Privacy Notice

Last updated: 27 July 2026

1. Who we are

HENRY EDMUND MENSAH ("MELO", "we", "us", "our") is the data controller for the personal data described in this notice. Contact: mensahedmundhenry@gmail.com.

2. What we collect

• Account data — email address, login credentials, authentication provider (Google, if used).
• Usage data — habit completions, streaks, AI Coach conversations, saved notes, notes on YouTube videos.
• Technical data — IP address, device identifiers, browser type, basic telemetry needed to run the Service and prevent abuse.
• Support messages — anything you send us by email.
• Payment metadata — subscription status, plan, and Paddle customer/subscription IDs. We do not receive or store your card details — those are held by Paddle.

3. Why we use it & legal basis

• Provide the Service (account creation, habit sync, AI coach) — contract performance.
• Security & fraud prevention — legitimate interests.
• Improve the product (aggregated usage analytics) — legitimate interests.
• Respond to support — legitimate interests / contract performance.
• Legal obligations — where we're required to keep records.

4. Who we share it with

We share personal data only with the following categories of recipients, under contract:

• Paddle — our Merchant of Record for payments, subscription management, invoicing, tax, and refunds. See Paddle's privacy notice.
• Supabase — authentication and database hosting.
• Google (Gemini AI) — processes messages you send to the AI Coach and prompts for Today's Edge suggestions, to generate responses.
• Hosting & infrastructure providers (Lovable, Cloudflare) — to serve the Service.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

5. International transfers

Our processors operate globally, which can involve transfers outside your country. Where required (e.g. UK/EEA), we rely on standard contractual clauses, adequacy decisions, or equivalent safeguards.

6. Retention

We keep your account data while your account is active and for a reasonable period after deletion to comply with legal, tax, and dispute obligations. Habit and AI Coach data is deleted when you delete your account. Payment metadata is retained by Paddle as their processor obligations require.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent (where processing is based on consent).
• Lodge a complaint with your local data protection authority.

To exercise these rights, email mensahedmundhenry@gmail.com. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures (encryption in transit and at rest, access controls, least-privilege server-side keys, RLS-scoped database access) to protect your data. No system is 100% secure.

9. Cookies

MELO uses essential cookies and browser storage (localStorage) for authentication sessions, habit state, and remembering UI preferences. We do not use third-party advertising or tracking cookies. You can clear these at any time via your browser settings.

10. Children

MELO is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). Do not use the Service if you are below that age.

11. Changes

We may update this notice and will post the new version here with a revised date. Material changes will be highlighted in-app.

12. Contact

HENRY EDMUND MENSAH — mensahedmundhenry@gmail.com