Privacy Policy
How MenoHealth collects, uses, shares, and protects information
Effective Date: May 1, 2026 | Last Updated: June 22, 2026
MenoHealth, Inc. (“MenoHealth,” “we,” “us,” or “our”) provides this Privacy Policy to explain how we collect, use, disclose, and safeguard information when You use the MenoHealth mobile application, the menohealth.ai website, and related services (collectively, the “Service”). This Privacy Policy is incorporated into our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.
MENOHEALTH IS NOT A COVERED ENTITY UNDER HIPAA. WE TREAT HEALTH-RELATED INFORMATION AS SENSITIVE PERSONAL INFORMATION UNDER STATE PRIVACY LAW AND APPLY THE PROTECTIONS DESCRIBED BELOW. SEE THE SEPARATE HEALTH DATA DISCLOSURES.
1. Information We Collect
1.1 Information You Provide
- Account data: name, email, password (hashed), date of birth, ZIP code, time zone.
- Profile data: menopause stage, height, weight, ethnicity, pregnancy/lactation status, prior conditions, medications.
- Symptom log data: self-reported symptoms, severity, frequency, free-text notes.
- Hormone test results: values You upload or that are imported with Your authorization from a connected lab partner.
- Telehealth intake data: any responses You submit to the Telehealth Service through the in-app form.
- User-Generated Content: reviews, community posts, support messages, AI Coach prompts.
- Payment data: payment-method tokens (we do not store full card numbers; Stripe holds them); billing address; transaction history.
- Communications: emails and messages You send to us.
1.2 Information We Collect Automatically
- Device data: device model, operating system, unique device identifiers, mobile network, app version, language settings.
- Usage data: features used, screens viewed, taps, sessions, dwell time, error logs.
- Location data: approximate (IP-based) location; precise location only if You grant permission.
- Cookies and similar technologies: see the Cookie Policy.
- Push notification tokens (if You enable notifications).
1.3 Information from Integrated Devices and Services
- Apple HealthKit and Google Health Connect: data You authorize, such as steps, sleep, heart rate, body temperature, menstrual cycle data.
- Terra-supported wearables and home devices: data You authorize.
- Lab partners: hormone-test results You authorize.
- Telehealth Service: appointment metadata, prescription metadata (not the prescription itself).
- Authentication providers (e.g., Apple Sign-In, Google Sign-In): identifiers and profile information You consent to share.
1.4 Information We Infer
We may infer additional information by analyzing the information we collect, such as predicted symptom-onset windows, trends, and Service-improvement signals. Inferences are general and informational, not medical.
2. How We Use Information
- Provide, maintain, personalize, and improve the Service, including the AI Coach and Correlation Engine.
- Process subscriptions, payments, and refunds.
- Communicate with You about the Service, security alerts, and changes to our policies.
- Send marketing communications, subject to Your consent and opt-out rights (see Section 8).
- Detect, prevent, investigate, and respond to security incidents, fraud, abuse, and Terms violations.
- Comply with legal obligations and enforce our Terms.
- Conduct internal research, analytics, and de-identified aggregate analyses; aggregated and de-identified data may be used and shared without restriction. This internal analysis is distinct from voluntary participation in research studies, which is addressed in Section 12 (Research and Studies) and governed by a separate Research & Study Participation Informed Consent.
3. How We Share Information
3.1 Service Providers
- Cloud infrastructure: Amazon Web Services, Inc.
- Payments: RevenueCat, Stripe, Inc, Apple App Store, Google Play Store.
- Wearable and device integration: Terra.
- AI/large-language-model services: OpenAI (OpenAI API), Langfuse.
- Telehealth: CareValidate (treated as separate controller for medical care; see Section 3.2).
- Email and SMS: Sendgrid / Twilio.
- Analytics: Posthog.
- Customer support: Posthog.
Each service provider is bound by a written Data Processing Agreement that limits its use of personal information to the services performed for us and requires appropriate security.
3.2 Telehealth Provider
When You use the Telehealth Service, the telehealth provider is an independent controller of the data it collects for the medical encounter. The telehealth provider’s privacy practices are governed by its own privacy notice and, where applicable, HIPAA. Limited integration data may flow between MenoHealth and the telehealth provider as described in the in-app consent flow.
3.3 Affiliate Vendors
When You purchase from an affiliate vendor through The Toolkit, You provide information directly to that vendor. We do not receive Your full payment information from affiliates; we may receive limited transaction metadata for commission-tracking purposes.
3.4 Legal Obligations and Protection of Rights
We may disclose information if required by law, subpoena, court order, or other legal process, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of MenoHealth, its Users, or others, or to investigate fraud or violations of our Terms.
3.5 Business Transfers
If MenoHealth is involved in a merger, acquisition, reorganization, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections and notice to You where required.
3.6 With Your Consent
We share other personal information only with Your consent or at Your direction.
3.7 No Sale of Personal Information
We do not sell personal information for monetary consideration. To the extent that any sharing for cross-context behavioral advertising or similar activity is treated as a “sale” or “share” under California or other state laws, You may opt out as described in Section 9.
4. Cookies and Similar Technologies
We use cookies, SDK identifiers, pixels, and similar technologies for authentication, session management, analytics, performance monitoring, and (where applicable) advertising. See the separate Cookie Policy for details and choices.
5. Data Retention
We retain personal information only as long as necessary to provide the Service and for legitimate business or legal purposes. Default retention periods are:
- Account data: for the duration of Your account plus thirty-six (36) months after closure, or shorter if You request deletion.
- Symptom and integrated health data: for the duration of Your account; deleted within thirty (30) days of account closure unless retained in de-identified form.
- Payment metadata: as required by tax and accounting law (typically seven (7) years).
- Marketing consent records: for three (3) years after the last consented communication, or longer where required by law.
- Audit logs and security records: up to six (6) years.
- Backup copies: cycled out within thirty (30) days of deletion from production.
Detailed retention rules are documented in our internal Record Retention Policy.
6. Security
We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, alteration, disclosure, or destruction, including encryption in transit and at rest, role-based access controls, multi-factor authentication for administrative accounts, and regular security testing. No system is perfectly secure, and we cannot guarantee absolute security. Notify us immediately at security@menohealth.ai if You suspect unauthorized access.
7. International Data Transfers
We are based in the United States and process information in the United States and in regions where our service providers operate. If You access the Service from outside the United States, You acknowledge that Your information will be transferred to and processed in jurisdictions whose data-protection laws may differ from those of Your home jurisdiction. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.
8. Marketing Communications and Notifications
We send marketing communications by email, SMS, push notification, and in-app messages only where You have provided the required consent. You may opt out at any time through the unsubscribe link in any marketing email, by replying STOP to a marketing SMS, by disabling notifications in Your device settings, or by adjusting in-app preferences. Transactional and security messages are not marketing and may continue regardless of opt-out. See the separate Marketing & Communications Consent.
9. State-Specific Privacy Disclosures
9.1 California (CCPA/CPRA)
If You are a California resident, You have the rights to (a) know what personal information we collect and how it is used and shared, (b) request deletion, (c) request correction, (d) opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising (we do not knowingly sell or share for these purposes), (e) limit the use and disclosure of “sensitive personal information,” including health-related data, and (f) be free from retaliation for exercising any of these rights.
Categories of personal information we have collected in the prior 12 months include: identifiers; commercial information; internet/network activity; geolocation; sensory data (e.g., voice for AI Coach if You use voice features); professional information (none, by default); inferences; and sensitive personal information (health-related data and account credentials). Detailed source, business purpose, and disclosure information is set out in this Privacy Policy. See the in-app “Privacy Choices” page or email privacy@menohealth.ai to exercise rights. We will respond within forty-five (45) days, extendable as permitted by law.
9.2 Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Tennessee, and Other State Comprehensive Laws
If You are a resident of a state with a comprehensive privacy law, You have rights similar to those above, including access, deletion, correction (where applicable), portability, and opt-out of targeted advertising, sale, and certain profiling. To exercise rights, contact privacy@menohealth.ai. Where a state law requires opt-in consent for the processing of “sensitive data” (including health information), we obtain that consent at the relevant point in the user experience.
9.3 Authorized Agents
You may use an authorized agent to submit a privacy request. The agent must provide written authorization, and we may verify Your identity directly.
9.4 Appeals
If we deny a request, You may appeal by emailing privacy-appeals@menohealth.ai within forty-five (45) days. We will respond within sixty (60) days.
10. GDPR Disclosures (European Users)
If You access the Service from the European Economic Area, the United Kingdom, or Switzerland, MenoHealth acts as the controller of Your personal data. Our lawful bases include performance of a contract, consent, legitimate interests (in operating and securing the Service), and compliance with legal obligations. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority. To exercise rights, contact dpo@menohealth.ai. We rely on Standard Contractual Clauses for transfers outside the EEA where required.
11. Children’s Privacy
The Service is intended only for adults aged 18 and older. We do not knowingly collect personal information from individuals under 18 (or under 13 in any jurisdiction). If we learn that we have collected personal information from a minor, we will delete it. Parents or guardians who believe a minor has used the Service may contact privacy@menohealth.ai.
12. Research and Studies
From time to time, MenoHealth may invite You to participate in voluntary research studies intended to advance the understanding of perimenopause and menopause and to develop, validate, and improve features of the Service, including the MenoScore and the Correlation Engine. Participation in any such study is entirely optional.
Participation in a research study is separate from, and is not a condition of, Your use of the Service. We will not enroll You in any research study, and we will not use Your identifiable information for research, unless You provide separate, affirmative, study-specific consent through the Research & Study Participation Informed Consent presented to You in the app. Declining to participate, or withdrawing after enrolling, will not affect Your access to the Service or the price You pay for it.
The internal research, analytics, and de-identified aggregate analyses described in Section 2 are distinct from study participation and do not require separate consent. Research conducted under the Research & Study Participation Informed Consent may involve the use of identifiable health-related information and is described in detail in that document, including the categories of data used, how the data are protected, any sharing with academic or clinical research partners, the role of any institutional review board or independent ethics review, Your right to withdraw, and the limits of withdrawal once data have been aggregated, de-identified, or published.
Where required by law, we obtain the form of consent or authorization that applies to the processing of health-related information for research, including explicit consent under the EU/UK GDPR and any separate consent or authorization required under state health-privacy laws (for example, the Washington My Health My Data Act and similar laws). We do not sell information collected for research. Questions about the research program may be directed to research@menohealth.ai.
13. Changes to This Policy
We may update this Policy from time to time. Material changes will be communicated by in-app notice, email, or both, at least thirty (30) days before the change takes effect, except where a shorter notice period is required by law. Prior versions are archived and available on request.
14. Contact Us
- General privacy questions: privacy@menohealth.ai
- Data Protection Officer (where applicable): dpo@menohealth.ai
- Postal mail: MenoHealth, Inc., Attn: Privacy, 11555 Heron Bay Boulevard, Suite 200, Parkland, Florida 33076.