Jump to section
Privacy Policy
1. The short version
Meloe is a brain-dump app. You write down what's in your head, and we help you turn it into something doable.
- Your dumps are yours. We store them so the app works. We don't sell them, we don't advertise against them, and we don't use them to train AI models.
- To sort a dump, we send its text to Anthropic, our AI provider. We leave out your name, email and account ID — but the text itself is whatever you wrote, so it may still identify you or someone else.
- We don't analyse your dumps for anything about you. No mood, no emotional state, no wellbeing assessment. See Section 6.
- Your calendar never leaves your phone. We read today's events on-device to help plan your day. They are not uploaded anywhere.
- You can delete everything yourself, from inside the app or from the web. No email, no waiting on us. Section 9 says exactly what goes and what briefly remains.
- Sections 10 and 14 are the ones most people want: how long we keep things, and how to reach a human.
2. Who we are
Meloe is operated by Slynk Studios Pty Ltd (ACN 697 374 333), a company registered in New South Wales, Australia. "We", "us" and "our" mean Slynk Studios Pty Ltd. "You" means the person using Meloe.
We are responsible for the personal information described here. Our Privacy Officer's contact details are in Section 14.
Where Meloe is available. Meloe is offered in Australia, New Zealand and the United States. It is not offered in the European Union, the United Kingdom or Canada, and we do not market it there.
3. What we collect
3.1 When you sign up
Meloe uses Clerk for sign-up and sign-in. Depending on how you sign in, we receive:
| Data | Source | Why |
|---|---|---|
| Email address | You, or Apple / Google sign-in | Identifies your account; account recovery |
| Name (optional) | You, or Apple / Google sign-in | Greeting you in the app |
| Pronouns (optional) | You | Greeting you correctly |
| Which method you signed up with | Clerk | Support and troubleshooting |
| A unique account identifier | Clerk | Links your data to your account |
| Sign-in security data — IP address, the approximate region it indicates, device and browser characteristics, and login events | Clerk, automatically | Detecting suspicious sign-ins and abuse |
If you use Sign in with Apple and choose to hide your email, we receive Apple's private relay address and never see your real one. Everything works normally.
We never receive your password. Clerk handles authentication; we don't store credentials.
3.2 What you create in the app
| Data | What it is |
|---|---|
| Dumps | The free text you write, how you entered it, and when |
| Tasks | The steps Meloe generates from a dump, plus your edits, priorities, time estimates and completion status |
| Plan preferences | The options you choose before a sort, such as how much time you have |
| Wins | Completed focus sessions — minutes focused, sprints completed, any reflection note you add |
| Momentum days | One entry per calendar day on which you completed something. We deliberately do not count consecutive days. Meloe does not do streaks. |
| Notebook preferences | Which dumps you have chosen to hide from your Notebook feed |
| Settings | Timezone, locale, quiet hours, motion and haptics preferences, default focus length |
3.3 Information generated by your use
| Data | What it is |
|---|---|
| Daily usage count | How many sorts you've used today, to enforce the free-tier limit |
| Sort records | One record per sort attempt, so a retry doesn't charge you twice and so the limit can't be bypassed |
| Subscription status | Whether you're on the free or paid tier, and an identifier from our billing provider |
| Server logs | Timings, error messages and counts. See Section 8. |
3.4 Information about other people
Your dumps may mention other people — colleagues, family, clients. If they do, we hold that information because you gave it to us, not because we collected it from them. We use it only to provide Meloe to you, and it is deleted when you delete the dump or your account.
We have no way to contact someone you've written about, and telling them would mean reading your dumps, which we don't do. Where the law requires us to notify a person whose information we've received indirectly, we rely on the exception for cases where notification is impracticable.
Please don't write down someone else's sensitive details — health, finances, anything they'd expect kept private — unless you have a good reason to.
3.5 Your calendar — read on your device, never uploaded
If you grant calendar permission, Meloe reads today's events on your device to suggest a plan around what you already have on. We ask for this permission at the moment you first use a feature that needs it, not when you install the app.
Calendar data is never transmitted to our servers, never sent to our AI provider, and never stored by us. It is read into memory on your phone and discarded. Decline the permission and Meloe works normally; you just plan without that context.
(Meloe only ever reads your calendar. We do not create, edit or delete events.)
3.6 Voice and file input
Meloe is built to support voice and file input later. At launch it is text-only. If voice ships, this policy will be updated first and we'll tell you what happens to the audio before you can use it.
3.7 What we do not collect
- Not your precise location. We don't use GPS or device location services. Your IP address indicates an approximate region, which Clerk uses to flag unusual sign-ins (Section 3.1).
- Not your contacts, photos, or files beyond what you explicitly submit.
- No advertising identifiers. We do not track you across other apps or websites.
- We do not sell personal information, and we do not share it for cross-context behavioural advertising.
4. Why we use it, and what's optional
| What | Purpose | Required? | If you don't provide it |
|---|---|---|---|
| Email + account identifier | Create and secure your account | Required | You can't use Meloe |
| Dump text | Generate tasks (Section 5) | Required to use Sort | Sort doesn't work; the rest of the app does |
| Tasks, wins, momentum | Run the core product | Created by using it | Those features don't work |
| Plan preferences | Shape the plan you get back | Optional | We use sensible defaults |
| Calendar (today's events) | Suggest a realistic plan | Optional | Meloe works; plans ignore your schedule |
| Name, pronouns | Address you correctly | Optional | We use neutral wording |
| Daily usage + sort records | Enforce the free limit; prevent double-charging and abuse | Required | Not separable — this is how the limit works |
| Sign-in security data | Detect suspicious sign-ins | Required | Not separable from sign-in |
| Subscription status | Unlock Pro | Only if you subscribe | Free tier is unaffected |
We also use information to fix faults, prevent abuse, and comply with the law.
We do not use your dumps, tasks or wins for advertising or profiling, and we do not use them to train AI models.
5. AI processing
When you sort a dump, the text of that dump is sent to Anthropic PBC, which runs the Claude model that turns it into tasks. We show you a short explanation of this before your first sort.
What we send: the text of the dump. What we leave out: your name, email, Meloe account identifier and device identifier. What comes back: a list of tasks. We do not ask for, and do not receive, any assessment of you — your mood, your state of mind, or anything else about you as a person.
Being precise about what we send, because it matters: leaving out your account fields does not make the text anonymous. Whatever you wrote is what gets sent. If your dump contains your name, your employer, an address, a health detail, or information about someone else, that goes too. Treat a dump the way you'd treat anything you type into an app.
Training. As at the date of this policy, Anthropic's published position is that it does not use inputs or outputs from its commercial products, including the Anthropic API, to train its models by default. Two exceptions exist — where a customer submits thumbs-up/down feedback on a response, and where a customer voluntarily opts in. Meloe does neither. We submit no feedback on your content and we have not opted in.
Retention at Anthropic. Anthropic's standard API service deletes inputs and outputs within 30 days. Where content is involved in a Usage Policy violation, Anthropic may retain it for up to 2 years, and related trust-and-safety classification scores for up to 7 years. We cannot shorten or accelerate those periods.
Where processing happens. Anthropic is in the United States. See Section 11.
If the AI fails. If Anthropic is unavailable or returns something unusable, Meloe returns an empty task list rather than failing. Your dump is not lost, and we don't substitute a guess.
6. What we don't do with your dumps
Meloe does not analyse your dumps for anything about you. We don't infer, derive, score, store or act on your mood, your emotional state, your energy, your stress level, or any assessment of how you're doing. No such analysis runs and there is no hidden record of one.
Which dumps stay out of your Notebook feed is your choice. You can hide a dump so it doesn't resurface. Nothing is hidden automatically on the basis of what it says.
We don't proactively read your dumps. Nobody at Meloe reviews them as a matter of course.
Meloe is a planning tool. It is not a health or wellbeing service, and we make no claim to assess, maintain or improve anyone's health.
If we ever build something that works differently, it will be off until you turn it on, we will explain exactly what it does before you do, and this policy will be updated first.
7. Subscriptions and payments
Meloe Pro is sold through the Apple App Store and Google Play, and managed through RevenueCat.
- We never see your card details. Payment is handled entirely by Apple or Google.
- RevenueCat receives an app-user identifier, purchase and renewal events, product identifiers and store transaction references, and tells us whether you have an active entitlement. We store your subscription tier and a RevenueCat identifier against your account.
- Purchase history, refunds and cancellations are handled by Apple or Google under their own privacy policies. They also collect information about you directly, as independent controllers of that information — we don't control what they collect or how they use it.
Cancelling your subscription and deleting your account are different things. Deleting your Meloe account does not cancel an active subscription — you must do that in your App Store or Google Play settings, or you will keep being charged. We show you this warning in the app before you delete.
8. Who else handles your information
| Provider | What they actually process | Role | Where |
|---|---|---|---|
| Clerk | Email, name, account identifiers; sign-in IP address, device and browser data, login events | Processor for account data | United States |
| Convex | The database — dumps, tasks, wins, settings, usage records — plus its backups, operational logs and its own subprocessors | Processor | United States |
| Vercel | Hosts the function that receives your dump. It processes the dump text in transit, plus request metadata including IP address and diagnostic data | Processor | United States |
| Anthropic | Dump text, without Meloe account fields (Section 5) | Processor | United States |
| RevenueCat | App-user identifier, purchase and renewal events, product identifiers, store transaction references | Processor | United States |
| Apple / Google | App distribution, payment, age-category signals where required by law, and information they collect directly from you | Independent controllers for what they collect themselves | United States and their own regional facilities |
No analytics, no crash reporting, no advertising SDKs, no tracking libraries — in the app or on our websites. If that changes, this policy will be updated before the change ships.
Our logs. Our application is configured not to write dump or task content to our logs, and we have an automated test that fails the build if it does. Logs hold timings, counts, and error messages truncated and stripped of user content.
Disclosure to others. We may disclose the minimum information reasonably necessary to courts, regulators, law enforcement or our professional advisers where required or permitted by law, or to establish or defend a legal claim.
If the business changes hands. If Slynk Studios is acquired, merges, restructures, raises investment involving due diligence, or becomes insolvent, personal information may be disclosed to the other party or an administrator. Anyone receiving it in that way must handle it consistently with this policy, and we'll notify you before your information becomes subject to a materially different policy.
We do not sell your personal information.
9. Deleting your data
Two options in the app, on the Me screen. They're deliberately kept apart and use different confirmation words so you can't do one meaning the other.
"Clear my Meloe history" — content only. Deletes your dumps, tasks, wins and momentum records. Your account stays. Your subscription stays. Your daily usage count is deliberately not reset — clearing your history does not give you more free sorts.
"Delete my account." Deletes your account record and settings, every dump, task, win and momentum record, your usage and sort records, and your login identity at Clerk so you can no longer sign in.
The moment you request deletion, your account is locked and no further writes are accepted. The deletion job then runs; it is not instantaneous, but it is irreversible and it does not require anyone at Meloe to act.
You can also do this without opening the app, at account.meloe.app, using the same login — so you can still delete your account after uninstalling.
Exactly what happens, system by system
We'd rather be accurate than reassuring:
| System | What happens |
|---|---|
| Convex (our database) | Your records are deleted from the live database |
| Convex backups | Encrypted backups may still contain copies until they rotate out (Section 10). Deleted data is never restored into an active account; if we ever restore a backup we re-apply the deletion |
| Clerk | Your login identity is deleted. Clerk's own security logs follow its retention schedule |
| RevenueCat | We instruct RevenueCat to delete the identifier linked to your account |
| Vercel | Request logs expire on the schedule in Section 10. They contain no dump or task content |
| Anthropic | Dump text is held under Anthropic's own retention periods (Section 5), which we cannot accelerate or override |
| Apple / Google | Purchase records are theirs, not ours. Delete or export them through your Apple or Google account |
What we keep, and why. We retain the records listed in Section 10 that we're required to hold — principally billing records for tax and corporate law, and records of privacy requests so we can show how one was handled. If a dispute, fraud investigation or legal claim is on foot, we keep what's needed for it. These records are limited, isolated, and used only for that purpose.
So: your account is gone, you can't sign in, and your content is deleted from our live systems. Limited copies exist temporarily in the places above. That's the honest version.
Deleting your account does not cancel your subscription. See Section 7.
10. How long we keep things
| What | How long |
|---|---|
| Account details and settings | While your account is active; deleted from live systems when you delete your account |
| Dumps, tasks, wins, momentum, reflections | Until you delete them, clear your history, or delete your account |
| Notebook hide preferences | With the dump they relate to |
| Daily usage and sort records | 35 days, which covers a full billing cycle and any retry or double-charge dispute |
| Subscription records needed to substantiate revenue | While your account is active, then 7 years, to meet Australian corporate record-keeping obligations |
| Meloe application logs (Vercel) | 1 day |
| Database operational logs (Convex) | Held by Convex under its own retention schedule, which we don't control. They contain no dump or task content |
| Encrypted backups | Until Convex's own backup rotation removes them, on a schedule we don't control. Deleted data is never restored into an active account (Section 9) |
| Sign-in security data (Clerk) | Held by Clerk under its own retention schedule, which we don't control |
| Privacy requests, complaints and our responses | 6 years, so we can show how a request was handled for as long as a claim about it could be brought |
| Security incident records | As long as needed to investigate and meet notification obligations |
Dormant accounts. If you don't use Meloe for 24 months, we'll email you. If you don't come back within a further 3 months, we delete the account and its content. We won't hold your information indefinitely just because you stopped opening the app.
Anthropic's periods are in Section 5 and are outside our control.
11. Where your information is held
Meloe's infrastructure is hosted in the United States. If you're in Australia or New Zealand, your information is transferred there and processed there.
Before engaging each provider we record how it handles personal information, and we contract with each of them to handle your information consistently with this policy. We keep dated copies of those terms.
All users should know that information held in the United States may be accessible to US authorities under US law.
12. Security
- Traffic between the app and our servers is encrypted in transit (TLS).
- Data is encrypted at rest by our infrastructure providers.
- Authentication is handled by Clerk; we never store passwords.
- Every request for your data is checked against your verified identity on the server. Access to another account's data is structurally prevented, not merely discouraged.
- We minimise what we store by design — Section 6 is the clearest example.
No system is perfectly secure and we can't promise absolute security.
If something goes wrong. If a breach is likely to cause serious harm, we will notify affected users and the relevant regulator — the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme, the Office of the Privacy Commissioner in New Zealand, and whichever United States federal or state authorities the circumstances require. We keep an internal record of every breach we become aware of, whether or not it's notifiable.
13. Your rights and how to use them
You can, at any time:
- See and export your information — email us and we'll provide a copy in a usable format
- Correct anything inaccurate — most of it you can edit directly in the app
- Delete your content or your whole account — do it yourself, in the app or at account.meloe.app (Section 9)
- Withdraw optional permissions such as calendar access, in your device settings
- Complain — see below
How we handle requests. Email privacy@meloe.app. We may ask for enough information to confirm the request is really from you. We respond as quickly as we can and always within the time the law allows — 20 working days for access requests from New Zealand, and 30 days elsewhere. If we need longer or have to refuse, we'll tell you why and what you can do next.
Complaints. Tell us first — our Privacy Officer will look at it personally and respond within 30 days. If you're not satisfied:
- Australia: Office of the Australian Information Commissioner — oaic.gov.au, 1300 363 992
- New Zealand: Office of the Privacy Commissioner — privacy.org.nz, 0800 803 909
- United States: the Federal Trade Commission at reportfraud.ftc.gov, or your State Attorney General
We won't treat you differently for exercising any of these.
14. Age
You must be at least 16 to use Meloe. We don't knowingly collect information from anyone younger. If you believe someone under 16 has given us information, email us and we'll delete it.
Where the law requires it, the App Store or Google Play tells us which age category you fall into and whether a parent has approved your use. We use that signal only to decide whether you can use Meloe, and we don't keep it afterwards. We don't ask you for your date of birth and we never ask for identity documents.
15. Contact us
Privacy Officer
Slynk Studios Pty Ltd (ACN 697 374 333)
1/457-459 Elizabeth Street
Surry Hills NSW 2010
Australia
Privacy enquiries and requests: privacy@meloe.app
General support: support@meloe.app
16. Changes to this policy
If we change what we collect, why, or who we send it to, we'll update the date at the top and tell you in the app before the change takes effect. We won't quietly expand what we do with your information.