Privacy Policy

Last Updated: October 16, 2026 • Application: Mentius

1. Introduction & Scope

Mentius ("we", "us", or "our") is a digital cognitive performance, emotional awareness, and mental resilience platform designed for general wellness and lifestyle self-improvement. This Privacy Policy outlines how we collect, process, store, and safeguard your personal information in strict compliance with global data protection frameworks, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the FTC Health Breach Notification Rule.

2. Information We Collect

We operate strictly under the principle of Data Minimization:

• Account Credentials: When signing in via Google Sign-In or email Magic Link, we process only your email address, unique authentication identifier (UUID), and optional display name/totem preference.
• Cognitive & Wellness Assessment Metrics: Scores and interaction data derived from in-app cognitive sprints (working memory, reaction speed, focus), emotional awareness games, and mental readiness assessments.
• Technical & Telemetry Data: Minimal diagnostic logs for crash prevention, rate limiting, and secure cloud synchronization.

3. How We Use Your Data & Strict No-Sale Pledge

Your information is processed exclusively to deliver your personalized cognitive exercises, display progress charts, and synchronize your data across your devices.

Strict Anti-Tracking Pledge: Mentius does not sell, rent, monetize, or disclose your personal, cognitive, or wellness data to third-party advertising brokers, behavioral marketing networks (such as Meta, Google Ads, or data aggregators), or marketing analytics platforms.

4. Data Security, Encryption & Cloud Infrastructure

• On-Device AES-256 Encryption: All cached records and offline databases on your local hardware (Hive) are encrypted at rest using industry-standard AES-256 encryption, with cryptographic master keys anchored in hardware-backed storage (Apple Keychain on iOS / Android Keystore on Android).
• Secure European Cloud Storage: Cloud synchronization is hosted on Supabase infrastructure within the European Union (AWS eu-central-1, Frankfurt, Germany). All network traffic is encrypted via TLS 1.3, and data records are partitioned using granular PostgreSQL Row-Level Security (RLS) policies.

5. Your Rights & Account Deletion

You have full ownership of your data under GDPR and international privacy laws:

• In-App Instant Deletion: Navigate to Settings > Data & Privacy > Reset All Data to immediately and permanently purge all local storage and associated cloud records.
• Web / Email Deletion Request: If you have uninstalled the application, email onurtasci146@gmail.com with the subject line "Delete My Mentius Account". All associated records will be permanently erased within 24 hours.