Subprocessors

Last updated: September 8, 2026

Data controller: Minufi Wellness Co. — 18331 Pines Blvd. Suite 327, Pembroke Pines, FL 33029, United States. Contact: hello@minufi.com (subject "Privacy").

1. What this page is

To run Minufi we work with a few companies that process personal data on our behalf. They are called subprocessors. Each one works under a data processing agreement, only on our instructions, and only for what this page says. We do not sell your data, and none of these providers is allowed to use it for their own purposes.

For each one we tell you five things: who they are, what we use them for, what data they see, where they process it, and what safeguard covers the transfer out of your country.

This list covers both the app and the minufi.com website.

2. Active subprocessors today

3. Provider by provider

Google (Firebase, Google Cloud and Google Analytics)

Google is the infrastructure Minufi runs on: sign-in, the database that holds your journal entries, notes, audio, mood logs and chat history, the database that holds Minu's memory, the service that manages it, the service that delivers notifications to your phone, and the managed service where we keep our encryption keys, stored separately from the data they protect.

Minu's memory lives in a dedicated database hosted in the United States, region us-central1, and holds three things: facts, episode summaries of up to 240 characters, and their vector representations. The original text of what you write is erased from that database after 30 days, once the short summary that replaces it is in place; an automated job does this every day.

So that we can send you notifications, we store the identifier your phone assigns to Minufi. It is deleted when you delete your account.

On the minufi.com website we also use Google Analytics to measure how the site is used: it records the pages you visit, your device, your approximate country and a browser identifier. We do not link it to your Minufi account or to what you write in the app, and we do not use it to build advertising profiles. The details are in our Cookies Policy.

Google stores and processes this data on our behalf: it does not use it for its own purposes or to train its models. When you delete something, it may remain in encrypted backups for up to 30 days before permanent erasure.

Microsoft (Clarity)

On the minufi.com website we use Microsoft Clarity to understand how the site is used. Clarity records your browsing and records your browsing session: the pages you view, where you click, how you scroll, the device you use and the approximate country you visit from.

That recording is of the website, not of the app: Clarity does not see your Minufi account, your journal entries, your chat with Minu or Minu's memory. We do not use this data to build advertising profiles about you. Microsoft processes it in the United States. The details are in our Cookies Policy.

OpenAI

OpenAI is the AI provider behind Minu. It sees the text of the request sent on each turn, and nothing else: no access to your account, your email, your credentials or our databases.

If you turn on Minu Insights, its models also read the entry you are saving in order to extract the facts and episodes Minu will remember, and compute the vector representation that later makes that memory searchable.

OpenAI does not train its models on this data. It keeps what is sent to it and what it returns for a maximum of 30 days, solely to detect abuse of its service, and then deletes it.

Railway (hosts n8n)

n8n is the orchestrator that routes messages between the app, the AI providers and the memory service. We operate the software ourselves; the company providing the infrastructure — and therefore the subprocessor — is Railway.

The history of your conversations with Minu — both in the app and on WhatsApp — is stored in two places: the chat collections in your account, hosted on Google, and the orchestrator's history, hosted on this Railway infrastructure. Both exist so Minu can follow the thread. Today that history has no automatic deletion deadline: it is kept until you delete your account from Profile → Privacy → Delete my account, and then it is deleted with it. It is not Minu's long-term memory, it does not feed Minu Insights, and it is used for nothing else. If we set a deadline for it in the future, we will publish that here.

The orchestrator's execution logs may contain the content of messages. They are kept for up to 14 days and then deleted automatically; we use them only to diagnose failures.

Brevo

Brevo is the service we use to send you your account verification emails. It sees your email address, your name and the content of that message. It has no access to your journal entries, your chat with Minu or Minu's memory. It processes this data in the European Union.

Meta (Minu's WhatsApp channel)

You can talk to Minu on WhatsApp, and the code that verifies your phone number also arrives there. Meta is the company that operates WhatsApp: it receives your phone number and the content of the messages you exchange with Minu over that channel, including the verification code.

What you write over WhatsApp does not feed Minu Insights and never enters the long-term memory database. The history of that conversation is stored, together with the app's, in your account (Google) and on the Railway infrastructure described above, and it is deleted when you delete your account.

4. Your health data follows two different paths

Minu's memory and the health profile are being enabled in stages: if you do not see them in your app yet, they have not reached your account.

The two paths are worth separating, because they are not handled the same way:

• What you declare in your health profile (for example, a condition such as diabetes or high blood pressure) is stored in a private area of your account that only you can access, encrypted at rest like the rest of your account data; the fact Minu derives from it and keeps in his memory additionally carries field-level encryption. So that Minu can find it when needed, each condition is turned into a short, standardized line that is sent to OpenAI to compute its vector representation and that, while the health permission is on, also travels in the context Minu uses to answer you. In both cases the same 30-day maximum retention at OpenAI described above applies.
• What you mention while talking to Minu. What you mention about your health in a conversation or a journal entry is not stored as health information unless you confirm it, and that confirmation is not available in the app yet.

The health permission is separate from the general Minu Insights permission, is off by default, and you can withdraw it at any time without turning off the rest. Turning it off deletes your health profile and the health facts Minu had stored, and Minu stops using them. If you want nothing at all left of what you told him, choose Erase Minu's memory.

There are also especially sensitive topics — among them diagnoses, medications, sexual orientation, religion and political opinions — that Minu does not turn into things he remembers about you. The short summary of the entry you wrote may still mention it — which is why you can erase Minu's memory at any time. The full list is in our Privacy Policy.

5. Payments and subscriptions

Payments do not pass through our servers and we never see your card details. Apple (App Store), Google (Google Play) and Stripe process purchase data as independent controllers — the transaction is with them and is governed by their own privacy policies — while RevenueCat, which we use solely to know whether your subscription is active, acts as our processor: it sees a purchase identifier and the subscription status, never your account content or your payment details.

6. What this list does not cover

• Your own WhatsApp account. What WhatsApp keeps as a messaging service — your profile, your chat backups — is governed by Meta's terms with you, and is not something we can see or delete.
• Copies you keep outside Minufi. If you export or share your content yourself, what happens next is outside our control.
• Future providers. Any new provider, especially an AI provider, appears on this page before it starts processing your data, never after.

7. If the list changes, we tell you

• We update this page whenever we add, replace or remove a subprocessor, and we change the date in the header.
• A new subprocessor is published here before it begins processing your data.
• If the change affects Minu's memory or your health data, we also tell you inside the app and ask for your consent again with the new text: your current permission does not carry over automatically to a provider that did not exist when you gave it.
• If a change does not sit right with you, you can turn off Minu Insights or erase Minu's memory at any time from your profile, and keep using the rest of the app.

8. Questions

Write to hello@minufi.com with the subject "Privacy". We respond within 30 days.

You may also want to read our Privacy Policy, our Cookies Policy and our Data Deletion page.