Skip to content
Mendje
Get help now Download App

Privacy Policy

How we collect, use and protect your data on Mendje, in line with GDPR.

Last updated: October 2026

Version 1.2

Mendje SHPK ("Mendje," "we," "us," or "our") operates the Mendje mobile application (the "App") and the website at https://mendje.com (the "Website"). This Privacy Policy explains how we collect, use, store, protect, and share your personal data when you use our services.

Mendje is a technology platform connecting Albanian-speaking individuals with independent psychologists. Given the sensitive nature of mental health data, we are committed to the highest standards of data protection and transparency.

By creating an account or using the App, you acknowledge that you have read and understood this Privacy Policy. Where we rely on your consent as a legal basis for processing, you may withdraw that consent at any time (see Section 11).

1. Data Controller

The data controller responsible for your personal data is:

Mendje SHPK
REXHEP KRASNIQI, 26, Prishtinë
Republic of Kosovo

Email: [email protected]
Phone: +383 49 882 294

We process personal data in accordance with the Republic of Kosovo Law No. 06/L-082 on Personal Data Protection, which is aligned with the European Union General Data Protection Regulation (EU) 2016/679 ("GDPR"). For users in the European Economic Area (EEA), GDPR applies directly. For users in the United Kingdom, UK GDPR applies, and for users in Switzerland, the Federal Act on Data Protection (nFADP).

2. Data We Collect

We collect and process the following categories of personal data:

2.1 Account Data

When you create an account, we collect:

  • Name (first name and last name)
  • Email address
  • Password (stored as a cryptographic hash; we never have access to your plaintext password)
  • Phone number (optional)
  • Profile photo (optional)
  • Date of birth (optional)
  • Role (client, psychologist, or administrator)
  • Preferred language (Albanian, English, or German)
  • Authentication provider (email/password or Google Sign-In)

2.2 Health and Mental Health Data (Special Category Data)

In the course of using the App for its intended purpose (connecting with psychologists and using the self-care tools), we process the following data, which is classified as special category data under GDPR Article 9:

  • Journal entries: personal reflections and journal text authored by you. These are encrypted on your device before being transmitted or stored (see Section 7)
  • Emotional state data: the emotion you select (e.g., happy, anxious, sad) and its intensity (1 to 5 scale), stored separately from journal text
  • Session preferences: the approach associated with a journal or emotion entry (e.g., CBT, DBT, mindfulness)
  • Mental health concerns: the concerns you identify during the onboarding questionnaire.
  • Previous experience with a psychologist: whether you have previously talked to a psychologist
  • Personal message to psychologist: a free-text message you may write for the psychologist you have chosen during onboarding

2.3 Session and Booking Data

  • Booking records: session date, time, duration, type, status, price, and currency
  • Session records: session status, start/end times, and duration of video sessions
  • Homework assignments: tasks assigned by your psychologist, your responses, and psychologist feedback
  • Session feedback: ratings and comments you provide after a session (submitted anonymously; your psychologist does not see this data)
  • Chosen psychologist: the psychologist you have chosen and the suggestions the app has given you
  • Chat messages: messages exchanged with your psychologist within the booking context (encrypted; see Section 7)

2.4 Psychologist Professional Data

If you register as a psychologist, we additionally collect:

  • Professional title, biography, and credentials
  • Specializations, languages spoken, and service types offered
  • Education history and certifications
  • Years of professional experience
  • Hourly rate and currency
  • Availability schedule (weekly time slots, blocked dates, timezone)
  • Verification status
  • Ratings and review count (aggregated from client reviews)
  • Notification preferences
  • Payout account details: account holder name, bank account number, bank name and, where provided, IBAN and SWIFT/BIC, or a PayPal email address. We collect these solely to pay you for completed sessions. You view and edit them yourself in the app; only Mendje staff who process payouts can see them. They never appear in payout statements and are deleted when you delete your account (see Section 10.2).

2.5 Client Profile Data

If you register as a client, we additionally collect:

  • Preferred psychologist gender
  • Preferred session language
  • Age range
  • Service type preference (individual, couple, family, etc.)
  • Emergency contact information (name, phone number, and relationship). We use this contact only in case of a serious risk to life. Please inform the person you list.
  • Emotion sharing preference (whether to share emotion metadata with the psychologist you have chosen)
  • GDPR consent status and timestamp
  • Notification preferences

2.6 Payment Data

  • Transaction records: payment amount, currency, status, and timestamps
  • Limited card information: the last four digits of your payment card and card brand (e.g., Visa, Mastercard), for display purposes only
  • Transaction identifiers: merchant and gateway transaction IDs for reconciliation

We do not store full card numbers, CVVs, or other sensitive payment credentials. All payment processing is handled by our PCI DSS-compliant third-party payment processor (see Section 9). We retain only the minimum transaction data necessary for financial record-keeping and dispute resolution.

2.7 Technical and Device Data

  • Device tokens: tokens for delivering push notifications, along with the platform (iOS or Android)
  • Authentication metadata: email verification status, onboarding completion status, and last login timestamp
  • App usage data: content progress (which self-help articles, videos, or exercises you have accessed and your completion percentage)

2.8 Data We Do Not Collect

For clarity, Mendje does not collect or process:

  • Location data or GPS coordinates
  • Contact lists or address books
  • Advertising identifiers or tracking cookies
  • Browsing history outside the App
  • Biometric data (fingerprint, face recognition). If you use biometric login to open the app, it happens only on your device and Mendje receives no biometric data.

3. How We Use Your Data

We process your personal data for the following purposes:

Purpose Data Used Legal Basis (GDPR)
Creating and managing your account Account data Contract performance (Art. 6(1)(b))
Suggesting suitable psychologists Onboarding questionnaire, concerns, preferences Contract performance (Art. 6(1)(b)); Explicit consent (Art. 9(2)(a)) for health data
Facilitating bookings, sessions and messages with your psychologist Booking data, session data, chat messages Contract performance (Art. 6(1)(b)); Explicit consent (Art. 9(2)(a)) for health data
Processing payments for sessions Payment data Contract performance (Art. 6(1)(b))
Paying psychologists for completed sessions Payout account details Contract performance (Art. 6(1)(b))
Providing the journaling feature Journal entries (encrypted), emotion data Explicit consent (Art. 9(2)(a)) for health data; Contract performance (Art. 6(1)(b))
Sharing emotion metadata with the psychologist you have chosen Emotional state, intensity Explicit consent (Art. 9(2)(a))
Enabling homework assignments Homework data Contract performance (Art. 6(1)(b))
Sending push notifications Device tokens, notification preferences Legitimate interest (Art. 6(1)(f))
Providing self-help content and tracking progress Content progress data Contract performance (Art. 6(1)(b))
Maintaining financial records and tax compliance Payment data (anonymized after account deletion) Legal obligation (Art. 6(1)(c))
Verifying psychologist credentials and platform quality Psychologist professional data, session feedback Legitimate interest (Art. 6(1)(f))
Preventing fraud and abuse Payment rate limit data Legitimate interest (Art. 6(1)(f))
Responding to data subject requests and legal obligations All data as relevant Legal obligation (Art. 6(1)(c))
Sending the newsletter and informational emails Name, email address Consent (Art. 6(1)(a))
Measuring Mendje's ads on Facebook and Instagram (app installs and opens) Install and app-open events, Meta app ID, device details, IP address (see Section 9.9) Legitimate interest (Art. 6(1)(f))
Improving the App with usage analytics Pseudonymous usage analytics (see Section 9.1) Legitimate interest (Art. 6(1)(f))
Sending marketing emails and push notifications, chosen by your booking activity (for example, no booking yet or no recent activity) and your preferred language, only if you have agreed to receive marketing. You can unsubscribe at any time. Name, email address, device tokens, booking activity, preferred language Consent (Art. 6(1)(a))

4. Special Category Data: Health Data

Under GDPR Article 9, data concerning a person's physical or mental health constitutes special category data and is subject to additional protections. In the context of Mendje, the following data qualifies as health data:

  • Journal entries (content relating to mental health and emotional well-being)
  • Emotional state and intensity data
  • Mental health concerns identified during onboarding
  • Session records and homework assigned by your psychologist
  • Personal messages to psychologists describing mental health needs

4.1 Legal Basis for Processing Health Data

We process health data under GDPR Article 9(2)(a), explicit consent. You provide this consent when you:

  • Tick the separate consent checkbox for health data during onboarding. This checkbox is not pre-ticked and is separate from accepting this Policy.
  • Explicitly enable emotion sharing with your psychologist via the in-app toggle

Without this consent, you cannot use the questionnaire, the journal and sessions, because they process health data.

4.2 Withdrawal of Consent

You may withdraw consent for health data processing at any time by:

  • Disabling emotion sharing with your psychologist (toggleable in your profile settings)
  • Deleting individual journal entries
  • Deleting your account entirely (see Section 10)
  • Contacting us at [email protected]

Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

4.3 Health Data Safeguards

We implement the following safeguards for health data:

  • Journal entries are encrypted on your device before storage (AES-256-GCM; see Section 7)
  • Emotion data is architecturally separated from journal text
  • Psychologists can never access your journal text. This is enforced both by database security rules and by client-side encryption
  • Psychologists may only view your emotion metadata (emotional state and intensity) when you explicitly enable sharing
  • Health data is never sold, shared with advertisers, used for marketing, or disclosed to data brokers
  • Health data is never used for automated decision-making or profiling

5. Confidentiality and Your Psychologist's Access to Your Data

Your psychologist has a professional duty of confidentiality. Mendje supports this with technical measures that limit access to your data:

5.1 What Your Psychologist Can Access

  • Your name, profile photo, and contact information (from your client profile)
  • Booking and session records for your appointments with that psychologist
  • Homework assignments created by and responses shared with that psychologist
  • Chat messages exchanged within the booking context with that psychologist
  • Your emotion metadata (emotional state and intensity), but only if you have explicitly enabled emotion sharing
  • Your onboarding personal message (the initial message you write during psychologist matching)

5.2 What Your Psychologist Cannot Access

  • Journal entries: your journal text is encrypted with a key only you control. Even if database security rules were bypassed, the data would remain unreadable without your encryption key
  • Emotion data when sharing is disabled: if you have not enabled emotion sharing, your psychologist has no access to any emotion metadata
  • Session feedback: ratings and comments you submit after sessions are anonymous and inaccessible to psychologists. Only platform administrators may view this data for quality assurance purposes
  • Data from other psychologists: a psychologist can only access data related to their own client relationships, not data from any other psychologist you may have seen

5.3 Video Sessions

Video and audio sessions are conducted using a secure, WebRTC-based platform with encrypted signaling. Video and audio streams are transmitted in real time between you and your psychologist. Video and audio sessions are not recorded. Session metadata (start time, end time, duration) is retained for service records.

6. Chat Message Confidentiality

Chat messages exchanged between you and your psychologist within a booking are encrypted using AES-256 before being stored in our database. Messages are automatically deleted when the associated booking reaches a terminal status (completed, cancelled, or no-show), meaning they are not retained indefinitely.

7. Encryption and Security Measures

We employ multiple layers of security to protect your data:

7.1 Journal Entry Encryption

  • Algorithm: AES-256-GCM (authenticated encryption)
  • Key management: Your journal entries are encrypted and decrypted on your device using a unique encryption key. The key is protected using industry-standard key derivation with high iteration counts
  • Recovery: A secure recovery phrase is generated that you are prompted to save securely. If you lose access to your primary credentials, the recovery phrase is the only way to restore access to your encrypted journal entries
  • Zero-knowledge architecture: Mendje does not have access to your plaintext journal text or your encryption keys. We store only the encrypted ciphertext. If you lose both your credentials and your recovery phrase, your journal entries cannot be decrypted by anyone, including Mendje

7.2 Chat Message Encryption

  • Algorithm: AES-256 encryption
  • Scope: Messages are encrypted at rest in the database. Access control is enforced by security rules that restrict read/write access to the two session participants only

7.3 Data in Transit

  • All communications between the App and our servers use TLS 1.2 or higher
  • All API calls to our cloud infrastructure are encrypted in transit
  • Video session signaling uses encrypted WebRTC protocols

7.4 Data at Rest

  • All data stored in our cloud database is encrypted at rest using platform-managed encryption keys (AES-256)
  • Journal entries have an additional layer of client-side encryption (AES-256-GCM) on top of server-side encryption
  • Encryption key material is itself wrapped (encrypted) and cannot be used without the user's authentication credentials or recovery phrase

7.5 Local Storage

  • Minimal data is cached locally on your device using encrypted storage for performance purposes (e.g., journal entry cache for offline access)
  • Local data is removed when you log out or delete your account

7.6 Access Controls

  • Database security rules enforce role-based access control
  • Psychologists are restricted to accessing only their own clients' permitted data
  • Administrative access is restricted to authorized personnel and is auditable
  • Payment-related operations include rate limiting to prevent abuse
  • Email verification includes attempt limits and time-based cooldowns

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.

Data Category Retention Period Notes
Account data Duration of active account Deleted upon account deletion
Client and psychologist profiles Duration of active account Deleted upon account deletion
Psychologist payout account details Duration of active account Deleted upon account deletion
Journal entries Duration of active account Encrypted; deleted upon account deletion
Emotion entries Duration of active account Deleted upon account deletion
Encryption keys Duration of active account Deleted upon account deletion
Booking and session records Indefinite (anonymized upon account deletion) User identity is removed; records retained in anonymized form
Payment records As required by financial/tax regulations (typically 5 to 10 years), anonymized upon account deletion User identity anonymized; transaction data retained for compliance
Payment audit logs As required by applicable regulations, anonymized upon account deletion User identity is anonymized
Homework assignments Duration of active account Deleted upon account deletion
Session feedback Duration of active account (client); anonymized upon deletion (psychologist reference) Client feedback fully deleted; psychologist references anonymized
Notifications Duration of active account Deleted upon account deletion
Device tokens Duration of active account Deleted upon account deletion
Chat messages Until booking is completed, cancelled, or no-show Automatically deleted when booking reaches terminal status
Email verification codes 10 minutes from creation Time-limited; also deleted upon account deletion
Processed webhook records 7 days (TTL) Automatically expired

9. Third-Party Services

We use the following third-party services to operate the App. Each operates as a data processor under our instruction, or as an independent or joint controller where noted:

9.1 Cloud Infrastructure Provider

  • Provider: Google LLC (Google Cloud Platform)
  • Services used: Authentication, database, server-side logic, file storage, and push notifications
  • Data location: Europe. All databases, server functions, and storage are deployed exclusively in the European Union
  • Data processed: All data listed in Section 2 is stored in and processed through this infrastructure
  • Privacy policy: https://policies.google.com/privacy
  • Data Processing Terms: Google Cloud Data Processing Terms

Note: We use pseudonymous product-usage analytics and crash/stability diagnostics provided by our cloud provider (Google LLC) and processed within the European Union. This data is pseudonymous and is not linked to your identity (we never set a user identifier), does not include advertising identifiers (IDFA/GAID), and is not used for advertising or cross-app tracking. The data we collect includes screen views, session and engagement signals, a resettable app-instance identifier, app version, approximate location derived from IP (which is not retained), and a non-identifying role indicator (client or psychologist). These analytics are on by default, based on our legitimate interest in understanding how the App is used so we can improve it (Art. 6(1)(f)). You can object at any time with the "Usage analytics" switch under Profile → Privacy in the App. Crash and stability diagnostics stay on, because we need them to keep the App working.

9.2 Google Sign-In

  • Provider: Google LLC
  • Purpose: Optional alternative authentication method
  • Data shared: When you choose to sign in with Google, Google provides us with your name, email address, and profile photo (as authorized by you in the Google consent screen). We do not receive your Google password
  • Privacy policy: https://policies.google.com/privacy

9.3 Video Session Provider

  • Purpose: Real-time video and audio communication for sessions
  • Data processed: Video and audio streams during active sessions, session tokens, and connection metadata. The provider processes this data in real time and does not retain session content after the session ends

9.4 Payment Processor

  • Provider: Stripe
  • Privacy policy: https://stripe.com/privacy
  • Purpose: Payment processing for session bookings
  • Data processed: Full payment card details (card number, expiration date, CVV) are submitted directly to the payment processor's gateway and are never transmitted to or stored on Mendje's servers. We receive only a transaction status, a transaction ID, and the last four digits of the card
  • Data controller status: The payment processor acts as an independent data controller for the payment card data it processes
  • Compliance: Our payment processor is PCI DSS compliant

Stripe may transfer some data to the USA. These transfers are protected by Standard Contractual Clauses approved by the European Commission.

9.5 Apple and Google (App Distribution)

  • The App is distributed through the Apple App Store and Google Play Store. These platforms may collect technical data (device type, OS version, crash reports) independently under their own privacy policies. Mendje does not control or have access to this data

9.6 Payouts to Psychologists

To pay psychologists for completed sessions, we use Paysera / Stripe. These services receive only the data needed for the payment.

9.7 Email and Newsletter Service

  • Provider: Mendje
  • Purpose: Sending account emails and the newsletter to those who have subscribed.

9.8 WhatsApp Business

  • Provider: WhatsApp Ireland Ltd.
  • Purpose: Communicating with users who contact us through WhatsApp.

9.9 Meta (Facebook, Instagram)

  • Provider: Meta Platforms Ireland Ltd.
  • Purpose: Measuring Mendje's ads on Facebook and Instagram. Mendje tells Meta when the app is installed and opened, so Meta can measure and improve Mendje's ads. Only the install and app opens are shared, nothing about how you use Mendje.
  • Data shared: the install and app opens, a random app ID created by Meta's software in the App, device details (model, operating system, language, time zone, mobile carrier, screen) and your IP address. On Android also the Google Play install referrer and the attribution ID of the Facebook app, if you have it installed. We do not share advertising identifiers (IDFA/GAID), your name, your email address, or anything about bookings, sessions, psychologists, your journal or your emotions.
  • Legal basis: Legitimate interest (Art. 6(1)(f)) in measuring our ads. You can object at any time with the "Share app installs with Meta" switch under Profile → Privacy. The switch is on by default. When you turn it off, the App stops sharing with Meta from the next time you open it.
  • iPhone: Next to this switch, the App offers Apple's request to allow tracking ("Allow tracking"). The request is not shown when you open the App. Apple asks only once; you can change your choice later in the iPhone Settings. Even if you allow it, we do not share the advertising identifier (IDFA).
  • Joint controllers: Mendje and Meta Platforms Ireland Ltd. are joint controllers (Art. 26 GDPR) for collecting this data in the App and sending it to Meta. After that, Meta processes it as an independent controller under its own privacy policy. You can exercise your rights with Mendje or with Meta.
  • Transfer to the USA: Meta may process this data in the USA. The transfer is covered by the EU-US Data Privacy Framework.
  • Privacy policy: https://www.facebook.com/privacy/policy
  • Joint controller agreement: Meta Controller Addendum

10. Account Deletion and Data Erasure

You have the right to delete your account and all associated data at any time.

10.1 How to Delete Your Account

You can delete your account directly within the App by navigating to Profile → Delete Account. You may also request deletion by contacting us at [email protected].

10.2 What Happens When You Delete Your Account

Upon confirming account deletion, the following automated process executes immediately:

Data that is permanently deleted:

  • Your user account and login credentials
  • Your client profile or psychologist profile
  • All journal entries (encrypted content and plaintext metadata)
  • All emotion entries
  • All mood entries
  • Your encryption keys (rendering any residual encrypted data permanently unrecoverable)
  • Content progress records
  • Device tokens and push notification registrations
  • All notifications
  • Session feedback you submitted as a client
  • Email verification records
  • Payment rate limit records
  • Chat messages from all your bookings
  • Psychologist listing (if applicable)
  • Favorited psychologists list
  • Homework assignments
  • Reviews subcollection (if you were a psychologist)
  • Payout account details: account holder name, bank account number, bank name, IBAN, SWIFT/BIC or PayPal email (if you were a psychologist)

Data that is anonymized (not deleted):

To preserve the integrity of records for the other party in shared interactions, the following data is anonymized rather than deleted. Your identity is removed, and all personally identifiable fields (name, photo) are cleared:

  • Booking records (your psychologist or client retains a record of the session, but your identity is removed)
  • Session records
  • Payment records (anonymized for financial regulatory compliance)
  • Payment audit logs
  • Reviews you wrote as a client (your name and photo are removed)

10.3 Irreversibility

Account deletion is permanent and irreversible. Once your account is deleted:

  • Your encrypted journal entries cannot be recovered, even with your recovery phrase, because the encryption keys have been destroyed
  • Your account cannot be restored
  • You will need to create a new account if you wish to use Mendje again

10.4 Timeline

The deletion process begins immediately upon confirmation and completes within seconds for most data. In exceptional cases (e.g., large volumes of data), full processing may take up to 30 days. You will be logged out immediately upon deletion initiation.

11. Your Rights Under GDPR and Kosovo Data Protection Law

Depending on your jurisdiction, you have the following rights regarding your personal data:

Right Description How to Exercise
Right of Access (Art. 15) You may request a copy of all personal data we hold about you Contact [email protected]
Right to Rectification (Art. 16) You may request correction of inaccurate personal data Update in App (Profile settings) or contact [email protected]
Right to Erasure (Art. 17) You may request deletion of your personal data In-app Delete Account (Profile → Delete Account) or contact [email protected]
Right to Restriction of Processing (Art. 18) You may request that we limit how we process your data Contact [email protected]
Right to Data Portability (Art. 20) You may request your data in a structured, machine-readable format Contact [email protected]
Right to Object (Art. 21) You may object to processing based on legitimate interests Contact [email protected]
Right to Withdraw Consent (Art. 7(3)) Where processing is based on consent, you may withdraw at any time Disable emotion sharing in Profile settings; delete account; or contact [email protected]
Right to Lodge a Complaint You may lodge a complaint with a supervisory authority See Section 11.1 below

11.1 Supervisory Authorities

If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with a supervisory authority:

  • Kosovo: Information and Privacy Agency (Agjencia për Informim dhe Privatësi), https://aip.rks-gov.net
  • Germany: The relevant State Data Protection Authority (Landesdatenschutzbehörde) for your federal state, or the Federal Commissioner for Data Protection and Freedom of Information (BfDI)
  • Other EU/EEA countries: The data protection authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement
  • United Kingdom: Information Commissioner's Office (ICO), https://ico.org.uk
  • Switzerland: Federal Data Protection and Information Commissioner (FDPIC), https://www.edoeb.admin.ch

11.2 Response Timeline

We will respond to all data subject requests within 30 days of receipt. If a request is particularly complex or we receive a large number of requests, we may extend this period by an additional 60 days, in which case we will inform you of the extension and the reasons for it within the initial 30-day period.

11.3 Identity Verification

To protect your privacy, we may need to verify your identity before processing a data subject request. We will request only the minimum information necessary for verification.

12. International Data Transfers

All Mendje data is stored and processed in Europe:

  • All databases are hosted in the European Union
  • All server-side functions execute in the European Union
  • All file storage is located in the European Union

As a result, your personal data does not leave Europe for primary storage or processing purposes.

Limited transfers: Certain third-party services may process data outside the EU as part of their standard operations:

  • Cloud infrastructure provider: While our data is stored in the EU, Google's global infrastructure may involve limited data processing (e.g., support, maintenance) by personnel located outside the EU. Google's Data Processing Terms include Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection
  • Video session provider: Video stream processing may occur on servers optimized for latency. The provider's infrastructure is configured to minimize data transfer outside the region
  • Meta: Meta Platforms Ireland Ltd. may transfer the install measurement data described in Section 9.9 to Meta Platforms, Inc. in the USA. This transfer is covered by the EU-US Data Privacy Framework

For users in the United Kingdom: We rely on the UK adequacy decision for EEA countries and, where applicable, the UK International Data Transfer Agreement.

For users in Switzerland: We rely on the Swiss Federal Council's adequacy decisions and, where applicable, Standard Contractual Clauses.

13. Children's Privacy

Mendje is only for people over 18. We do not knowingly collect personal data from people under 18. If we learn that a minor has created an account, we delete the account and the data immediately. If you believe a minor is using Mendje, contact us at [email protected].

14. Cookies and Tracking Technologies

The Mendje mobile application uses pseudonymous product-usage analytics (see Section 9.1). They are on by default and you can turn them off with the "Usage analytics" switch. The App uses Meta's software development kit (SDK) only to measure installs and app opens from Mendje's ads (see Section 9.9); you can turn this off with the "Share app installs with Meta" switch. The App does not use cookies, tracking pixels or advertising identifiers.

We do not:

  • Track what you do in the App for advertising purposes
  • Build behavioral profiles
  • Collect device advertising identifiers (IDFA or GAID)

The Mendje website (https://mendje.com) uses only essential cookies necessary for basic website functionality (e.g., session management). These do not track users across websites and are not used for marketing or analytics. A separate cookie notice will be provided on the Website if applicable.

14.1 Newsletter and Informational Emails

If you subscribe to the newsletter, we send you emails with news and articles from Mendje. The subscription is confirmed through a link in an email (double opt-in). You can unsubscribe at any time through the link at the bottom of every email.

15. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will:

  • Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33
  • Notify affected users without undue delay, as required by GDPR Article 34, providing a description of the breach, the likely consequences, and the measures taken or proposed to address it
  • Document the breach and our response in an internal breach register

Due to our use of client-side encryption for journal entries, a database breach alone would not expose your journal text, as the encrypted content cannot be decrypted without your personal encryption key.

16. Automated Decision-Making

Mendje uses a psychologist matching algorithm during the onboarding process to suggest suitable psychologists based on your preferences (concerns, language, psychologist gender preference, and service type). This constitutes automated processing but does not produce legal effects or similarly significant effects, as:

  • The matching is a recommendation only: you are free to choose any available psychologist
  • No binding decisions are made automatically
  • You can change the psychologist you have chosen at any time

We do not engage in automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you, as described in GDPR Article 22.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of the App. When we do:

  • We will update the "Last updated" date at the top of this policy
  • We will increment the version number
  • For material changes (changes to the types of data collected, new purposes for processing, changes in data sharing, or reduction of your rights), we will notify you via:
    • An in-app notification
    • An email to the address associated with your account
    • A prominent notice within the App upon your next login
  • For material changes to health data processing, we will seek your renewed explicit consent where required
  • Previous versions of this Privacy Policy will be made available upon request

Your continued use of the App after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you should discontinue use of the App and delete your account.

18. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of the Republic of Kosovo, including Law No. 06/L-082 on Personal Data Protection. For users in the European Union, the GDPR applies in addition to Kosovo law where it provides greater protection. Nothing in this Privacy Policy limits any rights you may have under the mandatory data protection laws of your country of residence.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Mendje SHPK
REXHEP KRASNIQI, 26, Prishtinë
Republic of Kosovo

General inquiries: [email protected]
Privacy and data protection: [email protected]
Phone: +383 49 882 294

We aim to respond to all inquiries within 30 days.

This Privacy Policy was last updated in October 2026 (Version 1.2).