Privacy Policy

The data controller is Laura Andrea Paz Salas, who runs Mently, Herlev, Sjælland 2730, Denmark. Contact: hello@mently.io. We have not appointed a data protection officer; send any privacy question or request to that address.

Website waitlist. Your email address, field of study or work, country and city, and your consent to be contacted about our launch. Our servers also handle your IP address briefly to limit abuse, and we use cookie-free analytics and performance measurement to see how the site is used.

Your account. Your email address (you sign in with a one-time code) or, if you choose “Sign in with LinkedIn”, your name, email and profile picture as provided by LinkedIn. We copy the picture into your Mently profile as your starting photo, which you can change or remove, and use your LinkedIn name to show a “verified name” badge. We do not read your LinkedIn connections or posts.

Your profile. What you enter during onboarding and later: name, role (mentor or mentee), job title, company, years of experience, field of study, gender, degree, university, city and country, interests, mentorship preferences, meeting preferences, your written answers about your goals or what you offer, and your profile photo.

Activity in the app. Who you pass on or say yes to, your matches, the messages you send and whether they were read, and the people you block or report (including the reason and details you write in a report).

Device and notifications. If you allow notifications: a push token, your platform (iOS or Android) and your notification settings.

What is required. To create an account and profile you must provide your email address, name, role and your core profile details (job title, field of study, gender, education and location). Without them we cannot create your profile or match you. Your written answers, photo and notification settings are your choice.

Support and logs. If you email us we keep the correspondence (your address, message and our replies) to answer you and handle any follow-up, for up to 2 years. Our hosting and authentication providers (Vercel, Supabase) also keep short-lived server logs with IP address and device or browser details for security and troubleshooting.

Mently does not ask for sensitive information such as health, religion, ethnicity or sexual orientation. If you choose to include such information in free-text fields, you do so voluntarily, other members may see it, and you can remove it at any time.

• Provide the app — create your account, show your profile to other members, suggest and connect matches, and deliver messages. Basis: performing our contract with you (GDPR art. 6(1)(b)).
• Discover preferences — use the gender you give to apply members’ Discover preferences (for example, a mentee choosing not to see mentors who are men). Basis: performing our contract with you (art. 6(1)(b)).
• Safety and security — handle reports and blocks, prevent spam and abuse, rate-limit requests, keep the service running. Basis: our legitimate interest in a safe service (art. 6(1)(f)).
• Push notifications — new matches and new messages. Basis: your consent, given when you allow notifications. You can turn each type off in the app or in your device settings.
• Waitlist — one email when we launch. Basis: your consent (art. 6(1)(a)); you can withdraw it at any time.
• Website measurement — aggregated usage and performance statistics. Basis: legitimate interest.
• Support and server logs — answering your emails and keeping server logs. Basis: our legitimate interest in supporting you and keeping the service secure.
• Legal obligations — for example, answering lawful requests from authorities. Basis: art. 6(1)(c).

We do not sell your personal data, do not use it for advertising, and do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Other members. Your profile, including your name, photo, role, work and education details, location and written answers, is visible to other signed-in members in the app. Messages are visible only to you and the person you are matched with.

Gender. Your gender is not shown on your profile to other members; it is only used to filter who appears in Discover. A member who has chosen not to see some profiles may notice that you never appear for them.

Service providers (processors) who handle data on our instructions:

• Supabase — database, authentication, file storage and server functions for the app and the waitlist (hosted in Paris, France).
• Resend — sends sign-in codes and waitlist emails.
• Expo — delivers push notifications, through Apple’s and Google’s notification services, and app updates.
• Vercel — hosts the website and provides cookie-free analytics.
• Upstash — abuse and rate limiting on the website.
• LinkedIn — only if you choose to sign in with LinkedIn.

Some of these providers process data outside the EU/EEA, including in the United States. Where they do, the transfer relies on a mechanism approved under GDPR chapter V, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards we use. We may also disclose data where required by law, and your data may be transferred to a buyer or successor if Mently is sold, merged or reorganised, on terms that keep it protected as described here.

• Waitlist: until we have sent the launch email or you ask us to remove you, whichever is first. Every waitlist email has a removal link.
• Account and profile: for as long as your account exists. You can delete your account in the app (Profile → Account), or follow the steps at mently.io/delete-account to have it deleted without the app. Deleting it permanently removes your profile, profile photo, swipes, blocks and push tokens.
• Messages: while a match is active, messages are kept for as long as both accounts exist. After an unmatch, block or account deletion, the other person can still read the conversation for 90 days. After those 90 days the messages are permanently deleted.
• Reports: kept for 2 years so we can protect other members and act on repeated abuse, then deleted. If you delete your account, your identity is detached from the report, but the report itself stays for that period.

Under the GDPR you have the right to access your data, correct it, have it erased, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. You can edit most of your data directly in the app. For anything else, email hello@mently.io; we reply within one month.

You may also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or to the data protection authority in the country where you live or work.

Mently is only for people aged 18 or over. We do not knowingly collect data from anyone younger, and will delete it if we learn we have.

Data is encrypted in transit and at rest, and access to it is restricted by per-user access rules in our database. No system is completely secure; if a breach affects you, we will notify you and the authorities as the law requires.

We may update this policy. The date at the top shows the latest version; for material changes we will notify you in the app or by email.