Legal document
Privacy Policy
Menoup never sells your data. It is stored securely within the European Union (Frankfurt) and is received only by the processors named in this policy, for the purposes described here. Our AI providers receive data only when you use Mona or another AI-based feature — always with your consent.
Introduction
The Menoup application is committed to protecting your personal data. This privacy policy informs you about what data we collect, how we use it, and what rights you have.
The app is designed to support the health-conscious lifestyle of women over 40, especially during perimenopause and menopause.
Controller: Smart Marketing
Headquarters: Vojvođanska 17., 24420 Kanjiža, Serbia
Tax ID (PIB): 110888344
Contact: hello@menoup.app
What data do we collect?
The app processes the following data:
Health questionnaire data:
• Name, age, height, weight
• Health-related answers (e.g. symptoms, lifestyle)
• Goals and preferences
Diary data:
• Food diary entries
• Daily water intake
• Exercise log
• Sleep diary
Artificial Intelligence (Mona)
The app uses Anthropic's Claude AI to power the Mona assistant and analyse food nutrient content.
When you:
• Analyse a food photo – the image is sent to Anthropic servers for analysis
• Log food by text – the description is sent to the Anthropic API
• Analyse a photo of lab results – the image is sent to Anthropic servers for analysis
• Use the Fridge Scanner – the photo is sent to Anthropic servers, together with the food-related answers from your questionnaire (allergies, diet, diagnoses, menopause stage) and the name of your lowest Mona Score (formerly Balance Score) area this week, to recognise the ingredients and suggest recipes
• Chat with Mona – your messages are sent to Anthropic servers, along with relevant recently logged Menoup context (such as symptoms, sleep, food diary, water intake, exercise, cycle information and your Mona Score), so her replies are relevant to you
• Chat with Mona while you have vitals logged from the past 7 days (such as heart rate, HRV, blood pressure, blood glucose, blood oxygen, body temperature and weight) — whether synced from Apple Health/Health Connect or entered manually – these values may be included in the conversation and sent to Anthropic's servers, to make her guidance more personal
Anthropic's privacy policy: anthropic.com/privacy
To find the most relevant health information, the text of your question to Mona is also processed by OpenAI's embedding service, so it can search our knowledge base. OpenAI does not receive your diary entries, vitals, or any other account data — only the text you type in chat.
OpenAI's privacy policy: openai.com/policies/privacy-policy
Important: during a Mona chat and for the weekly summary, the name you gave in your profile or the questionnaire is also sent, so Mona can address you by name. Your email address and other directly identifying account details are not sent — beyond your name, only the content described above (such as the food name, your question, or your logged health context) is transmitted.
Apple Health / Health Connect
If you connect Apple Health (iOS) or Health Connect (Android) in the app, Menoup requests access to the following health data categories:
• Sleep: quality, sleep stages, bedtime and wake-up times
• Movement: step count, workouts (type, duration, distance)
• Vitals: resting heart rate, heart rate variability (HRV), blood pressure, blood glucose, blood oxygen saturation, body temperature, weight
• Cycle: menstrual flow intensity, ovulation test results, basal body temperature (BBT)
• Mindfulness: meditation session minutes
This connection is entirely optional — the app is fully functional without it.
Your health data is stored encrypted on our servers within the European Union (Frankfurt).
You can disconnect at any time via Profile → Health apps.
When you chat with Mona, receive your weekly summary or create the AI part of your Health Summary, relevant values from your connected health data (such as sleep, workouts, steps, vitals and cycle data) may be sent to our AI provider, Anthropic, to write that text, as described in the "Artificial Intelligence (Mona)" section. When you use the Fridge Scanner, Anthropic receives only the name of your lowest Mona Score area this week (for example "sleep"), not the values. Anthropic processes this data only to provide the service to us and does not use it to train its models. We never use Apple Health or Health Connect data for advertising or marketing, never sell it, and never share it with advertisers or data brokers.
Purpose of data use
We use your data solely for the following purposes:
• Displaying personalised daily summaries and analyses
• Tracking nutrient intake and comparing to daily RDA values
• Enabling personalised responses from the Mona AI assistant
• Setting tailored goals based on the health questionnaire
We do not use your data for advertising, and we never sell it. Your data is received only by the processors named in the "Artificial Intelligence (Mona)" and "Other providers" sections, and only for the purposes described there. Our AI providers receive data only when you use Mona or another AI-based feature (for example food photo analysis, text food logging, the fridge scanner, lab result analysis or the weekly summary).
Other providers
The app's database and sign-in run on Supabase, on servers within the European Union (Frankfurt). The app's server functions run on Vercel, which processes requests (including what is sent to our AI providers) while passing them on.
For product analytics we use PostHog (servers in the EU), as described in the table above.
To manage your subscription, we use RevenueCat — this links your account identifier to your purchase (it does not receive your email address).
To send emails (registration, welcome, weekly summary), we use Resend, which processes your email address and — in the case of the weekly summary — its content, in order to deliver it.
Gift codes
If you redeem a gift code on our website, we record which code you redeemed, when you redeemed it, and until when the free access it gives you runs. We use this to give you the access, to make sure a code is not used more often than allowed, and to count, without names, how many people redeemed the codes of a campaign. Legal basis: providing the service you asked for (Article 6(1)(b) GDPR) and, for the campaign counts, our legitimate interest in knowing which campaigns work (Article 6(1)(f) GDPR).
We keep this record for as long as your account exists. If you delete your account, the link to you is removed; only an anonymous entry remains (the code and the dates), so that the campaign counts stay correct.
A gift code is never linked to your health data.
Bot protection (Cloudflare Turnstile)
To keep automated programs (bots) away from some of our forms, we use Cloudflare Turnstile, a service of Cloudflare, Inc. It runs when you ask Mona the free question on our website, use the contact form, sign up for the newsletter, fill in the questionnaire on the website or redeem a gift code.
To tell people and bots apart, Turnstile checks technical signals from your browser and device, such as your IP address and browser details. It is not used for advertising, and we do not use it to identify you. Cloudflare may process this data outside the European Union; such transfers are covered by the safeguards the GDPR requires. Legal basis: our legitimate interest in protecting the service from abuse (Article 6(1)(f) GDPR).
Usage statistics (PostHog)
Menoup app (iOS, Android and web app)
In the app we collect usage statistics only if you allow it. Their purpose is to see which features are used and where the subscription process works or breaks down, so we can improve the app. Legal basis: your consent (Article 6(1)(a) GDPR).
The app asks you once, after you sign in. Until you allow it, the app sends no usage statistics, and it sends none before you sign in either (for example while you fill in the questionnaire before registering).
If you allow it, we record:
• the random user ID of your Menoup account, as a pseudonymous identifier
• these events: starting your trial; opening the subscription screen (and whether it opened because your trial ended); buying a plan (which plan); opening your Mona Score (without its value); completing a fridge scan; submitting the cancellation survey (only the reason you selected and whether you wrote a comment)
• your subscription status and the platform (iOS, Android or web)
• technical details that the PostHog software adds automatically, such as app version, operating system, device type, language setting and time zone
Never included: your name, email address, diary entries, health data or conversations with Mona. The comment you write in the cancellation survey is not sent to PostHog; we save it to your Menoup account so we can read your feedback. No location is derived from your IP address (GeoIP is turned off), and the app does not automatically record screen views, sessions or app launches.
The data is processed by PostHog on servers in the European Union. We keep it for as long as it is needed for developing the product. Once you withdraw your consent, no new data is collected. On request, we delete the data stored in PostHog (your pseudonymous identifier and its events); to ask for this, write to hello@menoup.app. Deleting all your data or your account in the app does not delete data already stored in PostHog; to have it deleted, send us a request.
You can change your decision at any time: Profile → Data & Privacy → Usage statistics. If you turn it off, the app stops sending immediately and discards events that have not been sent yet. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. The app stores your decision on the device, for your account, so on another device it asks again. If you delete all your data in the app (Profile → Data & Privacy), this decision is deleted too, and the app asks again.
Website (menoup.app)
On the website, PostHog loads only if you choose "Accept all" in the cookie banner (consent, Article 6(1)(a) GDPR). It then automatically records page views, clicks and similar interactions, clicks on buttons we have marked, and whether you started the free question to Mona and received an answer (with the page language only). PostHog stores a random identifier in a cookie and in your browser's local storage. PostHog derives no location from your IP address (GeoIP is turned off for every event). You can change your choice at any time with the "Cookie settings" link at the bottom of the website's pages. If you choose "Essential only", PostHog stops recording at once, and its cookie and the data it stored in your browser are deleted. The retention described above applies to the website data too; as this data is not linked to your Menoup account, we can delete it on request only if it can be matched to you.
If the spam protection of our newsletter sign-up form is triggered, our server records an anonymous event with only the page and the language, a random identifier and no location.
Data storage and security
The app stores your data on secure servers located in the European Union (Frankfurt). Data is transferred via encrypted HTTPS. Other users cannot access your data.
Your rights
Under GDPR and applicable data protection laws, you have the right to:
• Access – view your data stored in the app
• Rectification – the questionnaire can be completed again at any time
• Deletion – delete your account and all data anytime in the app (Profile → Account → Delete Account), or without the app at menoup.app/delete-account
• Objection – you can object to data processing at any time
For questions: hello@menoup.app