Privacy Policy

Mendoria exists for private reflection, so privacy is not a feature we added — it is the architecture. This policy says what we collect, why, where it lives, and how you take it back.

What we collect

• Account data: your email, name, hashed password (bcrypt — we never see or store the plain text), timezone, and plan.
• Your content: journal entries, dreams, mood check-ins, rituals and completions, goals, mentor conversations, quiz results, community posts. This content belongs to you.
• Operational data: daily usage counters (for plan quotas), audit records of account and billing events, and structured logs that deliberately exclude your content — our logging layer strips journal text, chat messages, and prompts before anything is written.

What we deliberately do not do

• We do not sell or share your data with advertisers. Ever.
• Our own admin tools cannot display journal or conversation content — those fields are excluded from admin queries by construction, not by policy alone.
• We do not use your private content to train AI models.
• We do not run third-party ad trackers.

AI processing

When you use AI features (mentor chat, journal reflections, plan generation), the relevant text is sent to an AI model provider to generate the response, then discarded by the provider per our configuration. Crisis-safety checks run before any AI call, and content that triggers them is answered by a built-in response instead of a model. See the AI Safety Disclaimer.

Payments

Payments are processed by Stripe. We never see or store your card number — we keep only the subscription state and Stripe's identifiers.

Where data lives

Your data is stored in a PostgreSQL database on our servers in the EU. Encrypted backups (encrypted before they leave the server; keys held offline) are retained for 14 days on Google Drive as off-site storage, then age out automatically.

Retention, export, deletion

• Your content stays exactly as long as you keep it.
• Export: download everything — journals, moods, conversations, rituals, results — as JSON from Settings, anytime.
• Deletion: deleting your account permanently removes all your content immediately. Anonymized audit and safety records (with your identity replaced by an irreversible token) are retained for integrity and legal purposes. Backup copies age out within 14 days.

Cookies

We use only the cookies required to keep you signed in. No tracking cookies, no fingerprinting.

Your rights

Wherever you live, we honor access, rectification, portability, and erasure. Settings covers most of it self-serve; for anything else, write to hello@mendoria.app.

Changes

If this policy changes in ways that matter, we will tell you in the product before the change takes effect.