Mendly privacy policy
Last updated: 12 September 2026
The short version. Mendly stores your email address and a scrambled version of your password so you can sign in. Your repair question is sent to an AI company so a guide can be written for you. We don't sell your information, and we don't show ads. You can delete your account at any time.
This policy explains what the Mendly Android app collects, why, and what you can do about it. Mendly is made by Wafflestack, Pune, India. If anything here is unclear, write to support@wafflestack.ai.
What we collect
| What | Why |
|---|---|
| Your email address | To create your account, sign you in, and reset your password. It's stored encrypted on our server. |
| Your password | Stored as a hash, which is a one-way scramble. We can't read your password, and neither can anyone who gets hold of the file. |
| The repair problem you describe | To write your guide. This text is sent to our AI model provider. |
| Your repair history and saved guides | Kept on your phone so you can reopen old guides and see what you've saved. |
| Your IP address | Recorded briefly to stop abuse and limit how many requests one device can make. |
Who else sees your information
Repair descriptions are sent to OpenRouter, which passes them to the AI model that writes your guide. They are processed on servers outside India. Please don't include names, addresses, phone numbers or anything else personal in the description; Mendly only needs to know what's broken.
Our server is hosted by a third-party web host. Nobody else receives your information. We don't sell it, we don't share it for advertising, and there are no advertising or analytics trackers in the app.
Children
Mendly isn't meant for children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, write to us and we'll delete it.
How long we keep things
Your account details stay until you delete your account. Rate-limiting records are kept for a short period and then removed. Guides saved on your phone stay there until you delete them or uninstall the app.
Deleting your account
Two ways, both permanent:
- In the app: Settings, then Delete account.
- On the web: the account deletion page.
Deleting removes your account and the email address and password linked to it from our server. Guides stored on your phone are removed when you delete them or uninstall the app. Copies may stay in routine backups for up to 30 days before they are overwritten.
Your rights
You can ask what we hold about you, ask for a correction, or ask us to delete it, under India's Digital Personal Data Protection Act, 2023. Write to support@wafflestack.ai and we'll reply within one working day and act within 30 days.
Security
Passwords are hashed with bcrypt, email addresses are encrypted with AES-256, and the app talks to our server over HTTPS. No system is perfect, so if you find a problem, please tell us instead of posting it publicly.
Changes to this policy
If we change what we collect, we'll update this page and change the date at the top. Significant changes will be announced in the app.
Contact
Wafflestack, Pune, Maharashtra, India. Email support@wafflestack.ai.