Legal
Every consent Menthra captures, what it covers, and how to manage it. A consent is a separate, specific, informed agreement to a particular kind of data use — different from accepting our Terms or Privacy Policy.
In plain English
Menthra uses three layers of agreement that do different work: Terms (the contract), Privacy Policy (what we collect), and Consents (specific opt-in choices for sensitive processing). This page lists every consent we may ask you for — required, conditional, and optional — explains how to withdraw any of them, and tells you how versioning and re-consent work.
Menthra uses three layers of agreement, and they do different work.
We will never bury a consent inside the Terms or Privacy Policy. That is by design and required by law (GDPR Article 7, DPDP §6, HIPAA authorization rules).
These consents are required for the platform to function. If you decline any of them, the affected features will not be available to you. You can still withdraw them later and stop the affected processing.
AI Interaction
You will be talking to an AI Companion, not a human. Read what the AI is, what it is not, and what it cannot do.
Read full consent →Health and Mental Wellness Data
The conversation you have on Menthra is health-related data. This consent authorizes Menthra to process it for the purpose of delivering the service.
Read full consent →Crisis Intervention
If our system detects language suggesting you or someone else is in immediate danger, we will surface crisis resources and may notify a designated human reviewer or emergency contact. This consent authorizes that protocol.
Read full consent →Transactional Communications
We need to send you account-related emails — sign-in, password reset, billing, security alerts. You cannot opt out of these while you have an active account.
Read full consent →These consents are asked for only when the relevant situation applies. They are required in that context.
Clinical Escalation
Applies only if you connect with a licensed clinician through Evoke. Authorizes the limited information sharing required for clinical care.
Read full consent →Session Recording
Applies only when a session is recorded, which only happens with your explicit ask or in clinical contexts where it is part of care. Recordings are encrypted, accessible to you, and deletable.
Read full consent →Cross-Border Transfer
Applies if your data may move between India and the United States as part of operating the platform. Describes the transfer safeguards and your rights.
Read full consent →Family Plan Data Sharing
Applies only if you are part of a Bloom family plan. Describes what a family administrator can and cannot see.
Read full consent →Minor Signup
Applies if the user is under 18, and is granted by a verified parent or guardian. Describes COPPA and DPDP minor-data protections.
Read full consent →Employer Deployment
Applies if you access Menthra through an Ally workplace deployment. Describes the strict separation between your conversations and what your employer can see.
Read full consent →You can use Menthra fully without granting these. You can grant or withdraw them at any time without losing access to anything.
Research and Platform Improvement
Lets us use anonymized, de-identified patterns from your usage to improve safety and quality. Off by default.
Read full consent →Marketing Communications
Lets us send you product updates, wellness content, and offers. Off by default. Easy to turn off in your account.
Read full consent →Inside the Menthra app, go to Settings → Privacy & Consents to see the full history of every consent you have granted, when, and which version of the page you agreed to. You can withdraw any consent from that screen with a single tap.
You can also write to privacy@menthra.ai with your account email and the name of the consent you want to withdraw. We will process the withdrawal and confirm in writing within 48 hours.
What withdrawal does
When we materially change a consent page, we ask you to re-consent on your next session. The change and the date are recorded on our Legal Changelog. You can always see which version of each consent you have currently agreed to from your Settings.
For developers and partners: machine-readable consent versions are available at /legal/versions.json, and a flat consent-slug-to-version map is at /legal/consent-versions.json. Each individual consent page also exposes a /version.json sibling endpoint.
Contact