Privacy Policy

Data controller

CR OU OÜ, Nõmme tee 64-3, 13426 Tallinn, Estonia, Estonia (16778262). Privacy contact: [email protected].

What data we collect

Your quiz answers: age, height, weight, menopause stage, symptoms, habits, food preferences and allergies, and any conditions you tell us about (for example, a treatment or a history of eating disorders). Some of this is health data.

Your name (if you provide it) and your email address; your weekly check-ins (weight, energy, sleep, hunger); the meals you mark as done and your shopping list.

Payment and billing data, processed by Stripe. Minimal technical data (IP address, device type, country) for security and to show you the right language and price.

Why we use it and on what legal basis

To create and adapt your plan: we process health data only with your explicit consent, which you give by continuing after the quiz (Art. 9(2)(a) GDPR). You can withdraw it at any time by emailing us; without this data, however, we cannot create your plan.

To provide the service you purchased, send you service emails (sign-in, confirmations, renewals) and handle payments (Art. 6(1)(b) GDPR).

To send you recipes and tips by email, only if you ticked the relevant box (Art. 6(1)(a) GDPR). You can unsubscribe with one click from any email.

To meet tax and accounting obligations (Art. 6(1)(c) GDPR) and to keep the service secure (Art. 6(1)(f) GDPR).

Who we share it with

Only with the providers we need to run Menolea, all bound by data processing agreements: Stripe (payments), Resend (email delivery), Hetzner Online (servers in Germany), Cloudflare (network and security). Some are based in the United States and transfer data under Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

We do not sell your data or use it for third-party advertising.

How long we keep it

Quiz answers from people who don’t purchase are deleted after 12 months. Account data is kept while your account is active and deleted within 30 days of your request. Billing data is kept for the period required by law (7 years in Estonia).

Your rights

At any time, you can ask us to access, correct or delete your data, restrict its processing, receive it in a portable format, or object to its processing, by emailing [email protected]. You can also lodge a complaint with the data protection authority in your country or with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Cookies

We only use strictly necessary technical cookies: one to keep you signed in to your account and one to remember your time zone. No advertising or profiling cookies.