Privacy Policy

For the purposes of applicable data protection laws (including the GDPR), the data controller of your personal information is:

If you have questions about how we process your data, you can contact us at the address above or email info@mentore-ai.com.

We collect information you provide directly to us:

• Account Information: Email address, name, and password when you create an account
• Journal Entries: Text content you write in your journal
• Tracking Data: Mood, sleep, habits, and other metrics you choose to track
• Conversations: Messages exchanged with AI coaches
• Payment Information: Billing details processed securely by our payment providers (Paddle for web, RevenueCat for mobile)

Automatically Collected Information

• Device information (browser type, operating system)
• Usage data (features used, session duration)
• IP address and approximate location
• Cookies and similar technologies (see our Cookie Policy)

We process your personal data based on the following legal grounds under applicable data protection laws (including GDPR Article 6):

• Contract Performance: Processing necessary to provide you with the Mentoré service, including account management, AI coaching, journaling, and tracking features
• Consent: Where you have given explicit consent, such as for analytics cookies, marketing communications, or optional data processing features. You may withdraw consent at any time (see Your Rights below)
• Legitimate Interest: Processing necessary for our legitimate business interests, such as improving our service, ensuring security, and preventing fraud, where these interests are not overridden by your rights
• Legal Obligation: Processing necessary to comply with applicable laws and regulations

We use your information to:

• Provide personalized AI coaching based on your context
• Generate insights and patterns from your tracking data
• Improve and optimize our services
• Send important service updates and notifications
• Process payments and manage your subscription
• Respond to your support requests
• Ensure security and prevent fraud

We do not sell your personal information. We may share data only in these limited circumstances:

• Service Providers: With trusted partners who help us operate our service (hosting, payment processing, analytics)
• AI Providers: With AI model providers (OpenAI, Anthropic) to power coaching conversations, under strict data processing agreements
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We implement robust security measures to protect your data:

• Encryption in transit for all data transmission (TLS 1.3)
• Encryption at rest for stored data (AES-256)
• Automated vulnerability scanning and dependency monitoring
• Strict access controls and security best practices
• Infrastructure hosted on SOC 2 Type II certified providers (Vercel, Supabase)

For more details, see our Security page.

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to certain types of processing
• Withdraw Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise these rights, visit your Account Settings or contact us at info@mentore-ai.com. We will respond to your request within 30 days (or the timeframe required by applicable law). We may need to verify your identity before processing your request.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes of collection, and the categories of third parties with whom we share your information
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions
• Right to Correct: You may request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is necessary as we do not engage in these practices
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

Categories of Personal Information

In the preceding 12 months, we may have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email address, IP address)
• Commercial information (subscription and payment history)
• Internet or electronic network activity (usage data, device info)
• Sensory data or data reflecting mental or physical health (journal entries, mood tracking, sleep data — provided voluntarily by you)
• Inferences drawn from the above (AI-generated coaching insights)

To submit a verifiable consumer request, contact us at info@mentore-ai.com.

Mentoré uses AI to generate coaching responses, identify patterns in your data, and provide personalized insights. This processing is an integral part of the service you have requested.

We want to be clear about how this works:

• AI coaching is a tool for personal reflection, not automated decision-making that produces legal or similarly significant effects on you
• No decisions about your access, rights, or obligations are made solely by automated means
• You are always free to disregard, question, or seek alternative views to any AI-generated guidance
• Under GDPR Article 22, you have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you — our AI coaching does not fall into this category

For more details about how AI processes your data, see our AI Transparency page.

We retain your data for as long as your account is active. When you delete your account:

• Journal entries and tracking data are deleted within 30 days
• AI conversation history is deleted within 30 days
• Account information is deleted within 90 days
• Anonymized analytics may be retained for service improvement

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for EU data transfers.

Mentoré is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app. Your continued use of Mentoré after changes indicates acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us: