Privacy Notice

Last updated 12 September 2026.

Who we are

Mendversation is operated by Stephen Omondi (trading as Mendversation), who is the data controller for the personal data described here. You can reach us at mendversation@gmail.com or through the Help & Support page at mendversation.com/support.

What we collect and why

Account data — your email address, password credentials held by our authentication provider, and display name. Used to create and secure your account and to contact you about the service. Legal basis: performance of our contract with you.

Conversation content — what you write in private intake, the shared mediation room, issue maps, agreements and check-ins. Used to provide mediation, generate summaries and keep your history. What you write in a one-to-one conversation is visible only to you and is not shown to the other person unless you choose to bring it into the shared space; shared messages are visible to the other person in your space. Legal basis: performance of our contract.

Safety signals — automated classification of messages that may indicate risk of harm. Used to keep people safe and prevent misuse. Legal basis: legitimate interests in safety, and legal obligation where applicable.

Usage and technical data — device and browser information, IP address, log and error data, and basic product analytics. Used for security, fraud prevention, troubleshooting and improving the product. Legal basis: legitimate interests.

Support messages — what you send us by email. Used to answer you. Legal basis: legitimate interests.

Marketing — we only send marketing email if you ask for it, and you can opt out at any time. Legal basis: consent.

Payment card details never reach us. Purchases are handled by Paddle, which collects billing information directly as the Merchant of Record.

Who we share data with

Service providers (subprocessors) — hosting, database and authentication infrastructure, and the AI model provider that generates mediation responses. They process data only on our instructions.

Paddle.com — our Merchant of Record and reseller, for the sale of subscriptions, subscription management, payments, invoicing, tax compliance and refunds.

Professional advisers — legal and accounting advisers where necessary.

Authorities — where we are required to disclose by law, or to protect someone from serious harm.

We do not sell personal data or use your conversations to train third-party AI models.

International transfers

Our providers may process data outside your country, including in the United States and the European Economic Area. Where required, transfers are protected by standard contractual clauses or an equivalent safeguard.

Retention

We keep account and conversation data for as long as your account is open. You can delete your private conversations, leave a shared space, or delete your account at any time from your privacy settings in the app. After account deletion we remove or anonymise your data, keeping only what we must for legal, tax and fraud-prevention purposes (typically up to seven years for transaction records held with Paddle). Backups are cycled out within 30 days.

Your rights

Depending on where you live you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent. Email us at mendversation@gmail.com or use the Help & Support page and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection supervisory authority.

Security

We use appropriate technical and organisational measures, including encrypted (HTTPS) connections between your device and the service, access controls at the database row level so only you and (where relevant) the other person in your space can read your content, and least-privilege access for administrators. No system is perfectly secure, but we take this seriously and review it regularly.

Cookies

We use essential cookies and local storage to keep you signed in and to remember your preferences; the service cannot work without them. We use a small amount of privacy-friendly product analytics to understand which features are used. We do not use advertising or cross-site tracking cookies. You can clear cookies at any time in your browser settings.

Changes

We will update this notice when our practices change and will tell you in the app or by email if the change is material.