Privacy Policy

This is an English translation of the German Mentavo privacy policy (Datenschutzerklärung). In case of discrepancies, the German version prevails.

Last updated: June 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection provisions is:

Mentavo
Michel Kaluza
Großherzog-Friedrich-Straße 101
66121 Saarbrücken
Germany

Email: info@mentavo.app

2. Scope

This privacy policy informs you about the processing of personal data in connection with the use of the mobile application Mentavo and its related services.

It applies to all features of the app, in particular:

registration and sign-in
use of the personal user account
journaling
check-ins
goals and routines
AI-powered coaching features
astrology features
push notifications
paid subscriptions
support and communication features

This privacy policy applies exclusively to Mentavo. External websites or services referenced within the app are governed by the respective privacy policies of their providers.

3. Principles of data processing

Protecting your personal data is very important to us.

We process personal data exclusively in accordance with applicable data protection law, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable statutory provisions.

Personal data is processed only to the extent necessary to provide the app, carry out the user relationship, improve our services, or fulfil legal obligations.

We do not disclose personal data for advertising purposes. We do not sell personal data to third parties.

4. Legal bases for processing

Depending on the type of processing, personal data is processed on different legal bases.

Contract performance

Where processing is necessary to provide the app and its agreed features, it is carried out on the basis of Art. 6(1)(b) GDPR.

This concerns in particular:

registration
sign-in
management of the user account
storage of personal content
provision of coaching features
data synchronization
subscription management

Consent

Where individual features require prior consent, processing is carried out on the basis of Art. 6(1)(a) GDPR.

Consent given may be withdrawn at any time with future effect.

Legitimate interest

Where necessary, we process data on the basis of our legitimate interest under Art. 6(1)(f) GDPR.

This includes in particular:

ensuring IT security
protection against misuse
error analysis
app stability
further development of the app
fraud prevention
ensuring functionality

Legal obligations

Where statutory retention obligations exist, processing is carried out on the basis of Art. 6(1)(c) GDPR.

5. What personal data we process

Depending on how the app is used, different categories of personal data may be processed.

Account data

When you register and use a user account, we process in particular:

email address
encrypted password (hash)
user identifier
account settings
language settings
time zone
registration date
sign-in status information

Personal profile data

Where voluntarily provided by the user:

name or display name
profile picture
date of birth
time of birth
place of birth

Content created by users

Mentavo allows you to save personal content.

This includes in particular:

journal entries
daily check-ins
goals
sub-goals
routines
habit logs
notes
coaching content
chat histories
feedback
voluntary information provided during onboarding

This content is processed exclusively to provide the features requested by the user.

Astrology data

To calculate astrology features, Mentavo processes the following information, provided it is supplied by the user:

date of birth
time of birth
place of birth

Technical calculation data may additionally be generated from this, for example:

coordinates
time zone
horoscope data
astrological constellations

This data is used exclusively to provide the corresponding features within the app.

Technical information

Technical information may also be processed to ensure the app functions properly.

This includes in particular:

app version
operating system
device information
language settings
time zone
timestamps
technical error information
diagnostic information
log data

This data is not used to profile users for advertising purposes.

6. Special categories of personal data

Mentavo is an app for personal development, self-reflection, and organizing everyday life.

Users decide for themselves what content they enter within the app.

It is therefore possible that users voluntarily enter information that allows conclusions to be drawn about particularly sensitive personal data, for example information about:

physical or mental well-being
stress
sleep
personal crises
emotional state
relationships
other personal life circumstances

Such information is provided solely on a voluntary basis by the user.

Mentavo does not ask users to enter health data or other special categories of personal data.

Should such information nonetheless be voluntarily provided, Mentavo processes it exclusively to provide the features requested by the user.

Mentavo is intended for personal support and self-reflection. The app is not a substitute for medical, psychological, psychotherapeutic, or other professional advice or treatment.

7. Minimum age

Mentavo is intended for users aged 14 and older.

Persons under the age of 14 may not use the app.

Where the applicable law of the user's country of residence requires parental consent, the app may only be used with such consent.

8. Registration and user account

Creating a personal user account is required to use essential features.

During registration, in particular the following data is processed:

email address
password
technical account information

The password is not stored in plain text but is processed exclusively in encrypted form.

The user account enables in particular:

synchronization between devices
storage of personal content
subscription management
account recovery
use of AI features
use of astrology features
management of personal settings

The user account can be deleted at any time directly within the app. Upon deletion, all personal data is erased, unless statutory retention obligations require otherwise.

9. AI features (OpenAI)

Mentavo offers AI-powered features to support personal reflection, goal planning, motivation, and coaching.

To provide these features, content entered by the user is transmitted to the OpenAI API. This may include in particular:

input within AI chats
journal content, provided the user knowingly includes it in an AI request
questions and instructions (prompts)
context information required to generate a response

Processing is carried out exclusively to provide the AI feature requested by the user.

Use of the AI features is voluntary.

AI-generated content is produced automatically and may be inaccurate, incomplete, or incorrect. It is intended solely for personal support and information.

Mentavo is not a substitute for medical, psychological, psychotherapeutic, legal, or other professional advice.

Further information on data processing by OpenAI is available in OpenAI's privacy information.

Further information on data processing by OpenAI is available at:
https://openai.com/de-DE/policies/privacy-policy

10. Astrology features

Mentavo offers astrological evaluations based on the birth data provided by the user.

In particular, the following is processed:

date of birth
time of birth
place of birth

Based on this information, astrological calculations are performed, generating for example:

horoscope data
astrological constellations
planetary constellations
houses
aspects
further astrological calculations

This data is used exclusively to provide the features requested by the user.

The astrological evaluations serve solely for personal entertainment and self-reflection. They do not constitute scientifically verified statements and do not predict future events.

11. Hosting and database (Supabase)

We use Supabase's services to provide the app.

Supabase handles in particular:

hosting
database
authentication
storage of personal data
technical infrastructure

Processing takes place on servers within the European Union.

Where legally required, a data processing agreement pursuant to Art. 28 GDPR is in place with Supabase.

Further information is available in Supabase's privacy policy.

Further information on data processing by Supabase is available at:
https://supabase.com/privacy

12. Subscription management (RevenueCat)

We use RevenueCat to manage paid subscriptions.

RevenueCat processes technical information required to manage subscriptions.

This includes in particular:

subscription status
product identifier
purchase history
platform (iOS or Android)
technical device identifiers, where necessary for matching

RevenueCat does not receive journal entries, chat histories, or other personal content.

Processing is carried out exclusively to manage and synchronize paid subscriptions.

Further information is available in RevenueCat's privacy policy.

Further information on data processing by RevenueCat is available at:
https://www.revenuecat.com/privacy

13. Error analysis and stability (Sentry)

We use Sentry to improve the stability and security of the app.

Sentry helps us detect and fix technical errors and crashes.

In doing so, in particular the following technical information may be processed:

crash reports
stack traces
device information
operating system version
app version
time of the error
technical diagnostic information

Mentavo does not transmit journal entries, coaching content, chat histories, or other personal content via Sentry.

Likewise, no personal information such as name or email address is automatically transmitted to Sentry.

Processing is carried out exclusively to improve the technical stability of the app.

Further information on data processing by Sentry is available at:
https://sentry.io/privacy

14. Sending emails (Resend)

We use the Resend service to send transactional emails.

This includes in particular:

registration
password reset emails
notifications about reported chat content

Only the personal data necessary to send the respective email is processed for this purpose.

Emails are sent exclusively to fulfil the requested function.

Further information on data processing by Resend is available at:
https://resend.com/legal/privacy-policy

15. Website analytics (Google Analytics)

To analyze the use of our website, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics helps us understand how visitors use our website and supports us in continuously improving it.

Activation only after consent

We implement Google Analytics using what is known as Basic Consent Mode: the Google Analytics tag (gtag.js) is only technically loaded after you have actively consented to the analytics category in our cookie consent banner.

Without your consent, no Google Analytics script is loaded, no requests are sent to Google's servers, and no Google Analytics cookies are created (in particular, no _ga cookie).

If you decline the analytics category, Google Analytics remains fully deactivated. You can change your decision at any time via the “Cookie Settings” link in our website's footer.

Data processed

Once consent has been given, the following data may in particular be processed:

pages visited (page views)
technical information about device and browser
approximate location information derived from the IP address (the IP address itself is not stored by Google Analytics)
interactions with the website (e.g. navigation, time spent)

Google Analytics uses cookies or comparable storage technologies for this purpose, provided you have consented.

Advertising features disabled

We have technically disabled Google Signals as well as advertising-related personalization features. We use Google Analytics exclusively for reach/usage analysis, not for advertising purposes, remarketing, or conversion tracking.

Legal basis

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time with future effect, without affecting the lawfulness of processing carried out prior to withdrawal.

Data transfer by Google

The use of Google Analytics may involve the transfer of data to Google servers, including outside the European Union or the European Economic Area. Further information on data processing by Google is available at:
https://policies.google.com/privacy

16. Push notifications

Mentavo may send push notifications, provided the user has consented to receive them.

Push notifications may be used in particular for:

check-in reminders
journal entry reminders
routine reminders
goal reminders
notices about coaching features

Consent can be withdrawn at any time via the device settings or within the app.

17. Communication with support

When users contact our support team, we process the personal data necessary to handle the request.

This includes in particular:

email address
content of the request
time of contact
voluntarily provided information

Processing is carried out exclusively to handle the respective request.

18. Recipients of personal data

As a general rule, personal data is not disclosed to unauthorized third parties.

Where necessary to provide the app, personal data may be transmitted to carefully selected service providers.

We currently use in particular the following service providers:

Supabase (hosting and database)
OpenAI (AI features)
RevenueCat (subscription management)
Sentry (error analysis)
Resend (email delivery)
Google Analytics (website reach/usage analysis, only after consent)

All service providers are used exclusively within the scope of applicable legal provisions.

19. Transfers to third countries

Some of the service providers used may be based outside the European Union or the European Economic Area, or may process data outside these regions.

Where personal data is transferred to third countries, this is done exclusively in compliance with Art. 44 et seq. GDPR.

Where necessary, appropriate safeguards are used, such as the standard contractual clauses approved by the European Commission or other legally recognized protection mechanisms.

20. Retention period

Personal data is stored only for as long as necessary to fulfil the respective purposes.

As a general rule:

Account data is stored until the user account is deleted.
Journal entries, check-ins, goals, routines, and other personal content are stored until deleted by the user or until the user account is deleted.
Subscription information is stored in accordance with statutory and tax-related retention obligations.
Technical error logs are stored only for as long as necessary for error analysis and to ensure app stability.

After the user account is deleted, all personal data is erased, unless statutory retention obligations require otherwise.

Mentavo does not create long-term backup copies of personal user data for the purpose of later restoration after an account has been deleted.

21. Data security

We take appropriate technical and organizational measures to protect personal data from loss, misuse, unauthorized access, alteration, or disclosure.

This includes in particular:

encrypted data transmission (TLS)
access restrictions
authentication mechanisms
secure storage of personal data
regular security updates
monitoring of technical stability
measures to prevent misuse

Despite all technical and organizational measures, complete security of data transmission over the internet cannot be guaranteed.

22. Rights of data subjects

As a data subject, you have in particular the following rights under the General Data Protection Regulation (GDPR):

Right of access (Art. 15 GDPR)

You have the right to request confirmation as to whether we process personal data about you. If so, you have the right to obtain access to that data and further information about its processing.

Right to rectification (Art. 16 GDPR)

You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.

Right to erasure (Art. 17 GDPR)

You have the right to request the erasure of your personal data, provided the statutory requirements are met.

Your user account can be deleted at any time directly within the Mentavo app.

Upon deletion of the user account, all personal data is erased, unless statutory retention obligations or other legal grounds prevent immediate erasure.

Right to restriction of processing (Art. 18 GDPR)

Under the statutory requirements, you have the right to request the restriction of the processing of your personal data.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data you have provided to us, which we process automatically on the basis of your consent or for contract performance, in a structured, commonly used, and machine-readable format, or to have it transferred to another controller where technically feasible.

Right to object (Art. 21 GDPR)

Where personal data is processed on the basis of legitimate interests, you have the right to object to this processing at any time for reasons arising from your particular situation.

Withdrawal of consent

Where the processing of personal data is based on consent, you may withdraw this consent at any time with future effect.

The lawfulness of processing carried out prior to withdrawal remains unaffected.

23. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

You may contact, in particular, the supervisory authority responsible for your place of residence or the authority responsible for us.

24. No automated decision-making

Mentavo does not make automated decisions within the meaning of Art. 22 GDPR that produce legal effects concerning users or similarly significantly affect them.

Content generated by the integrated AI is intended solely for personal support and does not constitute an automated decision in the legal sense.

25. No disclosure for advertising purposes

Mentavo does not use personal data for personalized advertising.

In particular, there is:

no sale of personal data,
no rental of personal data,
no disclosure of personal data to advertising networks,
no profiling for advertising purposes.

26. Changes to this privacy policy

We reserve the right to amend this privacy policy where necessary due to technical, legal, or organizational changes.

The current version is available at any time within the app and on our website.

Users will be informed of material changes in an appropriate manner within the app.

27. Privacy contact

If you have questions about the processing of personal data or wish to exercise your data protection rights, you can contact us at any time.

Mentavo
Michel Kaluza
Großherzog-Friedrich-Straße 101
66121 Saarbrücken
Germany

Email: info@mentavo.app

28. Final provisions

Mentavo was developed with the goal of supporting users in their personal development, self-reflection, and organization of everyday life.

The protection of personal data is an essential part of this commitment.

We are committed to processing personal data exclusively within the framework of applicable law and to taking appropriate technical and organizational measures to ensure an adequate level of protection.

Thank you for trusting Mentavo.