Privacy Policy

Version of 30 September 2026.

This policy sets out what data Mentalizi processes, why, for how long, and who else sees it. It is written to be read, not to be endured.

1. Data controller

SCALERIA (SAS), 6 rue d’Armaillé, 75017 Paris.

For any question or request about your data: contact@mentalizi.com.

2. The part that matters, first

What you share with your coach, by voice or in writing, can reveal things about your health, even when that isn't the topic: tiredness, an injury, a rough patch. The GDPR classes this as "data concerning health", one of the special categories of personal data it protects most closely (Article 9). Since no one can sort in advance what you're going to say or write, we give that protection to everything that feeds your coaching (your sessions, your messages, your journal, your in-depth questionnaire and your feedback on routines): we only use it with your explicit consent, collected before your first session on a screen of its own. You can withdraw it at any time.

The safety net. During a session, every message you send, written or spoken, goes through an automatic check, first on your phone and then at OpenAI, that picks up anything suggesting you might harm yourself. When it does, the app shows you helpline numbers straight away. Your coach gets the signal too, in writing and on a call: they set the exercise aside, point you to a helpline and encourage you to talk to someone you trust. Nobody is alerted: not the Mentalizi team, not your trainer, not the people close to you. The check can get it wrong or miss something, and it never replaces a call to 112 or to a helpline. It is part of the coaching you consent to. Your text is not kept for this check. All that remains is a line in our technical logs, with neither your name nor your words, deleted after 30 days, and, for a voice session, a "safety signal" marker: when the call ends, the check reads back everything you said, and if it picks up those words there, the session keeps that marker, which is kept and erased along with it. In the Locker Room, the same check runs on your phone only, before your post goes out: it shows you helpline numbers and asks you to confirm before sending, without passing anything on or keeping anything.

You can withdraw your consent without deleting your account: Profile → Withdraw my consent to AI coaching. Withdrawing erases, straight away, your coach's memory and its earlier versions, your in-depth questionnaire and your goals, your voice and written sessions with their transcripts and write-ups, your written conversations (including any replies you rated with a thumb), the difficult moments you told your coach about, your personalised routines and your feedback on routines, your rituals, the exercises you practised, your coaching cycles and your competitions, and the remarks on how your coach speaks picked up in your sessions. What stays: your account and your profile (first name, age, discipline, level), the card you published for your trainer and your requests for a talk, your Locker Room posts, the feedback you sent us from the feedback screen, your credits and your subscription. Your journal stays only if you choose to keep it when you withdraw: it is then kept for you alone, and you can read it and delete its entries whenever you like. Until you give your consent again, your coach doesn't read it and you can't add new entries. The coach can't be used again until you give your consent back; the rest of the app stays open, apart from what only feeds your coaching (your goals, your mental profile, the questions at the end of a routine, writing in your journal). Withdrawing your consent does not stop your subscription: it keeps renewing until you cancel it. Withdrawal does not affect anything done before it.

3. What data, what for, on what legal basis

Data	What for	Legal basis
Email address, password (encrypted), or the identifier Apple or Google passes on if you sign in with them	Creating and securing your account	Performance of the contract
Purchases and subscription (product, dates, status)	Opening and keeping your paid access	Performance of the contract
Your credits and their history	Keeping your balance, counting your usage, carrying over what's left	Performance of the contract
The box you tick before a purchase so that your access starts straight away (the text ticked, its language, the version of the terms, the product and the time), and the record of the email confirming the purchase	Proving your request, working out what you pay if you withdraw, and confirming your purchase in writing	Legal obligation (Articles L. 221-13 and L. 221-25 of the French Consumer Code) to record it and confirm your purchase; legitimate interests (being able to prove your request if there is a dispute) to keep it afterwards
Your bank details, if you withdraw after buying on the App Store	Refunding you by bank transfer	Legal obligation (Article L. 221-24 of the French Consumer Code)
Your membership of a team covered by your club's plan	Opening the access your club covers, within its number of places	Performance of the contract
Your email address, first name, and the date and price of your annual subscription	Telling you before it renews that you can stop it, and how	Legal obligation (Article L. 215-1 of the French Consumer Code)
First name, age, discipline, level	Setting up your space, checking you are old enough, fitting the app to your sport	Performance of the contract
Your goals, and what your coach takes from them session after session	Personalising the coaching	Explicit consent
Your answers to the in-depth questionnaire, what you add to your mental profile, and your mental map (your answers and the sliders you give your coach again at a cycle review, brought to a score out of 10, never compared with anyone)	Personalising the coaching, and showing you where you stand in your mental skills as an athlete. It is not a measure of your health	Explicit consent
Your country (taken from your phone's region, editable in your Profile)	Showing the emergency numbers that work where you are	Legitimate interests (your safety)
Your voice during a session (sent during the call, never recorded on our side)	Making the real-time conversation possible	Explicit consent
Transcripts of your sessions	So your coach remembers what you worked on together, and producing the summaries	Explicit consent
Summaries, themes, mood estimate, your coach's memory (what they remember about you, rewritten after each session)	So your coach remembers your sessions and sees how you progress from one session to the next	Explicit consent
Written messages with your coach	Running the chat, and so your coach remembers your conversations	Explicit consent
What you say and write to your coach during a session, read by the safety check, and the marker set on a voice session when the check picked up the idea that you might harm yourself (never your words)	Showing you helpline numbers straight away. Your trainer never sees this marker	Explicit consent
The difficult moments you tell your coach about, your personalised routines, your rituals, the exercises you practise, your coaching cycles and your competitions	Building your routines and moving your programme forward from one session to the next	Explicit consent
Your journal	Being yours, first; and your coach reads your latest entries before your sessions, to make the conversation your own	Explicit consent
Your feedback on routines (ratings, "did that help?", how it felt, why you stopped)	So your coach knows what works for you, and adjusts what they suggest	Explicit consent
A coach reply you rate with a thumb, along with the message you sent just before it	Having the team review it to improve the coach	Explicit consent
Your feedback on the service (the feedback screen, the reason for a thumbs-down, corrections to your coach's wording)	Reading it, and spotting each day what needs to change in the app	Legitimate interests (improving the service)
Your card published for your trainer, your requests for a talk	The team features you choose to use	Explicit consent, given separately when you publish your card or send a request (withdrawing your consent to AI coaching does not remove them: you remove them yourself)
Your posts and reports in the Locker Room	Running the community space and moderating it	Performance of the contract
Technical events (session dates, quotas, usage statistics)	Security, preventing abuse, keeping costs under control	Legitimate interests

The sound of your voice is never used to identify you or to measure how you are. During a call, your voice goes live from your phone to OpenAI: the voice model listens to it to understand what you say and to answer you, so it hears how you speak and not just your words, and a written transcript is made along the way. We keep no recording of the sound (only the transcript is kept, for 90 days) and we take no measurement from it: no voiceprint, no timbre, no intonation, no emotional state. The end-of-session mood estimate and your coach's memory come from the transcript, in other words from your words, never from the sound. In compatible mode, your voice passes through our servers, without being kept there, to be transcribed by OpenAI, and only the text goes to your coach.

Your data is never sold, never used for advertising, and never used to train artificial intelligence models.

4. Who else has access

Making a coach speak takes technical providers. Each one is involved only in what it strictly needs, acting as a processor, with no right to use anything for its own purposes:

OpenAI · Real-time voice conversation, written coach, speech transcription, session write-ups and your coach's memory, writing your personalised routines, an automatic safety check on each of your messages, and the daily review of feedback on the service. Data sent: your voice during a call (sent live from your phone, along with your IP address; in compatible mode, passed on by our servers to be transcribed), the transcript, your written messages, the session write-ups, and the context your coach holds about you: profile, your coach's memory, latest journal entries, the difficult moments you told your coach about, rituals, exercises you practised, coaching cycles, competitions, feedback on your routines. For the feedback review: short excerpts of your feedback (and, for a thumbs-down, an excerpt of the coach reply it concerns) and your sport, never your name, email or account id. Processed in: United States.
ElevenLabs · Synthetic voice for the coach in compatible mode, and the voice that guides your routines. Data sent: the text to be spoken, which can include your first name and words you shared with your coach, used to tailor a routine to you. Processed in: United States.
RevenueCat · Handling of the subscription bought on the App Store or Google Play: checking the purchase and its renewals. Data sent: your Mentalizi account id, the id of the product bought, purchase and expiry dates, plus your IP address and technical details about the device (operating system, app version, store country). Never your name, your email, or the content of your sessions. Processed in: United States.
Expo (650 Industries) · Over-the-air app updates (EAS Update): each time the app opens, it checks whether a fixed version is available and downloads it. Data sent: a random installation id created by the app, your IP address, the operating system and the app version. Nothing from your account: not your name, not your email, not the content of your sessions. Processed in: United States.
Resend · Sending account emails (address confirmation, sign-in link, password reset), the email confirming a purchase, and the reminder before an annual subscription renews. Data sent: your email address, your first name and the content of the email (for a purchase confirmation: the product and the request for immediate access you ticked; for the reminder: the renewal date and the price). Never the content of your sessions. Processed in: United States.
Supabase · Database hosting, authentication, server functions. Data sent: everything held in your account. Processed in: European Union.

Some of these providers process data outside the European Union. Those transfers are covered by the mechanisms set out in Chapter V of the GDPR (the European Commission's standard contractual clauses, or an applicable adequacy decision).

The daily feedback review. Once a day, the feedback from the last 48 hours (what you send from the feedback screen, the reason for a thumbs-down along with the coach reply it concerns, corrections you make to your coach's wording, why you stopped a routine) is sent to OpenAI with your sport and nothing else about you: no name, no email, no account id. The point is to tell a one-off case from a problem that keeps coming up for several people. Only the team reads the resulting report, and nothing about the coach changes without a human decision.

Some other recipients get data too, each for a specific reason:

Your trainer, only if you join their team: your first name, discipline and level, the lines of your card you choose to publish, and your requests for a talk (a topic picked from a list). Never the content of your sessions. If your club has a plan for the team, your trainer sees how many places are taken, never whose.
Members of the Locker Room for your sport: what you post there, under the name shown. Your reports are read by the Mentalizi team alone, for moderation.
Apple and Google, if you sign in with them or subscribe through the App Store or Google Play: they handle the sign-in and the payment under their own policies, as separate controllers. They receive no session content from us.
The Mentalizi team, in two cases only: reviewing a coach reply you rated with a thumb, along with the message you sent just before it (the app tells you so the first time), and reading the feedback you send us.

Nobody reads your conversations as they happen, and nobody reads them at all, apart from an exchange you choose to rate with a thumb. Access to production data is limited to what maintenance requires, and every access is logged.

5. How long we keep it

Raw session transcripts: deleted automatically after 90 days.
Summaries, themes, mood and your coach's memory: kept for as long as your account exists: that is what lets your coach remember you from one session to the next. Replaced versions of your coach's memory are archived so that nothing important is lost when it is rewritten: the last 30 at most, deleted after 180 days, and erased immediately if you withdraw your consent.
Written messages with your coach: deleted automatically after 90 days, like session transcripts: it is the same thing, said another way.
Coach replies you rated with a thumb: the message of yours that goes with them is deleted after 90 days, like every written message; the coach reply, your thumb and the team's rating stay for as long as your account exists.
Safety marker on a voice session: kept with the session, and erased with it.
Difficult moments you told your coach about, personalised routines, rituals, coaching cycles and competitions: kept for as long as your account exists, and erased if you withdraw your consent.
Exercises you practised (the exercise and your two scores out of ten): 2 years, then deleted automatically, and sooner if you withdraw your consent.
Feedback on your routines (stars, "did that help?", how it felt, why you stopped): kept for as long as your account exists, and erased if you withdraw your consent.
Feedback excerpts copied into the daily review report: removed from the report after 30 days; only the counts and the report remain, and they name nobody.
Feedback you send (feedback screen, reports): kept for as long as your account exists.
Your published card, your requests for a talk, your Locker Room posts: until you remove them, or delete your account.
Your journal: kept for as long as your account exists. You wrote it, it is yours. If you withdraw your consent, it is erased, unless you choose at that moment to keep it for yourself alone.
Account and profile: until you ask for them to be deleted.
History of your credits and your subscription: for as long as your account exists.
Your request for immediate access (the text ticked, its language, the version of the terms, the product and the time, with only your account's technical id, never your name or your email): 5 years after the purchase, even if you delete your account in the meantime, so that your request can be proven if a withdrawal is disputed. If you ticked the box but didn't complete the purchase, it is deleted after 30 days.
Record of the purchase confirmation email (the purchase concerned and the date it was sent, never the email itself): for as long as your account exists, and 5 years at most.
Your bank details, if you give them to us for a refund after withdrawing: deleted as soon as the transfer has been made.
Call authorisations (when a paid call was opened and the credits set aside for it): 30 days after they are settled, and erased with your account.
App usage statistics: 180 days.
Remarks on the way your coach speaks, picked up in your sessions: kept in your coach's memory until you withdraw your consent, and for up to 180 days in our usage statistics.
Record of renewal reminders (the renewal date and the date we sent it, never the email itself): for as long as your account exists.
Anti-abuse counters (the time of each session or message, no content): 30 days.
Server technical logs: 30 days.

When you withdraw your consent, the coaching data listed in section 2 is erased straight away. When you delete your account, all of it is erased straight away, except your request for immediate access, kept as set out above. Copies may remain for up to 30 days in our host's encrypted backups, where nothing can be done with them.

6. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time.

Straight from the app:

Export all your data as a readable file: Profile → My data.
Delete one session in particular: Journal → Progress, on the session concerned.
Withdraw your consent while keeping your account: Profile → Withdraw my consent to AI coaching.
Delete your account and everything that goes with it: Profile → Delete my account.

A step-by-step guide to deleting your account, with or without the app: https://mentalizi.com/legal/delete-account.html

For anything else: contact@mentalizi.com. We answer within one month.

You can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr, 3 place de Fontenoy, 75334 Paris Cedex 07).

7. Minors

Mentalizi is distributed in France and is for people aged 15 and over. That is the age from which French law lets a person consent on their own to an online service using their data (article 45 of the French Data Protection Act of 1978, which sets this threshold under Article 8 of the GDPR). We do not knowingly collect data from anyone younger. If you are a parent and find that a child under 15 has created an account, write to contact@mentalizi.com: the account and its data will be deleted.

8. Automated decisions

Your coach generates their replies automatically. The app works out a mood estimate and your mental map, and after every session it rewrites your coach's memory. An automatic check also looks through your messages for the idea that you might harm yourself, so that it can show you helpline numbers. The mood estimate, the mental map and your coach's memory are profiling within the meaning of the GDPR: they describe where you stand, based on what you say and how you answer. None of it produces a legal effect concerning you, or is the basis of a decision that significantly affects you within the meaning of Article 22 of the GDPR: nothing shuts you out of a service, sets a price or passes anything on to your trainer. Your coach's replies, the mood estimate, the mental map and your coach's memory are there to tailor your mental preparation to you, and you remain free to follow or ignore what your coach suggests; the safety check is there to show you where to find help.

9. Security

Exchanges are encrypted in transit. Access to data is partitioned by user in the database itself: technically, one person cannot read another person's data, beyond the access described in section 4. The keys to the AI providers are never present in the app installed on your phone.

10. Changes

Any substantial change to this document will be shown to you in the app, and you will have to accept it to keep using the service.