Connefi
Get Connefi

Connefi · Legal

Privacy Policy

How we handle your information, the choices you have, and how to contact us.

Last updated

Menerai Inc.

Menerai Inc. ("Menerai," "we," "us," or "our") operates Connefi. Menerai is a corporation incorporated under the laws of Canada. This Privacy Policy explains how we collect, use, disclose and retain personal information in connection with the Connefi mobile applications, website and related support services (collectively, the "Services"). Personal information means information about an identified or identifiable individual.

This policy applies to information handled by Menerai for the Services. App stores, connected health platforms and third-party websites have their own privacy policies. Our Terms of Service separately govern your use of the Services. Where consent is required, it is obtained through the relevant permissions or feature choices; this policy does not replace those choices.

Account and profile information includes account identifiers, sign-in details available from your chosen authentication method, email address or display name, and profile information you supply. Profile inputs may include date of birth, sex, height, weight, goals, preferences, limitations and allergies. Certain inputs are needed for particular personalized or age-dependent features.

Fitness and routine records include exercises, sets, repetitions, weights, rest settings, workout completion, duration and effort; meals, portions, calories and macronutrients; hydration and supplement logs; measurements, plans, schedules and history. We also process messages, photos and supported files you submit to PERI or other AI tools, and information you provide when contacting support. Please provide only information relevant to the feature or request.

With your permission, Connefi can access supported records from Apple Health on iOS or Health Connect on Android. Available records may include activity, workouts, sleep, heart rate, resting heart rate, heart-rate variability, cardiorespiratory fitness and body measurements. Access depends on the platform, available sources and permissions you grant. Supported workout or nutrition write-back requires the relevant permission.

Eligible imported records and derived summaries may be stored with your Connefi account. Connecting a health source does not mean its records remain exclusively on your device. We use permitted inputs for requested views, histories and eligible wellness interpretations. You can revoke access through the platform’s controls. Revocation stops future access under that permission but does not automatically delete records previously saved in Connefi or records retained independently by the source platform.

Health information, cycle-related records and certain profile inputs can be sensitive personal information. Their processing depends on the features you use, the permissions you grant and any additional consent required by applicable law. Choices for manual logging, connected-health access and AI context are separate where offered.

Biological Age and designated sensitive advanced health features are restricted by our eligibility policy to adults aged 18 or older. This includes designated sensitive reproductive or cycle-health functionality and any Health Records or laboratory functionality made available through the Services. Basic fitness tracking and eligible basic connected-health views are not automatically adult-only. Availability of a feature is determined by the released application; this policy does not announce new health-record, laboratory or photo-analysis functionality.

When you use PERI or a supported AI meal tool, we process your request, selected context, responses and reviewed actions to provide the requested assistance. Context may include relevant profile information, plans, recent logs, goals, health summaries and separately consented sensitive information. Stored information is not automatically included in every request or conversation. A selected meal photo or supported attachment may also be processed.

Requests may pass through our backend to AI providers, including OpenAI or Google Gemini when used for the relevant feature. Those providers receive selected request content and process it under the applicable service arrangements and provider terms. Provider processing and retention can differ by service and configuration. Contact us with questions about the processing relevant to a feature you use. AI results may be inaccurate, incomplete or unsuitable and require your review.

Technical information may include device and browser information, usage events, page views, referrers, network information and diagnostic or service logs. The app includes Firebase Analytics for usage events, including trial and paywall events. The website uses Vercel Web Analytics for aggregate usage information.

Apple and Google process store payments. We process purchase, subscription and entitlement information to determine access, including through RevenueCat where configured. We do not receive full payment-card details from those store purchase flows. Support submissions include your name, email and message; the website contact form can also send a confirmation email. The website’s hosted support widget may process technical information and messages when loaded or used.

We use personal information to authenticate accounts; maintain records and subscription access; deliver requested tracking, personalization and AI features; respond to support and privacy requests; diagnose problems; understand usage; and protect the Services against misuse and unauthorized access. We also process information as necessary to comply with applicable legal obligations.

Where a legal basis is required, processing may rely on performance of a contract, consent, a legal obligation or a legitimate interest where appropriate. Sensitive information requires an additional lawful condition where applicable. You may withdraw consent for future consent-based processing, subject to lawful limitations. Withholding or withdrawing information needed for a feature may prevent that feature from functioning.

We disclose information to providers involved in delivering the Services. Google Firebase supports authentication, account records, stored content and backend processing. Relevant AI providers process selected request content. RevenueCat supports subscription entitlements where configured. Vercel supports website hosting and analytics. Gmail supports email delivery and support correspondence. The website also uses a Railway-hosted support widget and its associated backend. Each service may receive information needed to perform its role.

Information may also be disclosed when you direct a supported action or sharing flow, or where necessary and legally permitted to comply with a legal process, protect rights and safety, or investigate misuse. A merger, acquisition, restructuring or transfer of business assets may involve disclosure to relevant transaction parties, subject to applicable privacy requirements. These circumstances do not create an unrestricted right to use your information for unrelated purposes.

Your theme preference is saved in your browser’s local storage. Vercel describes Web Analytics as using a request-derived visitor hash rather than third-party analytics cookies. Our analytics integration removes query strings and fragments from page URLs before sending analytics events. The hosted support widget’s storage and processing are separate from that analytics integration.

Browser and device settings can limit storage or permissions, although doing so may affect functionality. External websites and services, including app stores, operate under their own terms and privacy practices. Avoid including unnecessary sensitive information in website support messages.

Connefi serves eligible users in supported countries and regions. Personal information may be processed outside your country of residence, including in countries where our providers operate. Those countries may have different privacy laws and may permit access by courts, law enforcement or other public authorities. We do not represent that all information is stored or processed in Canada.

International processing is subject to applicable legal requirements. Contact us for information about the locations and transfer safeguards relevant to your information. Availability of the Services in a country does not remove protections that mandatory local law provides.

Retention depends on the type of information, its purpose, account status, provider arrangements and applicable legal requirements. Information may be retained for account operation, support, security, transaction records and legal obligations. A single retention period does not apply to all account records, messages, analytics, logs or provider copies.

To request account deletion, use Account → Delete Account in Connefi, or the account-deletion page on this website if you cannot access the app. The process requests removal of account-associated content and closure of authentication access. Contact support if it does not complete. Certain transaction, security or legally required records may be retained where justified; backups and provider copies may follow separate deletion processes. Records independently stored in Apple Health or Health Connect are subject to those platforms’ controls. Deleting your Connefi account does not cancel an Apple or Google subscription.

You can control optional records you enter, review available account settings, manage connected-health permissions and request account deletion. You may also contact us to withdraw consent for future consent-based processing. Removing a permission does not necessarily erase information already processed.

Depending on applicable law, you may have rights to access, correct, delete or obtain a portable copy of personal information; restrict or object to certain processing; or withdraw consent. Send requests to connefiapp@gmail.com with the subject "Privacy request." We may request proportionate information to verify your identity or authority. Do not send passwords or unnecessary health information. Requests are subject to applicable response periods, lawful exceptions and any available review or appeal rights.

Canadian privacy rights may arise under federal or provincial law, including applicable access and correction rights. You may contact the Office of the Privacy Commissioner of Canada or the relevant provincial privacy commissioner. EEA and UK users may contact their applicable supervisory authority. Rights under California and other U.S. state laws depend on the law’s applicability and may include additional access, deletion, correction, opt-out or appeal rights.

Contact us to exercise rights applicable to your situation or to raise a concern about our response. Nothing in this policy limits a right to complain to a competent regulator or a protection that cannot lawfully be waived.

General Connefi accounts are intended for users aged 13 or older, subject to any higher local minimum age and applicable authorization requirements. Users aged 13–17 may use only age-appropriate general features. Designated sensitive advanced health features require age 18 or older. Store content ratings are separate from these account and feature rules.

We do not offer accounts to children under 13. If you believe an ineligible child has provided personal information, contact us so we can investigate and address the account and associated information. Where local law requires parental or guardian authorization, that requirement applies. This policy does not establish a universal parental-consent process.

Authentication and access controls support protection of the Services. No system or method of transmission can guarantee absolute security. Keep login information confidential, use available account security controls and promptly report suspected unauthorized access to support.

Where an incident triggers notification obligations, notices to affected individuals and authorities are governed by applicable law. Connefi is a consumer fitness and wellness service; this policy does not represent a security certification or guarantee of HIPAA compliance.

We may revise this Privacy Policy to reflect changes in the Services, processing practices or legal requirements. The date above identifies the latest revision. We will provide notice of material changes and obtain any additional consent where required by applicable law. A revised policy does not replace a consent requirement for a new use of personal information.

For privacy questions, rights requests or complaints, contact Menerai Inc. at connefiapp@gmail.com and identify your message as a privacy matter. You may also use the website contact form.

Menerai Inc. West Vancouver, British Columbia, Canada

Contact Menerai Inc. ↗Account deletion ↗Email support ↗