Privacy Policy

Last updated: July 8, 2026

Mentara ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use the Mentara mobile application and the mentara.me website, with full disclosure of every category of data we touch.

Plain-language summary (not a substitute for the full policy)

We collect the information needed to run Mentara: your name, email, profile, messages, and optional voice reflections. We never sell it. We use it to match you with a mentor or student and to keep the app running, and you can access, correct, or delete your data at any time from your profile or by emailing us. Automated messages in the app are always labeled "Mentara AI" so you know they're not from a person. This summary is for convenience only. The full policy below is what actually governs how we handle your information.

1. Information We Collect

We collect the following types of information:

We do not collect, and have no way to access, your precise location, financial or payment information, health information, or browsing history outside the app. There is nothing else we collect beyond what is listed above.

2. How We Use Your Information

We use your information to:

3. Automated Messages & AI-Generated Content

Mentara uses an in-app assistant, labeled "Mentara AI" in the chat, to send automated scheduling reminders, check-ins, and suggested call topics. Every message from this assistant is clearly labeled "Mentara AI" so you always know when you're receiving an automated message rather than a message from your matched mentor or student. We also use Google Gemini (server-side) to power mentor matching, generate suggested call topics, and summarize optional voice reflections. Automated and AI-generated content is never presented as coming from a human unless a human (your matched mentor or student) actually wrote it.

4. Cookies, Analytics & Local Storage

The mentara.me website uses Vercel Web Analytics, a cookieless analytics service that collects aggregated, anonymized information about page visits, such as page views, referring site, approximate location derived from IP address, and device type, to help us understand traffic to our website. This service does not set cookies and does not track you across other websites. During sign-up on the website, we temporarily store OAuth session state in your browser's local storage; it is automatically deleted after 10 minutes or once sign-in completes, whichever comes first. The Mentara mobile app does not use browser cookies. We do not use any advertising or cross-site tracking technology. Where applicable, we honor Global Privacy Control (GPC) signals as an opt-out of sale or sharing.

5. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

We use the following service providers to operate Mentara. Each processes only the data needed to provide its service, and each is bound by its own privacy commitments:

ProviderWhat it doesData it processes
SupabaseDatabase, authentication, file storage, realtime messagingAccount, profile, message, and review data
Google GeminiAI mentor matching, call topic suggestions, voice reflection transcriptionProfile and goal data, voice reflection audio (server-side only)
ResendTransactional email deliveryEmail address, meeting details
ExpoPush notification deliveryDevice push token
SentryCrash and error diagnosticsError logs, device/OS type, random user identifier (never message content)
VercelWebsite hosting and cookieless analyticsAggregated, anonymized page-view data (mentara.me only)

6. International Data Transfers

Mentara is operated from the United States, and our service providers listed above process data on servers that may be located in the United States or other countries. By using Mentara, you understand that your information may be transferred to and processed in a country other than the country where you live, which may have data protection laws that differ from those in your jurisdiction.

7. Data Storage and Security

Your data is stored on servers provided by Supabase, which uses industry-standard security practices. Authentication tokens are stored in encrypted storage on your device. We implement row-level security policies to ensure users can only access data they are authorized to view.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your profile and associated data will be deleted within 30 days, except where retention is required by law.

Messages are retained to provide conversation history. You may contact us to request deletion of specific messages.

9. Your Rights

You have the right to:

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to: know what personal information we collect and how we use and share it; request access to or a copy of that information; request deletion of your personal information; correct inaccurate personal information; and not be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioral advertising, and we have not done so in the preceding 12 months. To exercise any of these rights, contact us at support@mentara.me; we will verify your request using your account email before responding.

11. Children's Privacy

Mentara is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. Users between 13-17 must have parental or guardian consent before using Mentara. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at support@mentara.me.

12. Third-Party Sign-In

When you sign in with Google or Apple, we receive your name and email address from those services. Your use of Google Sign-In is subject to Google's Privacy Policy. Your use of Sign in with Apple is subject to Apple's Privacy Policy. We do not receive your password from these providers.

13. Security Incident Notification

If we become aware of a security incident that compromises your personal information in a way that requires notice under applicable law, we will notify affected users and any required regulators without undue delay, consistent with our legal obligations.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page and, where appropriate, through an in-app notification. Your continued use of the app after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@mentara.me. We will respond to all requests within 30 days.