Data Deletion

Effective date: September 8, 2026 Contact: hello@minufi.com (subject: "Data deletion")

There are two different ways to delete your data in Minufi, and you choose which one you need:

• Delete only what Minu remembers about you (Minu Insights), without closing your account or losing your content.
• Close your whole account, which deletes all of the above and your account as well.

This page explains exactly what is deleted in each case, how long it takes, and what we keep, for how long and why.

1. The two options at a glance

2. Deleting only Minu's memory

Minu's memory and the health profile are being enabled in stages: if you do not see them in your app yet, they have not reached your account.

2.1 What Minu's memory is

If you turned Minu Insights on, Minu stores three things derived from your journals, your conversations and your mood logs:

• Facts: organized details about you (your goals, your preferences, your routines).
• Episodes: moments you talked about, stored as a short summary of up to 240 characters.
• Embeddings: numeric representations of those texts that let Minu find the memory closest to what you are telling him. They are not readable text, but they are derived from yours, so we treat them as your personal data and delete them like everything else.

All of it lives in a dedicated database on Google Cloud SQL (us-central1 region, United States).

The original text is deleted on its own, even if you ask for nothing. The text exactly as you wrote it is removed from Minu's memory after 30 days, once the short summary that replaces it is in place; an automated job does this every day. What remains after that is the organized data, the summaries and the embeddings. Your journals and your own logs are untouched: they stay in your account, because they are yours and they are the product.

2.2 How to do it

• In the app: Profile → Privacy → Minu Insights → Erase Minu's memory.
• By email: write to hello@minufi.com from your account address.

2.3 What gets deleted

• Every fact Minu stored about you, including health-related ones.
• Every episode and its summary.
• Every summary Minu built from them.
• Every associated embedding.
• Any processing jobs that were in flight.

It is permanent: there is no trash bin and no "just in case" copy we can restore.

2.4 What does not get deleted

• Your account and your content. Journals, mood logs, habits, progress and profile stay exactly where they were.
• Your saved conversation. So Minu can follow the thread, the turns of your conversations with him are stored — both in the app and on WhatsApp — in your account, in the chat collections hosted on Google, and in the orchestrator's history, on the Railway infrastructure that runs Minu. They are not part of what Minu learns about you, and erasing his memory does not reach them. Today they have no automatic deletion window: they are kept until you delete your account, and at that point they are deleted. If you want them deleted sooner, write to hello@minufi.com and we do it within 30 days.
• The record of your consent. We keep proof that you gave it and that you withdrew it, with the date and the version of the text you accepted. It is the evidence that we honored your decision and contains nothing of what Minu remembered. If you later close your account, that record is deleted too.

Withdrawing consent is not retroactive: it does not undo or bring back what was already deleted, and it does not make unlawful the processing we carried out while the permission was in force.

2.5 Pausing is not deleting

The same screen offers Pause. That is a different thing: Minu stops saving and using new memories, but what he already learned stays stored, with the same protections as before, in case you turn it back on. If what you want is for nothing to remain, choose Erase Minu's memory.

2.6 The health permission can be withdrawn on its own

There are two different paths by which a health detail can reach Minu, and they do not work the same way:

• What you declare in your health profile. The conditions you tick in the form live in a private area of your account that only you can access, and they are encrypted at rest, like the rest of your account data. While the health permission is on, that condition also travels in the context Minu uses to answer you, so it is processed by OpenAI models under the retention window described below. The fact Minu derives from it and keeps in his memory additionally carries field-level encryption.
• What you mention while talking to Minu. What you mention about your health in a conversation or a journal entry is not stored as health information unless you confirm it, and that confirmation is not available in the app yet.

Turning off only the health permission (Profile → Privacy → Minu Insights → Health & wellness) deletes your health profile and the health facts Minu had stored, and Minu stops using them. The summaries of the entries you wrote may still mention what you told him: if you want nothing left, choose Erase Minu's memory. For health data we do not offer "pause": if you withdraw the permission, we delete.

3. Closing your account

3.1 How to do it

• In the app (recommended): Profile → Privacy → Delete my account. There are two confirmations and you have to type the word the app asks you for. The process is automatic and starts immediately.
• By email: write to hello@minufi.com from the address associated with your account, with the subject "Data deletion". We process it within 48 to 72 business hours.

3.2 What gets deleted

When you close your account we delete from our active systems:

• Your identity: name, email address, profile photo, access credentials and the device identifiers we use to send you notifications.
• Your content: journals, notes, intentions, mood logs, and the audio and image files you sent.
• Your progress: weight and measurements, Vision Board, habits, goals, activities, Coins and streaks.
• Your health profile, including any conditions you declared.
• Your conversations with Minu, in the app and on WhatsApp: the turns stored in your account and on the Railway infrastructure are deleted along with your account.
• All of Minu's memory: facts, summaries, episodes and embeddings, exactly as in the previous option, plus the record of your consent.
• Your subscription entry in RevenueCat and the record of your email verification.

3.3 What we keep

There are three exceptions, and each one has its own period:

• Financial records. If you made payments (Premium subscription), we keep only the transaction records required by tax and accounting obligations and for handling cancellations with the payment processors (Stripe, Apple or Google), and only for the period those rules require us to keep them.
• A technical record of the deletion. We log that the account was deleted, when, and whether each step completed: the account identifier, the email address associated with it, and the dates. It is what lets us demonstrate the deletion happened and retry if something failed. It contains none of your content and nothing Minu remembered. We keep it for 12 months from the closure of your account and then delete it.
• The technical data from your phone verification. If you linked your number to talk to Minu on WhatsApp, that verification leaves your number outside your account, along with the controls that stop anyone from using Minu's WhatsApp to send codes to someone else. Those records are not removed when you close your account: we keep them for 12 months from the last verification, solely for that abuse control. If you want them deleted sooner, write to hello@minufi.com giving the number and we do it within 30 days.

3.4 It is irreversible

Once completed there is no way back: you lose access to any Premium benefits you had, and your wellness history and your Coins cannot be recovered.

4. How long it takes

There are three different clocks, and they should not be mixed up:

• In our active systems: up to 30 days. In practice deletion runs the moment you ask for it; the 30 days are the ceiling we commit to even if something fails and has to be retried.
• At OpenAI: up to 30 days. To make Minu work, excerpts of your journals and conversations are processed by OpenAI models (gpt-4o-mini and text-embedding-3-small). OpenAI keeps what it receives through its API for a maximum of 30 days, solely to monitor abuse, and then deletes it. That window runs from the moment the excerpt was sent, not from your request, and there is no per-user deletion we can ask them for. OpenAI does not train its models on your data and operates under a data processing agreement incorporating standard contractual clauses.
• In backups: up to 30 days. Deleted data may still exist in encrypted backups for up to 30 days, until they rotate. Those backups exist only to restore the service after a failure; nobody uses them to serve you or to feed Minu.

5. Your other rights

Besides deletion, you can ask us to access your data, correct it, receive a copy in a portable format, restrict or object to certain processing, and withdraw any consent at any time.

Write to hello@minufi.com from your account address. We respond within 30 days. If you believe we are not handling your data properly, you can lodge a complaint with your supervisory authority: in Uruguay, the URCDP; in the European Union or the United Kingdom, your local data protection authority.

6. Where your data is processed

Your data is processed and stored mainly in the United States (Google Cloud, us-central1; Microsoft; OpenAI; Railway; Meta). Verification emails are sent from the European Union (Brevo). Transfers are safeguarded by standard contractual clauses incorporated into our agreements with providers, together with technical measures such as encryption. The full list of providers, with purposes and safeguards, is at Subprocessors, and the detail of what we collect and why is in our Privacy Policy.

Governing law, jurisdiction and limitation of liability are under review with our legal counsel and will be published in our Terms and Conditions.

7. Accounts of people under 18

Minufi is for people aged 18 and over. If we detect — or you tell us — that an account belongs to someone under 18, we delete it and its data through the same paths described above. Write to hello@minufi.com.