Privacy Policy

Menta is a consumer accountability app for personal goals. People create or join challenges, submit proof or check-ins, get peer reviews, build streaks, earn Momenta rewards, customize with shop items, and stay in small private or open groups. This policy explains what data Menta collects, why, and the controls you have.

Account and profile: name or handle, email, login identifiers, avatar, and profile settings.

Activity in the app: challenges and groups you create or join, invite links, codes, and QR data, proof submissions (photos or text), check-ins, peer reviews, streak history, Momenta wallet balance, rewards earned, shop purchases, and inventory items.

Notifications: notification preferences and push tokens used to deliver reminders and alerts.

Purchases: subscription and purchase status (for example Pro Monthly or Pro Yearly) may be reported by the Apple App Store or Google Play and our subscription provider RevenueCat. Menta does not see or store your payment card details.

Safety and support: reports, blocks, and support messages you send us.

Device and diagnostics: device model, OS version, app version, automatic privacy-filtered crash reports, error details, stack traces, privacy-filtered technical logs, and limited technical route or action breadcrumbs used to find and repair faults. Menta does not deliberately attach your account ID, email address or username as Sentry user information.

Product analytics: a generated app-device ID before you sign in, your Menta account ID after you sign in, and bounded product actions and categories sent to Amplitude and PostHog. Event properties exclude email, username, promise text, proof content or media, group details, notification content, advertising identifiers, and precise location.

Camera and photos are accessed only when you choose to submit proof, change your avatar, or scan an invite QR. Push notifications require your permission and can be turned off in your device settings or in Menta. Payments are processed by the Apple App Store or Google Play; Menta does not store card information.

iOS App Tracking Transparency is requested only for Meta ad attribution. Declining it does not limit Menta or any feature in the app.

To run challenges, groups, proof, reviews, and streaks; to process rewards, Momenta, shop and inventory; to verify and unlock Pro features based on Apple App Store, Google Play, and RevenueCat status; to send reminders and notifications you opt into; to provide support; to prevent abuse and handle reports and blocks; to find and repair faults through privacy-sanitised diagnostics; and to meet legal obligations.

To understand activation, retention, and whether the main journeys in Menta work, through bounded product analytics that exclude the sensitive content described above.

Content you submit to a challenge or group (proofs, check-ins, reviews, profile basics) is visible to the relevant participants and reviewers of that challenge or group.

We use service providers that process data on our behalf under contract: Supabase for accounts, authentication, database records, storage, and server functions; Sentry for privacy-filtered crash and technical diagnostics plus optional performance measurements; RevenueCat, the Apple App Store, and Google Play for subscription and purchase status; Expo with Apple Push Notification service or Firebase Cloud Messaging, as applicable, for notification tokens and delivery; OneSignal as an optional notification delivery and interaction provider in app versions where it is enabled; Amplitude for bounded product analytics and masked app recordings; PostHog for bounded product analytics, feature flags and experiments; Google Mobile Ads for rewarded ad delivery; and Meta for consented app-ad attribution.

We may share information when required by law, to protect users, enforce our Terms, or respond to safety issues.

We do not sell your personal data.

Menta uses Sentry for automatic crash reports and limited technical diagnostics to find and repair faults. We disable default personal-information collection, screenshots, view-hierarchy capture and failed-request capture, and apply filters to diagnostic fields to reduce credentials and user-authored content. Menta does not deliberately attach your account ID, email address or username as Sentry user information.

Advanced diagnostics is a separate, device-local preference that is off by default. In the current app, it controls additional sampled Sentry performance measurements. Sentry and PostHog session recording are not enabled in this release. Product analytics and the Amplitude recording described below operate separately from this preference.

In app versions where Amplitude recording is enabled, Menta automatically enables recording for all eligible sessions to help diagnose faults, performance problems and interaction failures. The configured sampling rate is 100% of eligible sessions; this does not mean every session is successfully recorded or received. Recording does not depend on turning on Advanced diagnostics, and turning that preference off does not stop Amplitude recording.

We configure conservative masking and pause recording on selected screens within sign-in, camera, proof-review, Menta Check and shop flows, and while the purchase paywall is open. These safeguards reduce what is recorded. They do not establish that every item on every screen is hidden or that the remaining interaction and session information is anonymous. Amplitude also receives the product-analytics identifiers described above, including a generated app-device identifier and your Menta account ID after sign-in.

The purpose of these recordings is to improve Menta's reliability and performance. We do not use these recordings for advertising or to track activity across other companies' apps or websites. To ask about information held about you, request access or correction, or ask about deletion, contact privacy@anekedigitalapps.com or hello@menta.quest. A request about an existing recording does not itself stop future recording in the current app.

With your permission, Menta uses a device-specific Expo push token delivered through the applicable platform service — Apple Push Notification service on Apple devices or Firebase Cloud Messaging on Android — to deliver reminders, approvals, group activity, and important account information. You can turn notifications off in Menta or in your device settings. Signing out, revoking permission, or deleting your account stops further use of the token as applicable.

Menta can use OneSignal for push notification delivery, notification interaction, and in-app messages such as the optional reminder-permission explanation. OneSignal receives only bounded notification and lifecycle fields: a device or app subscription identifier, a push token, push-permission state, an opaque Menta account identifier used as an external alias after you sign in, delivery and open state, allowlisted actions needed to route a notification, and non-sensitive tags or events such as your notification permission, whether you have an active promise, your Pro status, and whether optional marketing email consent is on. OneSignal does not receive promise text, proof content or media, group details, your Momenta balance, your username, or free text for targeting.

If you explicitly turn on Menta product-news emails in the app, Menta links your account email to the same OneSignal user only for that consented email channel. Your email is not used as the external account alias and is not sent without that explicit email consent. You can turn product-news emails off in Menta or use the unsubscribe link in every marketing email. Account, security, and proof notifications do not depend on marketing consent.

Signing out removes the account alias from the device, while the device subscription can remain associated with the app. Signing back in may bind the same subscription again without intentionally creating a second account identity. Deleting your Menta account also requests deletion of the matching OneSignal user and its push and email subscriptions.

OneSignal is not enabled in every installed version of Menta. Existing Expo delivery can remain active while Menta tests a limited OneSignal canary.

Menta uses Google AdMob to show ads in the free version of the app. You can choose to watch a rewarded ad to earn Momenta. Free accounts may also see a short ad after leaving every second newly submitted proof receipt. An ad never changes whether proof was sent, accepted or saved, and an automatic ad break does not award or remove Momenta. Menta Pro accounts do not receive these ad breaks.

Menta asks Google for non-personalised ads. These ads are not selected from your past activity across apps or websites. Google may still process data such as your IP address, general location derived from it, app and device identifiers, ad views and interactions, and diagnostic or performance data to deliver ads, limit how often an ad appears, measure aggregated results, and prevent fraud. Google says its Mobile Ads SDK encrypts this data in transit.

Menta does not add your email address, username, promise text, proof photo, proof video, proof text, group details or Momenta balance to an AdMob ad request. Google and participating advertising providers process ad data under their own privacy terms.

Where required, Menta uses Google’s User Messaging Platform to show advertising privacy choices before requesting an ad. If the consent system cannot confirm that an ad request is allowed, Menta does not request the ad. You can reopen Google’s advertising privacy choices from Menta’s settings when Google reports that the option is required for you. Declining an ad choice, an unavailable ad, or an advertising error does not block proof submission, proof receipts or navigation in Menta.

The automatic proof-receipt ad break applies only after Menta releases the feature for your installed app version.

Menta also uses Meta App Events for consented ad attribution. Meta SDK auto-initialisation, advertiser-ID collection, and automatic Meta events stay off on iOS until you grant App Tracking Transparency. After you grant it, Menta sends only four conversion event types — sign up, create group, create promise, and invite friend — without account ID, email, invite code, or user-authored content. If you decline App Tracking Transparency, Menta does not send those conversion events to Meta and all app features remain available. Meta may use the advertising identifier and SKAdNetwork only within that consented attribution path. The consent description above applies to iOS; Menta will not enable Meta attribution on Android until an Android-specific consent and legal-basis control is implemented and this policy is updated. Google’s User Messaging Platform consent does not authorise Meta attribution.

Edit your profile and settings, manage notification preferences, including the optional product-email toggle in Notification Settings, use in-app Report and Block on proof, challenges, groups, and users to keep your space safe, restore purchases in Menta where available or manage them through your Apple App Store or Google Play account, and delete your account from inside the app at Profile or Settings, then Delete account. In Settings → Ad measurement you can see the ad measurement explanation and system prompt. Where available, Advanced diagnostics controls additional Sentry performance measurements. It does not control product analytics or Amplitude recording. App Tracking Transparency can also be changed in iOS Settings. You can also email hello@menta.quest for help.

You can request deletion in Menta at Profile or Settings, then Delete account. If you cannot access the app, or deletion does not complete, contact hello@menta.quest or privacy@anekedigitalapps.com. We may need to verify that the request concerns your account. Follow the in-app instructions if you need to sign in with Apple again or resolve ownership of a shared group.

The account-deletion process removes account records and associated media from Menta’s active systems and, where OneSignal is configured, requests deletion of the linked messaging profile. Submitting a request or signing out does not by itself confirm that every deletion step has completed.

Some limited information may be retained where required for safety, legal or payment record-keeping reasons, such as fraud prevention or store-mandated subscription records. Deletion from active systems does not mean every backup or service-provider record disappears immediately. Contact us to ask what information remains in your case and why.

Deleting Menta or your Menta account does not cancel an App Store or Google Play subscription. Cancel renewal through the relevant store.

Menta is intended for people aged 16 and over and is not directed at children.

If you submit the Android interest form on menta.quest, we store the email address you provide and, if you choose to add them, your country, Android version or device, and your answer to “What would you use Menta for?”. We also record whether you ticked the update box and when the request was made.

This is an earlier and current interest form used to understand interest in an Android version and, if you ticked the update box, to optionally contact you about Android testing or release updates. If you did not tick the box, we do not treat it as marketing consent and will not email you updates. If you did tick it, you can unsubscribe at any time. Submitting the form does not guarantee tester access or a release date.

These requests are not readable by other visitors. To have your request deleted, email hello@menta.quest.

We may update this policy as the app evolves. Material changes will be communicated in-app or by email.

Questions about privacy? Email hello@menta.quest.