Privacy & safety

Control is part of the product.

Your profile, your consent receipts, and — only if history is on — the high-level states you confirmed. No raw text, audio or video is ever stored.

Raw check-ins are not saved

Raw check-in text, audio and video are not included in saved check-in records. Analysis uses the input in memory. If you choose to save a manual note, that note is stored separately with your self-report.

Your face stays on your device

Facial expression is read by a small model inside your browser. Only seven averaged expression scores are sent — never an image. No identity or recognition model is ever loaded.

Consent per purpose, enforced twice

Text, voice, face and history are separate, revocable choices with dated receipts. The server checks them at the moment of analysis, and the database itself refuses to store a check-in without an active history receipt.

Only you can see your records

Row-level security scopes every read and write to the signed-in owner. There is no admin view of individual check-ins, and no institutional dashboard.

Export or erase, without asking anyone

Download everything as JSON, delete single entries, wipe all wellness data, or delete the account — all from inside the app.

Not a clinical service

Menzync is not diagnosis, treatment or an emergency service, and nobody monitors check-ins in real time. If a check-in mentions self-harm, Menzync shows a support panel regardless of any emotion reading.