Mentomo privacy policy

Last updated: November 10, 2026

Mentomo is a language-learning app: you write about your life, a coach called Tomo helps with what you couldn’t say, and you review it later. This policy explains what we collect, why, who we share it with, and what you can ask us to do with your data. It covers this website and the app.

Who is responsible

Mentomo is run by Kaminsky Data Strategies, LLC, 5473 Blair Rd Ste 100 PMB 72936, Dallas, Texas 75231, United States. For anything about your data, write to privacy@mentomo.com.

What we collect

If you request an invite: your email address, which page you used (Spanish or English), the link tag you arrived from if there was one (for example, a link shared by a friend), and when you asked.

If you use the app:

Your account: your name, email address and/or phone number, your time zone, and which language you’re learning.
What you write and practice: your writing, your messages with Tomo, your answers to review cards, the cards and word lists you build, and your progress and activity, such as streaks and points. If you use voice features, this includes your recordings and their transcripts.
Sign-in: a session cookie that keeps you signed in, and short-lived codes we send to your email or phone to sign you in.
Device and usage information: your IP address, browser and device type, the pages and features you use, and records of each request to our AI providers (which task, how long it took, what it cost).

If you contact us: what you send us and our replies.

If you pay for Mentomo: a payment provider handles your card details. We receive only what we need, such as whether a payment went through, never your full card number.

Cookies, analytics and advertising

We and our partners use cookies, pixels and similar technologies to keep you signed in, make Mentomo work, understand how people find and use Mentomo, measure our advertising, and show ads for Mentomo on other websites and apps. Analytics and advertising partners may collect information such as your device, browser, IP address and the pages you visit, and may combine it with information they collect elsewhere.

You can opt out of advertising and analytics cookies through the privacy choices we offer on our site and in the app, through your browser or device settings, or by writing to privacy@mentomo.com. Cookies needed to sign you in and run Mentomo can’t be turned off.

Why we use it

To provide Mentomo (primary purposes):

to review your invite request and send you an invitation;
to create your account and sign you in;
to correct your writing, answer you as Tomo, grade your answers and schedule your reviews;
to send you messages you need, such as sign-in codes and notices about your account, and practice reminders you turn on;
to answer you when you contact us;
to keep the service working and secure, including preventing fraud and abuse;
to understand how Mentomo is used and improve it, including Tomo (see “How Tomo uses AI” below);
to keep backups so your work isn’t lost.

Secondary purposes: we may also use your data to send you news and offers about Mentomo by email, text, WhatsApp or app notification, and to measure our advertising and show you ads for Mentomo on other sites and apps. You can say no at any time: use the unsubscribe link in a message, the opt-outs above, or write to us. Saying no doesn’t affect your invitation or your use of the app.

How Tomo uses AI

Tomo’s corrections, replies and grading come from AI models. To produce them, we send your writing and answers to AI model providers through our service providers. We require those providers not to train their models on your data or keep it for their own purposes.

To check Tomo’s quality and fix its mistakes, we may review conversations, writing, answers and Tomo’s replies. We may keep examples, with your name and contact details removed where practical, to test and improve Tomo, including our own prompts and models.

Who we share it with

Service providers who process data on our behalf, such as hosting (Railway), AI models (OpenRouter and the model providers it routes to), text and WhatsApp messages (Twilio), email (Postmark), and analytics, advertising, payment and support tools we may add.
Advertising and analytics partners, through the cookies and pixels described above.
Authorities or others, when the law requires it or when needed to protect the rights, safety or property of our users, the public or Mentomo, including to prevent fraud and enforce our terms.
A buyer or successor, if Mentomo or its business is involved in a merger, acquisition, financing or sale of assets.
Anyone else, with your consent.

We may also use and share information that has been aggregated or de-identified so it no longer identifies you.

We don’t sell your data for money. Some US state laws treat sharing data with advertising partners for targeted ads as a “sale” or “sharing”; where those laws apply, you can opt out as described above.

Where your data is processed

Mentomo is run from the United States, and our providers are based in, or process data in, the United States and possibly other countries. Sharing data with providers who process it on our behalf doesn’t require your consent; where the law requires consent for another transfer, we’ll ask for it.

Security

We use reasonable technical and organizational measures to protect your data, such as encrypted connections and limited access. No system is perfectly secure, so we can’t guarantee the security of your data.

Backups

We keep backup copies of the database so your work can be restored after a failure. They’re stored encrypted, outside the hosting provider, and only Mentomo’s operator can access them. Backup copies are retained and replaced as part of operating the service. Data deleted from the active service may remain in backups until those copies are replaced or removed; we don’t use those copies for ordinary service operations.

How long we keep it

We retain personal data for as long as reasonably needed for the purposes described in this policy, including providing and operating Mentomo, communicating with you, maintaining security and backups, and meeting legal obligations. Retention varies with the type of data and why it is needed. Invite requests may remain after an invitation or account creation. You can request deletion as described below, subject to any retention required by law.

Your rights

You can ask us to:

give you a copy of your data (access);
correct it (rectification);
delete it (cancellation);
stop using it for a particular purpose, such as news or advertising (opposition);
withdraw consent you’ve given.

Write to privacy@mentomo.com from the email or phone number on your account and say what you’re asking for. We may need to confirm it’s you before we act. In Mexico these are your ARCO rights: we’ll answer within 20 business days, a period the law lets us extend once when justified, and if you’re not satisfied with our answer you can contact the national data protection authority.

Depending on where you live, including some US states, you may have more rights, such as opting out of targeted advertising, appealing our decision on a request, or acting through an authorized agent. We won’t treat you differently for using your rights.

Children

Mentomo isn’t meant for children under 13. If you think a child has given us their data, write to us and we’ll delete it.

Changes

We may update this policy from time to time. We’ll post the new version here with its date. If a change materially affects how we use data we’ve already collected, we’ll let you know in a reasonable way, such as a notice on our site or in the app, before it applies.