Privacy Policy

How MenoHealth collects, uses, shares, and protects information

Effective Date: November 5, 2026 | Last Updated: October 30, 2026 | Version: 0.0.2

MenoHealth, Inc. (“MenoHealth,” “we,” “us,” or “our”) provides this Privacy Policy to explain how we collect, use, disclose, and safeguard information when You use the MenoHealth mobile application, the menohealth.ai website, and related services, including MenoCare telehealth visits and prescription ordering (collectively, the “Service”). This Privacy Policy is incorporated into our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.

MenoHealth is not a covered entity under HIPAA. We treat health-related information as sensitive information under applicable privacy law. The Health Data Disclosures are our Consumer Health Data Privacy Policy for Washington, Nevada, and similar state laws. The Privacy Policy and Health Data Disclosures govern MenoHealth’s data practices. The Health Data Disclosures control for consumer health data if a specific provision conflicts, and applicable state-specific provisions control for the users and activities they cover.

Health information is collected with the applicable consent described in the Health Data Disclosures. Those Disclosures explain in-app controls and email requests for access, deletion, and withdrawal. Our product-analytics stream receives no health information apart from the connection details You approve when connecting an app or device. Separate work with Qualifying De-identified Data is described in Section 2.

1. Information We Collect

This Section describes the categories of information we collect. The examples given for each category are illustrative, not exhaustive; the specific items requested from You are presented at the point of collection in the app.

1.1 Information You Provide

Account data: registration information, such as name, email, password (hashed), date of birth, and time zone.
Profile data: health-profile information You choose to provide during onboarding or in Settings, such as menopause stage, height, weight, prior conditions, and medications.
Symptom log data: information You log about Your symptoms, such as the symptoms themselves, severity, frequency, and free-text notes.
MenoAI conversations and memory: Your chats with the AI Coach (MenoAI); observations logged from chat — for symptoms You already track, saved automatically to Your symptom log, where You can edit or delete them; for a new symptom category, saved to that log only after MenoAI asks You and You say yes; and, only if You separately turn memory on, memories MenoAI keeps across conversations. Memory is off until You turn it on, is not a condition of using the Service, and every memory is visible and erasable in the app. Memories do not affect Your scores or insights. Declining a logging suggestion prevents that symptom-log entry; it does not delete the conversation itself, which is subject to the retention and deletion provisions below.
Hormone test results: values You upload.
Meal and nutrition information: photos and food descriptions You deliberately submit for meal logging, nutritional estimates, and potential symptom-trigger insights. Our AI providers process these under the Zero Data Retention arrangement described in the Health Data Disclosures.
Other submissions: support messages, reviews, community posts, and feedback You choose to provide through available features. Health information in a submission remains governed by this Policy and the Health Data Disclosures; it is excluded from the general User Content license in Terms of Service Section 7.
Payment data: payment-method tokens (we do not store full card numbers; the applicable app store, or Stripe, Inc. for purchases on our web checkout, holds them); and transaction history, including Your plan purchases, consultation fees and MenoHealth visit fees, and medication orders.
MenoCare booking data: the type of telehealth visit You book and the booking reference we create for it. Your telehealth intake is entered directly with the Telehealth Provider and is not collected by MenoHealth (see Section 3.2).
Communications: emails and messages You send to us.

1.2 Information We Collect Automatically

Device data: technical information about Your device, such as device model, operating system, device identifiers, mobile network, app version, and language settings.
Usage data: features used, screens viewed, taps, sessions, dwell time, error logs. Usage data does not include the content of Your symptom logs, MenoAI conversations, memories, or any other health information (see Section 3.1).
Location data: approximate (IP-based) location only. We do not collect precise geolocation, and we do not use geofencing — around healthcare facilities or anywhere else.
Cookies and similar technologies: see Section 4.
Push notification data: when You enable push notifications, push tokens and notification delivery metadata used by OneSignal and the platform notification services to deliver them. No health information is included in notification content or sent to OneSignal.

1.3 Information from Integrated Devices and Services

Apple HealthKit and Google Health Connect: data You authorize, such as steps, sleep, heart rate, body temperature, menstrual cycle data.
Terra-supported wearables and home devices (including Oura and other supported devices): data You authorize, such as heart-rate variability, sleep stages and quality, skin/body-temperature trends, activity, and — if You connect a glucose monitor — glucose readings. Connecting is optional and controlled by You; You can disconnect at any time in Settings, and disconnecting stops new collection. Which app or device You choose to connect is itself treated as health information (see Section 3.1).
Telehealth Provider (MDI Medical Group PC and its affiliated professional entities): the status of each visit (for example, in review, completed, or declined), the patient and case identifiers the provider assigns to You, and a notice when Your clinician sends You a message. If You order a prescribed medication through the Service, the Telehealth Provider also sends us the status of the order and shipment and, for Your medication tracker and refill reminders, the medication name, strength, quantity, price, fill and shipment status, and refill dates, which the Telehealth Provider receives from the pharmacy. We do not receive Your intake answers, Your identification photo, clinical notes, or the content of Your messages with Your clinician.
Honeybee Health, Inc.: the pharmacy does not send information about You to MenoHealth. What we know about Your order comes from the Telehealth Provider, as described above and in Section 3.2.
Authentication providers (e.g., Apple Sign-In, Google Sign-In): identifiers and profile information You consent to share.

1.4 Information We Infer

The Service computes wellness metrics from information we collect, such as Your MenoScore, pattern correlations, and trends. Inferred health information is consumer health data and receives the same protections as information You enter. We do not infer symptoms You have not reported from wearable data, language patterns, or other sources. MenoAI does not add a symptom You do not already track to Your symptom log without first asking You in the conversation. Declining prevents that log entry; the conversation itself is subject to the retention and deletion provisions below. Inferences are general and informational, not medical.

2. How We Use Information

Provide, maintain, personalize, and improve the Service, including the AI Coach and Correlation Engine.
Process subscriptions, consultation fees and MenoHealth visit fees, medication orders, payments, and refunds, including collecting the Telehealth Provider’s and the pharmacy’s charges on their behalf and forwarding them.
Book Your telehealth visits, show You their status, and tell You when Your clinician has messaged You; and, when You order a prescription through the Service, approve the order through the Telehealth Provider’s platform and send You refill and delivery updates.
Communicate with You about the Service, security alerts, and changes to our policies.
Send marketing communications, subject to Your consent and opt-out rights (see Section 8).
Detect, prevent, investigate, and respond to security incidents, fraud, abuse, and Terms violations.
Comply with legal obligations and enforce our Terms.
Conduct product analytics using non-health usage data, such as screens, taps, and errors, with health information excluded apart from the connection details You approve for maintaining an app or device connection (Section 3.1). Support messages are access-restricted and are not used for product analytics. Quality and safety review of MenoAI conversations is described in the Health Data Disclosures. We may also analyze Qualifying De-identified Data for the Permitted De-identified Uses below.
Permitted De-identified Uses. We may create, use, combine, retain, disclose, publish, license, sell, and otherwise commercialize Qualifying De-identified Data, including aggregate statistics and record-level de-identified datasets, for analytics; product and service development, improvement, and evaluation; research; development, training, testing, and evaluation of artificial intelligence and machine-learning systems; and commercial insights and data products. We may receive compensation for these activities.
Qualifying De-identified Data means information de-identified so that it no longer constitutes personal information or consumer health data under applicable law.
We take reasonable measures to maintain Qualifying De-identified Data in de-identified form. We publicly commit to maintaining and using it in that form without attempting to re-identify individuals. We impose the recipient safeguards and contractual obligations required by applicable law.
These uses are subject to applicable law and binding source, study, and other commitments governing the information. We conduct these uses only as permitted by applicable law and binding source, study, and other commitments governing the information.

We do not sell personal information or consumer health data. We do not use or share consumer health data for third-party advertising, ad targeting, or ad measurement, or use it to train general-purpose AI models. These restrictions do not limit the Permitted De-identified Uses. We do not use geofencing.

3.1 Service Providers

Cloud infrastructure and database: Amazon Web Services, Inc. (RDS database and S3 storage).
Payments and subscriptions: RevenueCat, Inc., Apple, and Google (receipt and entitlement data only — no health data), and Stripe, Inc., which processes plan, visit, and medication payments made on our web checkout.
Wearable and device integration: Terra.
AI/large-language-model services: OpenAI OpCo, LLC (under a signed healthcare addendum and data processing addendum) and Anthropic, PBC (under a signed zero data retention agreement). Your messages are processed solely to generate MenoAI’s responses; they are not stored by either provider afterward (Zero Data Retention) and are not used to train either provider’s models.
AI conversation monitoring: Langfuse, which holds the quality-and-safety record of MenoAI conversations under a signed agreement. Direct identifiers and other people’s names are removed before records are written, though Your own first name may remain; records are kept while Your account is active and are erased when You delete Your account, except where a legal hold or legal obligation requires retention.
Independent telehealth recipient: the provider identified in the Telehealth-Specific Disclosures (MDI Medical Group PC and its affiliated professional entities) is a separate controller for medical care, not a MenoHealth service provider. Section 3.2 describes that relationship; the processor restrictions in this section do not describe its independent clinical role.
Independent pharmacy: Honeybee Health, Inc., a licensed pharmacy, fills and ships prescriptions that Your clinician sends to it when You choose to fill them through the Service. It is a separate healthcare provider, not a MenoHealth service provider. MenoHealth does not send it Your information, and it does not send Your information to MenoHealth. Section 3.2 describes the flow.
Email: SendGrid (used only to send emails You have enabled; no health details appear in any email).
Push notifications: OneSignal, Inc., which delivers the push notifications You enable, using the Apple Push Notification service and Firebase Cloud Messaging as transports. OneSignal receives push tokens and notification delivery metadata only — no health information.
Video delivery: Mux, which receives viewing and playback-quality information tied to a pseudonymous identifier and Your network address — not Your name, contact details, or health records.
Analytics: PostHog, Inc. PostHog receives product-usage data only — screens, taps, and errors — not Your health information. PostHog also hosts our customer-support inbox: messages You send to support are held there under our signed agreement, access-restricted to the team members who help You, and not used for product analytics. The limited consumer health data exception You authorize Yourself is connection information: when You connect a third-party app or device, the connection screen tells You that our analytics service will see which app You connected and whether the connection is working, solely to keep the connection running. Your tap to connect is Your consent, for that app and that purpose; each additional app gets its own screen and its own tap, and disconnecting in Settings ends it.

Each service provider is bound by a written Data Processing Agreement that limits its use of personal information to the services performed for us and requires appropriate security.

3.2 Telehealth Provider

When You book a telehealth visit, we send the Telehealth Provider a booking reference for the visit. The provider’s own intake then opens inside our app, and You enter Your name, date of birth, address, phone number, medical answers, and identification photo directly with the provider; MenoHealth does not collect, view, or store that information. If You separately consent, we also attach a summary of Your tracked data to Your case. The provider sends us the visit status, its identifiers for You, and a notice when Your clinician messages You. Your messages with Your clinician take place on the provider’s page inside our app, and we do not receive their content or the clinical records of the encounter. The provider is an independent controller for medical care, governed by its own privacy notice and, where applicable, HIPAA. The consent flow is described in Health Data Disclosures Section 9 and the Telehealth-Specific Disclosures.

If the provider issues a prescription that You choose to fill through the Service, Your clinician sends the prescription and the information needed to fill and ship it (such as Your name, date of birth, shipping address, and contact information) to Honeybee Health, Inc., an independent licensed pharmacy that handles that information under its own privacy notice and applicable pharmacy law. MenoHealth does not send Your information to the pharmacy. When You place the order on our ordering screen, MenoHealth approves the order through the Telehealth Provider’s platform, the pharmacy reports the fill and shipment to the Telehealth Provider, and the Telehealth Provider sends us the order details described in Section 1.3 so that we can show You the status of Your order, manage refills and delivery, and send You refill and delivery updates. The ordering screen shows two separately stated amounts. The medication is sold to You by Honeybee at the pharmacy’s price, and MenoHealth collects that payment as Honeybee’s limited payment agent and forwards it to the pharmacy. MenoHealth’s care coordination fee is a flat amount that is the same for every medication. If You fill Your prescription at another pharmacy, we receive none of that information.

3.3 Affiliate Vendors

We do not currently offer affiliate-linked products. If we introduce them, this Policy will be updated first.

3.4 Legal Obligations and Protection of Rights

We may disclose information if required by law, subpoena, court order, or other legal process, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of MenoHealth, its Users, or others, or to investigate fraud or violations of our Terms. If we receive a legal demand for Your consumer health data, we will disclose only what we are legally required to disclose.

3.5 Business Transfers

If MenoHealth is involved in a merger, acquisition, reorganization, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections and notice to You where required.

We share other personal information only with Your consent or at Your direction.

3.7 Sales and Advertising

We do not sell personal information or consumer health data, or share personal information for cross-context behavioral advertising. We may license, sell, and otherwise commercialize Qualifying De-identified Data as described in Section 2.

3.8 De-identified Data Recipients and Published Insights

Subject to Section 2, we may publish de-identified insights and provide Qualifying De-identified Data to academic and scientific researchers, life-sciences and healthcare organizations, technology and AI developers, analytics providers, and other commercial partners. Products may include aggregate statistics or record-level de-identified datasets, and we may receive compensation. Sharing personal or consumer health data for a separately offered research study is described in Section 12.

4. Cookies and Similar Technologies

We use cookies, SDK identifiers, and similar technologies for authentication, session management, analytics, and performance monitoring.

5. Data Retention

We retain personal information only as long as necessary to provide the Service and for legitimate business or legal purposes. Default retention periods are:

Account data: for the duration of Your account. When You delete Your account, Your data is removed from live systems on the schedule stated in the Health Data Disclosures; we retain only the limited records the law requires us to keep (for example, tax and accounting records), and only for as long as the law requires.
Symptom and integrated health data: for the duration of Your account, subject to earlier deletion requests and any required cessation of processing; deleted from live systems after account closure within the time required by applicable law.
Payment metadata: as required by tax and accounting law.
Telehealth visit records (booking references, visit status, provider identifiers, and records of consultation fees and MenoHealth visit fees): seven (7) years after the visit, or six (6) months after the visit for Users located in Washington State.
Medication order records (medication, quantity, price, medication payments, and fill, shipment, and refill history): seven (7) years after the order, or six (6) months after the order for Users located in Washington State.
Marketing consent records: for as long as necessary to evidence Your consent, or as required by law.
Audit logs and security records: retained for security, auditing, and legal compliance for up to six years, only to the extent permitted by applicable law. Account deletion and withdrawal are handled under the Health Data Disclosures.
Backup copies: automated backups are deleted as they cycle.
Push notification tokens: retained while push notifications are enabled; no longer used if You disable push notifications; deleted within thirty (30) days after You delete Your account.

Deleting in the app and emailing privacy@menohealth.ai produce the same result. Where a legal hold or legal obligation requires us to keep a specific record, we keep it only as long as the law requires.

If You have used the Telehealth Service, deleting Your account also sends the Telehealth Provider notice that You have closed Your MenoHealth account. The Telehealth Provider handles that notice under its own policies and keeps the medical records the law requires it to keep, and Honeybee Health, Inc. keeps the pharmacy records the law requires a pharmacy to keep.

We may retain Qualifying De-identified Data after account deletion or consent withdrawal and continue the Permitted De-identified Uses as permitted by applicable law and binding commitments governing the information.

6. Security

We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, alteration, disclosure, or destruction, including encryption in transit and at rest, role-based access controls, multi-factor authentication for administrative accounts, and regular security testing. No system is perfectly secure, and we cannot guarantee absolute security. If a security incident affects Your health data, we will notify You and applicable regulators as required by law, without unreasonable delay. Notify us immediately at support@menohealth.ai if You suspect unauthorized access.

7. International Data Transfers

We are based in the United States and process information in the United States and in regions where our service providers operate. If You access the Service from outside the United States, You acknowledge that Your information will be transferred to and processed in jurisdictions whose data-protection laws may differ from those of Your home jurisdiction. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

8. Marketing Communications and Notifications

We send marketing communications by email and in-app messages only where You have provided the required consent. You may opt out at any time through the unsubscribe link in any marketing email, by replying STOP to a marketing SMS, by disabling notifications in Your device settings, or by adjusting in-app preferences. Transactional and security messages are not marketing and may continue regardless of opt-out.

9. Privacy Rights and State-Specific Disclosures

Every MenoHealth user has the in-app controls described in the Health Data Disclosures; statutory privacy rights apply as the law requires. You can view tracked data, connected-device data, and saved MenoAI memories in the app; delete symptom-log entries, memories, or Your account in the app; request deletion of individual conversations or a portable copy of health data at privacy@menohealth.ai; and withdraw consent in Settings. Withdrawal stops new collection immediately and also stops consent-dependent processing when and as applicable law or the governing consent requires. Section 5 describes retention of Qualifying De-identified Data. You may request recipient information and appeal decisions where applicable law provides those rights. We honor applicable non-retaliation requirements. Features that need data may be unavailable without that data, as explained in the Health Data Disclosures.

9.1 California (CCPA/CPRA)

If You are a California resident and the CCPA/CPRA applies, Your rights include knowing what personal information we collect and how it is used and disclosed; requesting deletion and correction; opting out of sale of personal information and sharing for cross-context behavioral advertising; limiting covered uses and disclosures of sensitive personal information where the law provides that right; and exercising rights without unlawful discrimination. Our current practices do not include sale of personal information or sharing for cross-context behavioral advertising. Qualifying De-identified Data is addressed separately in Section 2.

Categories described in Section 1 include identifiers, commercial information, internet/network activity, approximate IP-based location, submitted images and text, inferences, and sensitive personal information such as health data and account credentials. Voice input is transcribed on Your device; we receive the resulting text, not audio. Collection, source, purpose, and disclosure details appear in Sections 1–3 and the Health Data Disclosures. Use in-app privacy settings or email privacy@menohealth.ai to exercise rights; we respond within the time required by law.

9.2 Other States With Comprehensive Privacy Laws

If You are a resident of a state with a comprehensive privacy law, You have rights similar to those above, including access, deletion, correction (where applicable), portability, and opt-out of targeted advertising, sale, and certain profiling. To exercise rights, contact privacy@menohealth.ai. Where a state law requires opt-in consent for the processing of “sensitive data” (including health information), we obtain that consent at the relevant point in the user experience.

Health Data Disclosures Section 13 provides additional state-specific information.

9.3 Authorized Agents

You may use an authorized agent to submit a privacy request. The agent must provide Your signed, written authorization or a valid power of attorney, and we may require You to verify Your identity directly with us or to confirm directly with us that You authorized the request. We may deny a request from an agent who does not provide this proof.

9.4 Appeals

If we deny a request, You may appeal by emailing privacy@menohealth.ai within forty-five (45) days. We will respond within the time required by applicable law.

9.5 Washington (My Health My Data Act) and Nevada (SB 370)

The Health Data Disclosures serve as our consumer health data privacy policy under Washington’s My Health My Data Act and Nevada’s consumer health data law and are linked from our homepage and app. Covered consumers have the access, recipient-information, withdrawal, and deletion rights described there. We do not sell consumer health data. Qualifying De-identified Data is addressed in Section 2. We do not use geofencing.

If You access the Service from the European Economic Area, the United Kingdom, or Switzerland, the following applies under the GDPR. If You access the Service from any geographic location, these terms may not apply based on your applicable federal or state law. MenoHealth acts as the controller of Your personal data. Our lawful bases include performance of a contract, consent, legitimate interests (in operating and securing the Service), and compliance with legal obligations. For health data, we rely on Your explicit consent. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority. To exercise rights, contact privacy@menohealth.ai. We rely on Standard Contractual Clauses for transfers outside the EEA where required.

11. Children’s Privacy

The Service is intended only for adults aged 18 and older. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected personal information from a minor, we will delete it. Parents or guardians who believe a minor has used the Service may contact privacy@menohealth.ai.

12. Research and Studies

From time to time, MenoHealth may invite You to participate in voluntary research studies intended to advance the understanding of perimenopause and menopause and to develop, validate, and improve features of the Service, including the MenoScore and the Correlation Engine. Participation in any such study is entirely optional.

Participation in a separately offered research study is voluntary and is not a condition of using the Service. We will not enroll You in such a study or use Your identifiable information for that study unless You give separate, affirmative, study-specific consent through the Research & Study Participation Informed Consent presented for it. Declining or withdrawing from the study will not affect Your access to the Service or the price You pay. Acceptance of this Policy is not consent to study participation.

Internal analysis and Permitted De-identified Uses under Section 2, including research with Qualifying De-identified Data, are distinct from enrollment in a separately offered study. A study consent describes its data, purposes, sharing, ethics review where applicable, withdrawal, and any limitations on withdrawal after de-identification or publication.

Information collected under a study-specific consent is governed by that consent and the applicable study requirements. A study may include commercial uses of Qualifying De-identified Data where its terms permit. Questions may be directed to privacy@menohealth.ai.

13. Changes to This Policy

We may update this document from time to time. We will communicate material changes in the app and, where appropriate, by email. We will provide any notice and obtain any consent or authorization required by applicable law or binding commitments governing the information before applying the relevant change. Prior versions are archived.

14. Contact Us

General privacy questions: privacy@menohealth.ai
Data Protection Officer (where applicable): privacy@menohealth.ai
Postal mail: MenoHealth, Inc., Attn: Privacy, 11555 Heron Bay Blvd., Suite 200, Parkland, FL 33076.