Privacy Policy

This policy explains what Menlumin collects, why, and the choices you have.

1. Information we collect

• Account information: email address, full name and authentication credentials.
• Assessment data: responses to the WHO ASSIST and ASI questionnaires, including substance use patterns, frequency and related health information.
• Biometric data: pupil measurements captured during the optional eye scan.
• Urine drug screen (UDS) data: lab reports you upload and the results extracted from them.
• Mood and recovery data: daily mood logs, notes and goal tracking.
• Chat data: messages with the AI counselor and with healthcare providers.
• Technical data: browser type, anonymised IP address and session metadata.

2. How we use your data

• To produce clinical risk assessments and AI-assisted analysis.
• To provide recovery tracking and AI counseling.
• To support telemedicine communication between patients and doctors.
• To improve our screening tools, using aggregated, de-identified data only.

We never sell your personal data to third parties.

3. Data security

• Encryption at rest using AES-256.
• Encryption in transit using TLS.
• Role-based access, so patients, doctors and administrators only see authorised data.
• Audit logging of data access for security monitoring.

4. Your rights

Depending on where you live, you may have the right to access, export, correct and delete your data, to withdraw consent to processing, and to receive your data in a machine-readable format. You can use most of these rights from your privacy settings.

5. Retention and deletion

• Data is kept while your account is active.
• After a deletion request, personal data is permanently erased within 30 days.
• Anonymised, aggregated data may be kept for research and service improvement.

6. Contact

For questions about this policy, contact us.