Mentrox Early access
Privacy Policy

Privacy Policy

Effective date: 2026-08-17.

Mentrox is built by BunBun Labs Limited (“we”, “us”), a company registered in the United Kingdom. This policy explains what we collect, why, and what you control. We wrote it to be read.

1. What Mentrox is

Mentrox is a non-clinical follow-through assistant. A voice or typed note becomes a small plan; Mentrox helps you begin, records the answers you choose, and supports a clean return after a missed day. It is not a medical device, does not diagnose, and does not provide treatment advice.

2. What we collect

  • Your notes and Coach messages. Plan notes, check-in replies, and messages you deliberately send to Coach. In the Android app, the server receives text rather than a saved audio file. Telegram voice notes are processed to produce a transcript.
  • Your plan and follow-through history. The promises you confirmed, first moves, natural moments, starts, and outcomes (done / started / not today). This is the core of the product.
  • Account basics. Your Telegram account identifier or your app sign-in, contact email, time zone, the country your phone reports, and subscription status. We do not collect your date of birth, biometrics, or precise location.
  • Wearable data — only if you connect a wearable and only summaries. Sleep duration and score, readiness or recovery score, resting heart rate, heart-rate variability. Never raw waveforms. Used for one purpose: adapting the timing and load of your own planned blocks, and showing you your own trends.
  • Safety signals. See section 5.
  • Content-free product events. Events such as plan confirmed, promise started, comeback accepted, or purchase verified. These events cannot contain your note, promise, reflection, Coach message, or health text.

3. Health data and your choice (UK/EU GDPR Article 9)

Plan and follow-through patterns can reveal information about your health. Where required by law, this is “special category” data and we process it only with your explicit opt-in consent. Declining is fully allowed: the core product (planning, check-ins, the ledger) keeps working — you just won’t receive commentary about your patterns or state.

One exception we disclose plainly: every inbound message runs a simple, fixed crisis-language check that looks for explicit self-harm phrasing and, if found, shows you crisis support resources for your region. This check assesses nothing about you, stores nothing, and cannot be used to profile you. It is a safety net, and it runs regardless of your consent choice, because responding to “I want to kill myself” with a scheduling message is not acceptable to us.

4. Where data lives and who processes it

  • Stored encrypted at rest (AES-256) on servers in the EU/US; encrypted in transit.
  • Messages arrive over Telegram or through the app; where you use Telegram, standard Telegram infrastructure handles transit.
  • To generate replies, summary context about your plan and day may be sent to language-model providers under zero-data-retention agreements — they are contractually prohibited from storing your data or using it for training.
  • We never sell your data, share it with advertisers, or use it to train models ourselves.

5. Safety records

If the crisis check triggers, we record the date and the action taken — nothing else. A human reviews the flag within 24 hours; the assistant does not resume on its own after a crisis event.

6. Retention

Your ledger and transcripts are kept while your account is active — that memory is the product. Delete your account and everything personal is destroyed — normally at once, and within 30 days at the latest. We confirm it by email, or in Telegram if that is how you reached us.

7. Your rights (GDPR)

Access, export (complete JSON ledger, on request), correction, deletion, withdrawal of consent (affects pattern commentary, not the core loop), and complaint to a supervisory authority. To exercise any: hello@mentrox.ai. No dark patterns — deletion is as easy as subscription.

8. Changes

If this policy materially changes, we notify you in-chat before it takes effect. Previous versions available on request.

9. The app

Mentrox is one app with Core and Coach capabilities. Core stores the active plan and history in private storage on your phone with system backup switched off. Core remains useful while signed out and when the server or Coach is unavailable.

Server assistance is a deliberate choice. Before the first assisted plan, the app explains that AI will receive the note text and asks for an adult confirmation. A signed-out installation receives one short-lived, installation-scoped preview allowance; a deterministic plan remains available when that preview is unavailable. Signing in lets confirmed plans, answers, and Coach actions sync to the account ledger described above. Stored phone bearer tokens are protected by Android Keystore.

Speech depends on the phone. The app can always be used by typing. If you choose speech, the speech service available on the phone may process what you say and may use its network; the app shows the choice before relying on server assistance.

Export and deletion are separate and explicit. Pings and natural moments includes an export of the structured history on the phone and a confirmed action to erase that phone’s plans and check-ins. Deleting the cloud account removes the server ledger as section 6 describes but does not pretend to cancel a Google Play subscription. Erasing the phone does not silently delete a cloud account or cancel a subscription. You can also request account deletion without the app.

10. Contact

BunBun Labs Limited, Glasgow, UK — hello@mentrox.ai