Privacy Policy

How we look after your data.

Last updated: September 8, 2026

Data Controller: Minufi Wellness Co. — 18331 Pines Blvd. Suite 327, Pembroke Pines, FL 33029, USA. Privacy contact: hello@minufi.com (subject: "Privacy")

At Minufi, the privacy of your emotional well-being is our priority. This policy explains what information we collect, how we use it, who we share it with, and what control you have over it when you use our app and our website.

This version replaces the one dated January 10, 2026, and describes for the first time Minu Insights — Minu's long-term memory — and the health profile.

1. The short version

  • Minu Insights is optional and off by default. Minufi works exactly the same without it.
  • If you turn it on, Minu stores structured data and short summaries, not transcripts. The original text is erased after 30 days.
  • Your conversation with Minu is stored, in the app and on WhatsApp, so he can follow the thread. Today it has no automatic deletion window: it is kept until you delete your account.
  • Your health information has a separate permission, lives in a private area of your account, and you can withdraw that permission at any time.
  • We do not sell your personal data, and it is never used to train AI models.
  • On our website we use measurement cookies from Google Analytics and Microsoft Clarity, which records your browsing session (Section 12).
  • You can pause the memory, erase it entirely, or delete your account from the app.
  • Minufi is for people 18 and over.

2. Information we collect

  • Registration data: name, email address, country, and, if you verify your phone, your phone number.
  • Content you create: text notes, journal entries, chat messages with Minu — in the app and on WhatsApp — and voice recordings you submit for processing.
  • Well-being and progress data: mood, weight, measurements, and sleep habits you voluntarily enter in the Progress and Journaling modules.
  • Health profile (optional): the conditions you choose to declare in your profile (for example, type 2 diabetes or high blood pressure). See Section 5.
  • Derived memory data (optional): if you turn on Minu Insights, the structured information our AI derives from your journals, chats, and mood logs, along with its vector representations (embeddings). See Section 3.
  • Notification identifier: if you accept notifications, we store the identifier your device needs in order to receive them. It is deleted when you delete your account.
  • Website usage data: the pages you visit on minufi.com, your clicks and scrolling, your device and approximate country, including a recording of your browsing session on the site, through Google Analytics and Microsoft Clarity. See Section 12.
  • Technical data: IP address, device model, and operating system, to keep the app stable.

3. Minu Insights: Minu's memory (optional feature)

What it is. Minu Insights lets Minu remember what matters from what you share, so he can support you with continuity instead of starting from scratch every time. It is strictly opt-in: it is off by default and only operates after you give your explicit consent in the app. Accepting and declining cost exactly the same, and saying no blocks nothing. The feature is rolled out in stages: if you do not see it in your app yet, it has not reached your account.

What it stores, exactly. With Minu Insights on, we store three things:

  • Facts: structured information you share — your goals, preferences, habits, routines, and achievements.
  • Episodes: short summaries of situations you told Minu about, up to 240 characters each.
  • Embeddings: numerical representations of those facts and summaries, which let Minu retrieve what is relevant at the right moment.

What it does not store. Minu's memory does not keep transcripts of your journals or conversations. The original text used to derive a fact or a summary is erased after 30 days, once the short summary that replaces it is in place; the structured data and the summaries remain. Your journals, logs, and chat history stay in your account as always: the memory is a derived layer, not a copy.

Topics Minu does not turn into memory. Even if you mention them in a conversation, Minu does not turn the following into things he remembers about you: political opinions; religious or philosophical beliefs; sexual orientation or sex life; criminal history; substance use; pregnancy; HIV status; medications and prescriptions; therapy notes; medical diagnoses; account or card numbers; and government identifiers (passport, national ID, driver's license). Minu may respond supportively in the conversation, and none of it becomes a stored fact in his memory. The short summary of the entry you wrote may still mention it — which is why you can erase Minu's memory at any time. The only way a medical condition is ever stored as such is if you declare it in your health profile, with your health permission on (Section 5).

Where it lives. Derived memories and their embeddings are stored in a dedicated database hosted on Google Cloud SQL (us-central1, United States), isolated per user: every read and write is filtered by your account identifier.

Which models process it. To derive those facts and summaries, excerpts from your journals, messages, and mood logs are processed by OpenAI models: gpt-4o-mini for information extraction and text-embedding-3-small for embeddings. OpenAI does not use your data to train its models (Section 6).

Your conversation with Minu. Minu Insights operates only inside the Minufi app: what you write on WhatsApp never enters his long-term memory. Both channels, the app and WhatsApp, do store the turns of your conversation so Minu can follow the thread. That conversation is held in two places, both described in Section 6: the chat collections in your account, hosted on Google, and the orchestrator's history, hosted on Railway. It is used for nothing else, and today it has no automatic deletion window: it is kept until you delete your account, and deleting your account deletes it.

Minu can get things wrong. An AI can misinterpret or summarize something incorrectly, so a memory may contain errors. Today you can pause the memory, erase it entirely, or erase only what relates to your health from Profile → Privacy → Minu Insights. If you want a specific memory corrected or removed, email hello@minufi.com and we will do it.

4. Legal basis and consent

We process your personal data on the following legal bases:

  • Performance of a contract (Art. 6(1)(b) GDPR): to provide the core features of the app.
  • Your explicit consent (Art. 6(1)(a) and, for health information, Art. 9(2)(a) GDPR): for Minu Insights and for health information. Information about your health is a special category of personal data; we only process it, and only let Minu remember it, with your explicit consent given in the app.
  • Our legitimate interests (Art. 6(1)(f) GDPR): to secure the service and prevent abuse.

What that consent looks like. It is explicit (given by an affirmative action, never by default), granular (one permission for the memory and a separate one for health information), versioned (we record exactly which text you saw and when you accepted it), and revocable at any time. Both permissions start off. The health permission can only be turned on while Minu Insights is on, and turning Minu Insights off also turns health off.

How to withdraw it. From Profile → Privacy → Minu Insights, where you can:

  • Pause: Minu stops saving and using new memories; what he already learned stays stored in case you turn it back on.
  • Erase Minu's memory: Minu stops remembering and we delete all of his memory about you. This is permanent.
  • Withdraw only the health permission: we delete your health profile and the health facts Minu had stored, and Minu stops using them. The summaries of the entries you wrote may still mention what you told him; if you want nothing left, choose Erase Minu's memory.

You can also email hello@minufi.com with the subject "Privacy".

What withdrawal does. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and it does not bring back what has already been deleted: if you turn Minu Insights on again later, the memory starts from zero. Withdrawing consent never costs you access to the app.

5. Health information: two different paths

Health information can reach Minufi in two ways, and they work differently. Both require the health permission (Art. 9(2)(a) GDPR). The health profile is being enabled in stages: if you do not see it in your app yet, it has not reached your account.

Path A — What you declare in your health profile. If you complete the health section of your profile, the conditions you choose to declare live in a private area of your account that only you can access, encrypted at rest like the rest of your account data, and are used so Minu can shape what he suggests in Mind, Nutrition and Fitness with extra care. While the health permission is on, that condition also travels in the context Minu uses to answer you, so it is processed by the OpenAI models described in Section 6, under the same maximum 30-day retention. If that condition is also kept as a fact in Minu's memory, that fact carries additional field-level encryption.

When you turn the health permission off (Profile → Privacy → Minu Insights → Health & wellness), we delete your health profile and the health facts Minu had stored, and Minu stops using them. The summaries of the entries you wrote may still mention what you told him: if you want nothing left, choose Erase Minu's memory.

Path B — What you mention in conversation. What you mention about your health in a conversation or a journal entry is not stored as health information unless you confirm it, and that confirmation is not available in the app yet. If the health permission is off, Minu stores none of it either.

Minufi is not a medical service. Minu offers wellness guidance: he does not diagnose, treat, or prescribe. Decisions about your health belong to you and to the professionals you choose.

6. How we share your information

Minufi does not sell your personal data and does not share it for advertising purposes. We rely on the following providers (subprocessors), solely for the technical operation and measurement of the service and always under a data processing agreement:

  • Google (Firebase, Google Cloud and Google Analytics) — hosting, authentication, primary database — which also holds your chat history with Minu — and Minu's memory database (Cloud SQL, us-central1). On the website, additionally, Google Analytics, which measures how the site is used and is not linked to your Minufi account. United States.
  • Microsoft (Clarity) — measurement of how our website is used, including a recording of your browsing session on minufi.com: pages viewed, clicks, scrolling, device and approximate country. It has no access to the app, your account or your content. United States.
  • OpenAI — AI processing for Minu: generating chat responses and, if you turn on Minu Insights, extracting structured information (gpt-4o-mini) and generating embeddings (text-embedding-3-small). United States. OpenAI processes your data under a Data Processing Addendum incorporating Standard Contractual Clauses, does not use it to train its models, and retains API inputs and outputs for a maximum of 30 days, solely for abuse monitoring, after which it deletes them.
  • Railway — hosting of our AI orchestrator. Your chat content passes through this infrastructure on its way between the app, the AI providers, and the memory service, and the history of your conversations — in the app and on WhatsApp — is held there too, until you delete your account. United States.
  • Brevo (Sendinblue) — sending your account verification emails. It sees your name, your email address, and the content of that message. European Union.
  • Meta — Minu's WhatsApp channel: delivers your phone verification code and the messages you exchange with Minu on that channel. It sees your phone number and the content of those messages. United States.

The current subprocessor list, with purposes and safeguards, is maintained at Subprocessors. Before engaging any new AI subprocessor, we will update that list and notify you (Section 13).

Payments and subscriptions. Purchases are processed through Apple (App Store), Google (Google Play) and Stripe, which act as independent controllers, and through RevenueCat, which acts as our processor and only sees a purchase identifier and the status of your subscription. We never receive or store your card details.

Legal requirements. We may share information if a competent authority requests it in accordance with the law.

7. Data security

No online service can guarantee absolute security, but we apply industry-standard technical and organizational measures:

  • Encryption in transit (SSL/TLS) on all connections.
  • Encryption at rest across our infrastructure.
  • Additional field-level encryption (AES-256-GCM) for the health facts Minu stores in his memory, with keys stored separately in a managed secrets service (Google Cloud Secret Manager). That additional encryption applies to the derived fact, not to the profile.
  • Your health profile lives in a private area of your account that only you can access, protected by access rules and encrypted at rest like the rest of your account data.
  • Per-user isolation in the memory database.
  • Access restricted to authorized personnel, for technical support purposes only.

8. How long we keep your data

  • Original text in Minu's memory: erased after 30 days, once the short summary that replaces it is in place. The structured data and summaries remain.
  • Conversation with Minu (app and WhatsApp): held in your account (Google) and in the orchestrator's history (Railway), and kept until you delete your account. Today it has no automatic deletion window.
  • Minu's memory (facts, summaries, and embeddings): kept while Minu Insights is on. Permanently deleted when you erase the memory, withdraw consent, or delete your account.
  • Health profile: kept while the health permission is on; deleted when you withdraw it or delete your account.
  • Account data and content: kept while your account is active. When you delete your account, we permanently delete your personal data from our active systems (see Data Deletion).
  • Backups: deleted data may persist in encrypted backups for up to 30 days before permanent removal.
  • OpenAI: retains API data for a maximum of 30 days, solely for abuse monitoring, then deletes it. Your data is never used to train their models.
  • Consent record: we keep proof that you gave or withdrew consent (date, text version, and decision) for as long as your account exists; it is deleted when you delete your account. That record contains no content of yours.
  • Financial records: we keep only the transaction records required by tax and accounting obligations, and only for the period those rules impose.
  • Technical record of the account deletion: 12 months from the account closure, so we can demonstrate the deletion happened and retry it if something failed. It contains no content of yours.
  • Technical data from your phone verification: 12 months from the last verification, solely to stop anyone from using Minu's WhatsApp channel to send codes to someone else.
  • Website usage data: Google Analytics and Microsoft Clarity keep it under their own retention periods, described in our Cookies Policy.

9. International transfers

Your data is processed and stored mainly in the United States (Google Cloud, us-central1; Microsoft; OpenAI; Railway; Meta). Verification emails are sent from the European Union (Brevo). If you use Minufi from the European Union, the United Kingdom, Uruguay, Argentina, or another jurisdiction with international transfer requirements, those transfers are safeguarded by Standard Contractual Clauses (SCCs) incorporated into our providers' data processing agreements, together with technical measures such as encryption. You may request information about these safeguards at hello@minufi.com.

10. Your rights and how to exercise them

You have the right to:

  • Access your personal data and obtain a copy.
  • Rectify inaccurate data, including any of Minu's memories that are wrong.
  • Erase your data: individual memories, all memory, your health profile, or your entire account.
  • Portability: receive a copy of your data in a portable format.
  • Restrict processing or object to certain processing.
  • Withdraw any consent at any time — including consent for Minu Insights and for health information — without affecting processing carried out beforehand.
  • Lodge a complaint with your supervisory authority: in Uruguay, the URCDP (Unidad Reguladora y de Control de Datos Personales); in the EU or the UK, your local data protection authority.

How to exercise them in the app:

  • Profile → Privacy → Minu Insights: see the status of your permissions, pause the memory, erase it entirely, or withdraw only the health permission.
  • Profile → Privacy → Delete my account: delete your account and its data, with the few exceptions explained in Data Deletion.

If you live in the United States. We do not sell your personal data and we do not share it for targeted advertising. Whatever state you live in, you can ask us for access to your data, its correction or its deletion, and a portable copy, by emailing hello@minufi.com. We never treat you differently for exercising these rights.

You can also email hello@minufi.com with the subject "Privacy". We respond within 30 days.

11. Minimum age

Minufi is a service for people 18 and over, as declared on the App Store and Google Play. We do not knowingly collect data from anyone under 18. If we identify an account belonging to someone under that age, we delete it together with its data. If you believe a minor has provided us with information, email hello@minufi.com.

12. Cookies and tracking technologies

On our website we use essential cookies to make it work and remember your preferences, and measurement cookies from Google Analytics and Microsoft Clarity to understand how the site is used. Clarity, in addition to measuring, records your browsing session on the site: the pages you view, your clicks and your scrolling. We do not use any of these cookies to build advertising profiles about you, and they do not reach what you write inside the app. The details are in our Cookies Policy.

13. Changes to this policy

We may update this policy. We will notify you of any important change through a notice in the app or by email, and we will update the date in the header. If a change affects something you consented to — for example, adding a new AI subprocessor — we will ask you again before that change reaches you.

Governing law, jurisdiction and limitation of liability are under review with our legal counsel and will be published in our Terms and Conditions.

14. Contact

For any question about this policy or your data: hello@minufi.com (subject: "Privacy"). Minufi Wellness Co. — 18331 Pines Blvd. Suite 327, Pembroke Pines, FL 33029, USA.