Effective from 1 October 2026 · version 1
Privacy Policy
Your data is yours. We do not sell it, we do not feed it into advertising, and we store only what Mentorio needs to serve you well.
This is a translation; the Czech version is legally binding.
- Without an account, everything stays only on your device.
- With an account, we store your data on our server so that you can have Mentorio on your phone and your computer.
- Messages to the mentor are processed by artificial intelligence (Anthropic) — only so that it can reply to you.
- Payments are handled by Stripe; we never see your card number.
- You can delete everything with one tap: Profile → Delete everything stored on the server.
1. Controller
The controller of personal data is FXM s.r.o., company ID (IČO) 21601445, Za statky 72, Lipany, 103 00 Praha 10, Czech Republic, registered with the Municipal Court in Prague, section C, insert 403797. For all data protection matters, write to us at support@mentorio.eu.
2. What data we process and why
| Data | Why | Legal basis |
|---|---|---|
| E-mail (account), name or nickname | Login by code, Mentorio on your phone and computer, service e-mails (login code, trial, subscription) | Performance of a contract |
| Answers from the initial setup (goal, time, activity, mentor style), plan, completed steps, story | To build your daily plan and recommendations | Performance of a contract |
| Medicines, supplements, doctors, health notes, content of conversations with the mentor | Reminders and health care, the mentor’s replies | Your explicit consent (Art. 9(2)(a) GDPR) — see section 3 |
| Photos of food, barcodes, recipes | Recipes and calories (Plus) | Performance of a contract |
| Subscription data (plan, status, period, customer identifier in Stripe), invoices | Subscription, accounting and taxes | Performance of a contract, legal obligation |
| E-mails you send us for support | To handle your enquiry | Performance of a contract, legitimate interest |
| How you use Mentorio: where you came from (link, campaign), language, answers from the initial setup without health data (goal, age group, mentor style), active days, numbers of completed steps and messages, price list views and payment attempts, your answers to short questions (“what convinced you”, “what stopped you”) and the reason for cancelling your subscription | To understand what helps people and what they are missing, and to improve Mentorio accordingly | Legitimate interest — you can switch it off in Profile |
| Technical logs (IP address, time of request), message counts and AI costs | Security, protection against misuse, cost control | Legitimate interest |
We do not use data for advertising, we do not sell it, and we do not build profiles of you for third parties. We do not carry out automated decision-making with legal effects.
3. Health data
Medicines, supplements, health notes and what you write to the mentor about yourself may be data concerning health — a special category of personal data. Without an account, you keep it only on your device. We store it on our server only if you save Mentorio under your e-mail address and give us your explicit consent to do so (by ticking the box when saving under your e-mail).
You can withdraw your consent at any time — most simply by deleting your data on the server in Profile. Withdrawal does not affect the lawfulness of processing before it.
4. Artificial intelligence
When you write or speak a message to the mentor, we send its text, together with the necessary context (for example your goal, today’s step, the mentor style), to the artificial intelligence provider Anthropic so that it can create a reply. The same applies to food photos for recipes and calories. Under its contractual terms for business customers, Anthropic does not use this data to train its models.
When the mentor replies in a voice, we send the text of the reply to Google (Gemini), which turns it into audio. Dictation into the microphone is provided by the speech recognition of your browser or phone (for example Google in Chrome) under its own rules.
5. Who we entrust data to
We entrust data only to processors who need it to run Mentorio, and only to the extent necessary:
- Anthropic, PBC (USA) — the mentor’s replies, recipes and analysis of food photos.
- Google LLC / Google Ireland — turning replies into voice.
- Stripe Payments Europe, Ltd. (Ireland) — payments and invoices; card details are processed only by Stripe.
- Hosting and e-mail providers in the Czech Republic — running the server, mailboxes and sending e-mails.
- Open Food Facts — when you scan a barcode, we send only the code itself, no personal data.
For transfers outside the EU (USA), we rely on an adequacy decision (the EU-U.S. Data Privacy Framework) or on standard contractual clauses approved by the European Commission. We may also disclose data to public authorities where the law requires us to.
6. How long we keep data
- Account data (plan, care, story, conversations) — until you delete the account. Deletion in Profile is immediate; it disappears from server backups when they are regularly overwritten.
- Data without an account — only on your device, until you delete it yourself.
- Invoices and payment data — for as long as accounting and tax rules require (usually 10 years).
- Support e-mails — 3 years from resolution.
- Technical logs — at most 120 days.
7. Data on your device, cookies and statistics
Mentorio stores your plan and settings in your browser (local storage) so that it works even offline, and uses a single essential cookie for login. We do not use advertising or third-party tracking cookies, which is why we do not ask you about cookies.
To improve Mentorio, we record how you use it (see the table in section 2) — never the content of conversations, medicines or other health data. We do not sell this and do not use it for advertising. In addition, we collect anonymous statistics — only the name of an event and a few permitted values (for example “step completed”), without an identifier, name, message content or medicines; the server stores only daily totals. You can switch off both in Profile.
8. Your rights
You have the right of access to your data, rectification, erasure, restriction of processing, data portability, the right to object to processing based on legitimate interest, and the right to withdraw consent at any time. You can handle most of this directly in the app (editing your profile, deleting data); for the rest, write to us at support@mentorio.eu — we will respond within 30 days.
If you think we are not handling your data properly, you can lodge a complaint with the Úřad pro ochranu osobních údajů (Czech Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz. We would, however, be glad if you contacted us first.
9. Security
Communication with Mentorio is encrypted (HTTPS), the server is located in the Czech Republic, only a small circle of people who need it have access to the data, and the administration does not display the content of conversations or health data. Login is passwordless, using a one-time code from e-mail.
10. Changes to this policy
We may amend this policy when Mentorio or the law changes. We will let you know in advance of significant changes by e-mail or in the app. The current version is always on this page.