Privacy Policy

Last updated: October 9, 2026

This policy explains what personal data the Mellohm app ("Mellohm", "we") processes, why, and the choices you have. Mellohm is published by Teoman Karataş, an individual developer based in Türkiye, who is the data controller. Contact: teoman.karatas59@gmail.com.

In short: the music is generated on your phone and works offline. We keep only what your account needs: your name, email, the profile you choose to share and your in-app progress, plus anonymous usage statistics you can turn off in Settings. No ads, no tracking across apps, no selling of data.

1. Data we process

Data	Why	Where
Account: email address, user ID, sign-in method (Apple, Google or email); for email accounts a password, stored only as a secure hash by Firebase	To create your account and sign you in	Firebase Authentication (Google)
Profile: name, gender and age range you choose in onboarding (gender and age range can be "prefer not to say"), your chosen Mello world	To greet you and shape the app around you	Cloud Firestore (Google), Europe
Progress: mood check-ins, Mello's outfits, deepest dive and discoveries, total listening time, your scenario edits, sound and playback settings, the end time of your welcome offer	To keep your progress when you change phones (sync)	Cloud Firestore (Google), Europe
Purchases: your user ID, subscription status and purchase history. We never see your card details	To unlock Premium on all your devices	RevenueCat; Apple App Store or Google Play
Usage statistics: which screens and features you use (for example soundscapes played and for how long, paywall views, onboarding steps), an app instance ID, device model, operating system and app version, and an approximate region derived from your IP address. No advertising ID	To understand how Mellohm is used and make it better	Google Analytics for Firebase; you can turn it off in Settings → Privacy → Share usage data
Approximate location (only if you turn on weather adaptation): rounded coordinates	To fetch the local weather	Sent to Open-Meteo; not stored by us
Technical data: IP address and device information in our providers' server logs	Security and reliable operation	Google Firebase, RevenueCat

Data that never leaves your phone: the music itself, motion data used to match your walking pace (Move), and your local settings until you sign in. Mellohm does not use the microphone, contacts, photos or health data.

2. Legal bases

We process your data to provide the service you asked for (performance of a contract), on your consent where required (for example location for weather adaptation, which you can turn off at any time), and on our legitimate interest in keeping the service secure and in understanding how the app is used to improve it (usage statistics, which you can switch off at any time in Settings). Under Türkiye's Personal Data Protection Law No. 6698 (KVKK), processing relies on Article 5(2)(c) (necessary for the performance of a contract) and, where applicable, your explicit consent.

3. Sharing and transfers

We do not sell, rent or share your data for advertising. We use these service providers (processors) only to run Mellohm:

Google Firebase (Authentication, Cloud Firestore, Analytics) – privacy information
RevenueCat (subscriptions) – privacy policy
Apple and Google (sign-in, payments)
Open-Meteo (weather, only if enabled) – terms

Some of these providers process data outside Türkiye and the EU (for example in the United States). Transfers rely on the safeguards these providers offer, such as the EU Standard Contractual Clauses, and, for transfers from Türkiye, on the mechanisms of KVKK Article 9.

4. Tracking and advertising

Mellohm shows no ads, contains no advertising SDKs and does not track you across other apps or websites. To see which features are used, it uses Google Analytics for Firebase without the advertising ID and with ad storage and ad personalisation switched off, so the statistics are not used for advertising. You can turn usage statistics off at any time in Settings → Privacy → Share usage data.

5. How long we keep data

We keep your account, profile and progress for as long as your account exists. When you delete your account, your profile, progress and sign-in account are deleted immediately from our systems. Purchase records may be kept by Apple, Google and RevenueCat as long as they are legally required (for example for tax and accounting). Server logs are kept by our providers for a limited period. Usage statistics are kept for up to 14 months.

6. Your rights

You can access, correct, export or delete your data, object to or restrict processing and withdraw consent at any time. Under KVKK Article 11 you also have the right to learn whether your data is processed, request information, learn the purpose of processing and whether data is used for that purpose, know the third parties to whom data is transferred, request correction or deletion, object to results against you arising from automated analysis, and claim compensation for damages. In the EU/EEA you may lodge a complaint with your supervisory authority; in Türkiye with the Personal Data Protection Authority (KVKK).

Edit your profile: Settings → Account → your name.
Delete your account: Settings → Account → Delete account, or see Delete your account.
Anything else: email teoman.karatas59@gmail.com. We answer within 30 days.

7. Security

Data is encrypted in transit (HTTPS). Database rules allow each account to read and write only its own data. No system is perfectly secure, but we work to protect your data and use well-established providers.

8. Children

Mellohm is not directed to children under 13 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

9. Changes

We will update this page when our practices change and, for significant changes, tell you in the app.