Privacy Policy

Last updated: 11 October 2026

1. Who we are

Neala is a menopause coaching app operated by Meridian Studios sp. z o.o., a company registered in Poland ("Neala", "we", "us", "our"). We are the data controller responsible for your personal data.

Contact: hello@neala.co

2. What data we collect

Account data

• Your email address and name, and a password if you sign up with email
• If you sign in with Apple or Google, the email address and name they share with us. With Apple, you can choose to hide your email, and we then receive an Apple relay address instead.
• Your settings: units, timezone, reminders, water and step targets

Health data (special category data under GDPR Article 9)

• Your onboarding answers: age range, menopause stage, height and weight, symptoms, sleep, stress, energy, body image, intimacy, any conditions you tell us a doctor has diagnosed, your cycle, your relationship with food and your goals
• The menopause profile we assign from those answers
• Daily check-ins: mood, sleep quality and duration, symptoms, weight and any notes you write
• Habit completion (meals, workouts, sleep, water, steps)
• Food preferences, allergens, dietary restrictions, meals you add and ingredients you swap
• Your conversations with the in-app coach
• On iPhone, if you allow it: your daily step count from Apple Health (read-only)

Subscription data

• Which plan you are on, trial and renewal dates, and subscription status. Payment details are handled by Apple or Google; we never see your card.

Usage and device data

• Which screens and features you use, session times, app errors, device type, operating system and app version. This is collected only after you give consent.

Website

• If you join our mailing list on neala.co, your email address

3. Why we collect it and our legal basis

You give explicit consent during onboarding, before any health data is collected. You can withdraw consent at any time by deleting your account (see section 8).

4. Who we share your data with

We share your data only with the service providers ("processors") we need to run Neala:

• Supabase
• Anthropic
• PostHog
• RevenueCat
• Slack
• Apple and Google

5. Apple Health

If you allow it, Neala reads your daily step count from Apple Health to track your steps habit. We only read steps, and we never write to Apple Health. Apple Health data is never used for advertising or marketing, never sold, and never shared with third parties except as needed to provide the app. You can turn off access at any time in your iPhone's Health settings.

6. International data transfers

Your data is stored in the European Union. Some of our processors (Anthropic, RevenueCat and Slack) are based in the United States. Transfers to them are covered by the EU Standard Contractual Clauses or an equivalent safeguard required by law.

If you are outside the EU, using Neala means your data is transferred to and stored in the EU.

7. How long we keep your data

8. How to delete your data

In the app: go to Settings and choose "Delete account". This permanently deletes your account and all of your data in our database straight away.

Deleting your account does not cancel a subscription. Cancel it in your App Store or Google Play settings.

Copies held by our processors, such as analytics events and internal notifications, are deleted on their own retention schedules. To have them removed sooner, email hello@neala.co.

By email: send a deletion request to hello@neala.co. We will confirm and complete it within 30 days.

9. Your rights

If you are in the EU or UK (GDPR / UK GDPR)

• Access: ask for a copy of the data we hold about you
• Rectification: correct inaccurate data
• Erasure: have your data deleted (see section 8)
• Restriction: limit how we use your data
• Portability: get your data in a machine-readable format (email us to request an export)
• Withdraw consent: at any time, without affecting processing before that
• Complain: to a data protection authority (see section 13)

If you are in California (CCPA/CPRA)

• Right to know what personal information we collect, use and share
• Right to delete your personal information
• Right to opt out of sale: we do not sell personal information
• Right to non-discrimination: using your rights won't affect your service

To use any of these rights, email hello@neala.co or delete your account in the app.

10. Security

• All data is encrypted in transit (TLS 1.2+) and at rest
• Row-level security in the database, so each account can only access its own data
• Access to production data is limited to authorised team members

No system is completely secure. If you think your data has been compromised, contact us straight away at hello@neala.co.

11. Children

Neala is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

12. Changes to this policy

We will tell you about material changes in the app before they take effect. The date at the top of this page always shows the current version. If a change needs your fresh consent, we will ask for it explicitly.

13. Contact and complaints

Meridian Studios sp. z o.o. · hello@neala.co

You can complain to a data protection authority: in Poland, the President of the Personal Data Protection Office (UODO, uodo.gov.pl); in the UK, the ICO (ico.org.uk); or the authority in your EU country.

California residents: email hello@neala.co with the subject line "California Privacy Request".