Version 2026-08-18.
This policy sets out what data Mentalizi processes, why, for how long, and who else sees it. It is written to be read, not to be endured.
SCALERIA (SAS), 6 rue d’Armaillé, 75017 Paris.
For any question or request about your data: contact@mentalizi.com.
What you tell Mentalizi concerns your mental health. The GDPR places such information among the most sensitive data there is (Article 9, special categories of personal data). We therefore process it only on the basis of your explicit consent, collected before your first session, on a screen of its own — and you can withdraw it at any time.
Withdrawing your consent means you stop using the coach; you do that by deleting your account from the Profile screen.
| Data | What for | Legal basis |
| Email address, password (encrypted) | Creating and securing your account | Performance of the contract |
| First name, age, discipline, level, goals | Personalising the coaching | Explicit consent |
| Voice recording during a session | Making the real-time conversation possible | Explicit consent |
| Transcripts of your sessions | Continuity of your follow-up, producing the summaries | Explicit consent |
| Summaries, themes, mood estimate, mental profile | Following how you progress from one session to the next | Explicit consent |
| Written messages with your coach | Running the chat, and continuity of your follow-up | Explicit consent |
| Your journal | Being yours, first — and your coach reads your latest entries before your sessions, to make the conversation your own | Explicit consent |
| Your feedback on routines (ratings, "did that help?", how it felt) | So your coach knows what works for you, and adjusts what they suggest | Explicit consent |
| Technical events (session dates, quotas) | Security, preventing abuse, keeping costs under control | Legitimate interests |
Your voice is not analysed as biometric data. It is turned into text, and it is the text that is processed. We measure neither your timbre, nor your intonation, nor your emotional state from the sound itself, and we use no emotion recognition system within the meaning of the European regulation on artificial intelligence.
Your data is never sold, never used for advertising, and never used to train artificial intelligence models.
Making a coach speak takes technical providers. Each one is involved only in what it strictly needs, acting as a processor, with no right to use anything for its own purposes:
Some of these providers process data outside the European Union. Those transfers are covered by the mechanisms set out in Chapter V of the GDPR (the European Commission's standard contractual clauses, or an applicable adequacy decision).
Nobody at Mentalizi reads your conversations as they happen. Access to production data is limited to what maintenance requires, and every access is logged.
When you delete your account, all of it is erased straight away. Copies may remain for up to 30 days in our host's encrypted backups, where nothing can be done with them.
You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time.
Straight from the app:
For anything else: contact@mentalizi.com. We answer within one month.
You can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr, 3 place de Fontenoy, 75334 Paris Cedex 07).
Mentalizi is for people aged 15 and over. We do not knowingly collect data from anyone younger. If you are a parent and find that a child under 15 has created an account, write to contact@mentalizi.com: the account and its data will be deleted.
Your coach generates their replies automatically, and the app works out a mood estimate and a mental profile. These operations produce no legal effect concerning you, and they are not the basis of any decision that significantly affects you within the meaning of Article 22 of the GDPR: they exist only to personalise well-being support, which you remain free to follow or to ignore.
Exchanges are encrypted in transit. Access to data is partitioned by user in the database itself: technically, one person cannot read another person's data. The keys to the AI providers are never present in the app installed on your phone.
Any substantial change to this document will be shown to you in the app, and you will have to accept it to keep using the service.