails about your account; we will only send other news if you agree.
• Progress backup: so you can sign in on a new phone and get your Sprout back, we keep a copy of your Sprout (name, look, growth), seeds, shop items, streaks and app settings such as your age range and reminder time. It never includes your journal, moods, test results or chats.
• Talking to Pip (AI companion): to write a reply, your most recent messages (up to 20) are sent over an encrypted connection to our server and to our AI provider, Anthropic. We do not store the content of your chats on our servers. We keep a daily message count linked to your account ID, and a scrambled (hashed) version of your network address, to apply the daily limit and prevent abuse. Anthropic processes the messages only to produce the reply, does not use them to train its models, and may keep them for a short period (up to 30 days) for safety and abuse monitoring before deleting them.
• Subscriptions: payments are handled by Google Play or the App Store. To give you Premium, our server checks your purchase with the store and keeps, for your account, which plan you have and until when it lasts. We never receive your card details.
• Psychologist sessions (adults in Ontario, coming soon): if you join the waitlist in the app, we store your email and language to tell you when booking opens. Once booking is available, when you book, we share your name, email, the chosen psychologist and session time with that psychologist, and payment is processed by Stripe. What you discuss in sessions is held by your psychologist, who is the custodian of that health information under Ontario’s Personal Health Information Protection Act (PHIPA).
• Waitlist (this website): if you join, we store your email, language, phone type, your consent and the date, only to tell you about the launch. Every email has an unsubscribe link.
• Support: if you email us, we use what you send to help you.

4. Health information and consent

Mood, feelings and anything you write about your mental health are sensitive. We ask for your explicit consent during setup before you use Mentulis, and you can withdraw it at any time by resetting your data or deleting the app. Where the law requires a legal basis (for example the GDPR in Europe and the UK), we rely on your explicit consent for health-related data and on our contract with you to provide the app.

5. What we never do

• We never sell or rent your personal information.
• We never show ads or share data with advertisers.
• This website does not use tracking or advertising cookies.

6. Where your data is processed

Your account and backup are stored on Google Cloud (Firebase) in Montréal, Canada. Our Pip server runs on Cloudflare’s network, which may handle requests in the data centre closest to you. Our AI provider, Anthropic, processes chat messages in the United States, and Google, Apple (and, once sessions open, Stripe) may process payment information in other countries. These providers are bound by contracts that require them to protect your information. Where personal information leaves Canada, the European Economic Area or the UK, it is protected by appropriate safeguards such as standard contractual clauses.

7. How long we keep it

• Chat content: not stored by us; daily message counts and hashed network addresses are deleted after 30 days.
• Account and progress backup: until you delete your account (Profile › Delete my account), which erases them straight away.
• Premium status: until 30 days after your subscription ends.
• Booking and payment records: as long as required by tax and professional rules (usually up to 7 years).
• Waitlists: until 12 months after launch (or after booking opens), or until you ask us to remove you.

8. Your rights

Depending on where you live (including Canada’s PIPEDA, Quebec’s Law 25, the EU and UK GDPR and US state laws), you can ask to access, correct, delete or receive a copy of your personal information, withdraw consent, or object to or restrict processing. Much of this you can do yourself in the app (Export my data, Reset my data, Delete my account) or at mentulis.com/delete-account. For anything else, email info@mentulis.com and we will reply within 30 days. You can also complain to your privacy regulator, such as the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, or your local data protection authority.

9. Age

Mentulis is for people aged 16 and over. Psychologist sessions are for adults 18 and over. We do not knowingly collect information from children under 16; if you think a child has used Mentulis, contact us and we will delete their information.

10. Security

Data on your phone is encrypted, with the key kept in your phone’s secure storage. You can add a PIN or fingerprint lock. Only you, when signed in, can read your account record, and the data we store is encrypted at rest by our cloud providers. Data in transit uses encryption (HTTPS/TLS), and access to our systems is limited to people who need it. No system is perfectly secure; if a breach affects you, we will tell you and the relevant regulators as the law requires.

11. Changes

If we change this policy in a meaningful way, we will tell you in the app before the change takes effect.