Mental — last updated: September 2026
The short version
There is no account and no sign-up. We do not ask for your name, email address or phone number, we run no server of our own, and there is no analytics SDK, no advertising and no crash reporting in the app. Your moods, emotion words, notes, journal entries, practices and habits are stored only on your phone and are never uploaded. Two third parties appear below because two exist in the build: your app store's purchase validation, and the app-update check.
Nothing. The app has no registration, no login and no user profile. We do not collect your name, email address, phone number, contacts, photos, location or health records. We do not build a profile of you, we do not sell or share anything about you, and we could not identify you if we wanted to.
This is not a policy choice layered on top of a data pipeline. There is no pipeline: the app contains no analytics or advertising code, and makes no network request of its own.
Everything you record lives in your phone's private app storage: your mood check-ins, the emotion words you pick, the factors you tag, your written notes, breathing and grounding sessions, gratitude entries, thought records, your habit list and its history, your name if you entered one, your language, and your reminder time.
This data is never uploaded — we cannot see a single check-in or note. It is not backed up to any server by us. If you delete the app, everything stored locally is gone with it, which is why the app offers an export (see section 6).
Depending on your own settings, your phone's operating system may include app data in your device backup (iCloud Backup or Android Backup). That backup is between you, your device and Apple or Google, under their terms — not something we can see or control.
Mental Plus is optional. If you buy it, the transaction is handled entirely by Apple or Google and validated through RevenueCat, which tells the app whether your subscription is active.
RevenueCat receives an anonymous app-user identifier generated on your device, plus your purchase and subscription status and basic technical details of the transaction. It receives none of your check-ins, notes or mood data — those never leave the phone. We never see your card details: payment happens inside your store account and we have no access to it.
If you never buy anything, no purchase data is created at all.
The app can fetch small over-the-air updates so a fix reaches you without waiting for a store review. To do that it asks Expo's update service whether a newer version exists, sending only technical values needed to answer that question — the platform, the app version and the release channel. No identifier of yours and none of your content is sent, and nothing about your usage is reported back.
The daily reminder, if you turn it on, is scheduled locally by your phone. There is no push server, no device token and no message sent over the internet. The reminder time is stored on your device along with your other settings. You can turn it off in the app or in your system settings at any time.
You can export a copy of your data at any time — this is deliberately free, because a local-only app you cannot back up is fragile rather than private. Export writes a dated .json file and hands it to your system share sheet; where that file goes is entirely your choice, and once you send it somewhere, that destination's privacy policy applies rather than ours. Restore reads a file you pick back into the app. Neither step involves us or any server.
Mental asks for as little as it can. Notifications are requested only if you enable the daily reminder. The document picker is opened only when you tap restore, and it returns just the one file you choose. There is no camera, microphone, contacts, photo-library or location access anywhere in the app.
What you write in Mental is sensitive by nature. It is treated accordingly: it is not transmitted, not analysed on a server, and not shared with anyone. Mental does not read from or write to Apple Health or Health Connect, and it is not a medical device — see the Terms of Use.
Mental is intended for a general audience and is not directed at children under 13. We do not knowingly collect information from children — in fact we collect nothing that identifies any user, of any age.
We hold no account and nothing that names you, so there is no profile for us to export, correct or delete on your behalf — there is nothing on our side to act on. You hold all of it, and you control it directly: export a copy, restore it on another device, or use Settings → Delete everything to erase it all in one confirmed tap. Removing the app also removes everything it stored.
If this ever changes — if a future version adds accounts, sync or analytics — this page will be updated before that version ships, and the change will be visible here.
For any privacy question, reach us at the support email listed on the app's store page, or see Support.