Legal document
Privacy Policy
Menoup never sells your data. It is stored securely within the European Union (Frankfurt) and is received only by the processors named in this policy, for the purposes described here. Our AI providers receive data only when you use Mona or another AI-based feature — always with your consent.
Introduction
The Menoup application is committed to protecting your personal data. This privacy policy informs you about what data we collect, how we use it, and what rights you have.
The app is designed to support the health-conscious lifestyle of women over 40, especially during perimenopause and menopause.
Controller: Smart Marketing
Headquarters: Vojvođanska 17., 24420 Kanjiža, Serbia
Tax ID (PIB): 110888344
Contact: hello@menoup.app
What data do we collect?
The app processes the following data:
Health questionnaire data:
• Name, age, height, weight
• Health-related answers (e.g. symptoms, lifestyle)
• Goals and preferences
Diary data:
• Food diary entries
• Daily water intake
• Exercise log
• Sleep diary
Artificial Intelligence (Mona)
The app uses Anthropic's Claude AI to power the Mona assistant and analyse food nutrient content.
When you:
• Analyse a food photo – the image is sent to Anthropic servers for analysis
• Log food by text – the description is sent to the Anthropic API
• Analyse a photo of lab results – the image is sent to Anthropic servers for analysis
• Use the Fridge Scanner – the photo is sent to Anthropic servers, together with the food-related answers from your questionnaire (allergies, diet, diagnoses, menopause stage) and the name of your lowest Mona Score (formerly Balance Score) area this week, to recognise the ingredients and suggest recipes
• Chat with Mona – your messages are sent to Anthropic servers, along with relevant recently logged Menoup context (such as symptoms, sleep, food diary, water intake, exercise, cycle information and your Mona Score), so her replies are relevant to you
• Chat with Mona while you have vitals logged from the past 7 days (such as heart rate, HRV, blood pressure, blood glucose, blood oxygen, body temperature and weight) — whether synced from Apple Health/Health Connect or entered manually – these values may be included in the conversation and sent to Anthropic's servers, to make her guidance more personal
Anthropic's privacy policy: anthropic.com/privacy
To find the most relevant health information, the text of your question to Mona is also processed by OpenAI's embedding service, so it can search our knowledge base. OpenAI does not receive your diary entries, vitals, or any other account data — only the text you type in chat.
OpenAI's privacy policy: openai.com/policies/privacy-policy
Important: during a Mona chat and for the weekly summary, the name you gave in your profile or the questionnaire is also sent, so Mona can address you by name. Your email address and other directly identifying account details are not sent — beyond your name, only the content described above (such as the food name, your question, or your logged health context) is transmitted.
Apple Health / Health Connect
If you connect Apple Health (iOS) or Health Connect (Android) in the app, Menoup requests access to the following health data categories:
• Sleep: quality, sleep stages, bedtime and wake-up times
• Movement: step count, workouts (type, duration, distance)
• Vitals: resting heart rate, heart rate variability (HRV), blood pressure, blood glucose, blood oxygen saturation, body temperature, weight
• Cycle: menstrual flow intensity, ovulation test results, basal body temperature (BBT)
• Mindfulness: meditation session minutes
This connection is entirely optional — the app is fully functional without it.
Your health data is stored encrypted on our servers within the European Union (Frankfurt).
You can disconnect at any time via Profile → Health apps.
When you chat with Mona, receive your weekly summary or create the AI part of your Health Summary, relevant values from your connected health data (such as sleep, workouts, steps, vitals and cycle data) may be sent to our AI provider, Anthropic, to write that text, as described in the "Artificial Intelligence (Mona)" section. When you use the Fridge Scanner, Anthropic receives only the name of your lowest Mona Score area this week (for example "sleep"), not the values. Anthropic processes this data only to provide the service to us and does not use it to train its models. We never use Apple Health or Health Connect data for advertising or marketing, never sell it, and never share it with advertisers or data brokers.
Purpose of data use
We use your data solely for the following purposes:
• Displaying personalised daily summaries and analyses
• Tracking nutrient intake and comparing to daily RDA values
• Enabling personalised responses from the Mona AI assistant
• Setting tailored goals based on the health questionnaire
We do not use your data for advertising, and we never sell it. Your data is received only by the processors named in the "Artificial Intelligence (Mona)" and "Other providers" sections, and only for the purposes described there. Our AI providers receive data only when you use Mona or another AI-based feature (for example food photo analysis, text food logging, the fridge scanner, lab result analysis or the weekly summary).
Other providers
The app's database and sign-in run on Supabase, on servers within the European Union (Frankfurt). The app's server functions run on Vercel, which processes requests (including what is sent to our AI providers) while passing them on.
For product analytics we use PostHog (servers in the EU), as described in the table above.
To manage your subscription, we use RevenueCat — this links your account identifier to your purchase (it does not receive your email address).
To send emails (registration, welcome, weekly summary), we use Resend, which processes your email address and — in the case of the weekly summary — its content, in order to deliver it.
Usage statistics (PostHog)
Menoup app (iOS, Android and web app)
In the app we collect usage statistics only if you allow it. Their purpose is to see which features are used and where the subscription process works or breaks down, so we can improve the app. Legal basis: your consent (Article 6(1)(a) GDPR).
The app asks you once, after you sign in. Until you allow it, the app sends no usage statistics, and it sends none before you sign in either (for example while you fill in the questionnaire before registering).
If you allow it, we record:
• the random user ID of your Menoup account, as a pseudonymous identifier
• these events: starting your trial; opening the subscription screen (and whether it opened because your trial ended); buying a plan (which plan); opening your Mona Score (without its value); completing a fridge scan; submitting the cancellation survey (only the reason you selected and whether you wrote a comment)
• your subscription status and the platform (iOS, Android or web)
• technical details that the PostHog software adds automatically, such as app version, operating system, device type, language setting and time zone
Never included: your name, email address, diary entries, health data or conversations with Mona. The comment you write in the cancellation survey is not sent to PostHog; we save it to your Menoup account so we can read your feedback. No location is derived from your IP address (GeoIP is turned off), and the app does not automatically record screen views, sessions or app launches.
The data is processed by PostHog on servers in the European Union. We keep it for as long as it is needed for developing the product. Once you withdraw your consent, no new data is collected. On request, we delete the data stored in PostHog (your pseudonymous identifier and its events); to ask for this, write to hello@menoup.app. Deleting all your data or your account in the app does not delete data already stored in PostHog; to have it deleted, send us a request.
You can change your decision at any time: Profile → Data & Privacy → Usage statistics. If you turn it off, the app stops sending immediately and discards events that have not been sent yet. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. The app stores your decision on the device, for your account, so on another device it asks again. If you delete all your data in the app (Profile → Data & Privacy), this decision is deleted too, and the app asks again.
Website (menoup.app)
On the website, PostHog loads only if you choose "Accept all" in the cookie banner (consent, Article 6(1)(a) GDPR). It then automatically records page views, clicks and similar interactions, clicks on buttons we have marked, and whether you started the free question to Mona and received an answer (with the page language only). PostHog stores a random identifier in a cookie and in your browser's local storage. PostHog derives no location from your IP address (GeoIP is turned off for every event). You can change your choice at any time with the "Cookie settings" link at the bottom of the website's pages. If you choose "Essential only", PostHog stops recording at once, and its cookie and the data it stored in your browser are deleted. The retention described above applies to the website data too; as this data is not linked to your Menoup account, we can delete it on request only if it can be matched to you.
If the spam protection of our newsletter sign-up form is triggered, our server records an anonymous event with only the page and the language, a random identifier and no location.
Data storage and security
The app stores your data on secure servers located in the European Union (Frankfurt). Data is transferred via encrypted HTTPS. Other users cannot access your data.
Your rights
Under GDPR and applicable data protection laws, you have the right to:
• Access – view your data stored in the app
• Rectification – the questionnaire can be completed again at any time
• Deletion – delete your account and all data anytime in the app (Profile → Account → Delete Account), or without the app at menoup.app/delete-account
• Objection – you can object to data processing at any time
For questions: hello@menoup.app
Age restriction
Menoup is designed exclusively for users aged 18 and over. We do not knowingly collect data from persons under 18.
Policy changes
This privacy policy entered into force on 1 May 2025. Last updated: 6 July 2026 (clarified that HealthKit data may also be sent to Anthropic during a Mona chat conversation); 23 July 2026 (added that the text of chat messages is also processed by OpenAI's embedding service); 24 July 2026 (named PostHog, RevenueCat, and Resend as service providers, and clarified the description of our analytics data handling); 2 September 2026 (clarified that vitals sharing with Anthropic depends on having logged data, not on an active Apple Health/Health Connect connection; added blood oxygen to the list; removed a reference to writing sleep/menstrual data back to Apple Health/Health Connect, a feature not currently active; expanded the description of what is sent to Anthropic during a Mona chat to include logged symptom, sleep, food, water, exercise, cycle and Mona Score context); 22 September 2026 (the name you gave in your profile or the questionnaire is now included in what is sent to Anthropic during a Mona chat and for the weekly summary, so Mona can address you by name; this requires renewing your AI permission in the app); 27 September 2026 (stated that Anthropic does not use the health data it receives for a Mona chat to train its models, and that Apple Health/Health Connect data is never used for advertising or marketing; added workout distance to the movement data; updated where to disconnect; clarified that your data is received only by the processors named in this policy, that AI providers receive data whenever you use an AI-based feature, not only the Mona chat; named Supabase, Vercel, PostHog and Sentry among the other providers; described exactly which events go to PostHog; named every AI feature that receives health data — Mona, the weekly summary, the Health Summary and the Fridge Scanner — and added lab result and fridge photo analysis to the AI section); 6 October 2026 (usage statistics in the app are now collected only with your consent, which you can withdraw in the app at any time; the written comment from the cancellation survey is no longer sent to PostHog; added a separate section describing exactly what PostHog receives from the app and the website; on the website, consent can now be withdrawn with the "Cookie settings" link, and PostHog no longer derives a location from the IP address there; described how long we keep usage statistics and how to request their deletion); 7 October 2026 (the Balance Score is now called Mona Score; we clarified how you can withdraw the cookie consent you gave on the website); 8 October 2026 (we no longer use Sentry error tracking, so we removed it from the cookie table and from the other providers). We may update the policy from time to time. In case of significant changes, we will notify you within the app.