Privacy Policy
Last updated: July 2026
Mellowa (“we”, “us”) is a consumer wellness app that helps you create gentle daily routines for food, energy, mood and habits. This policy explains what we collect and why. Mellowa is not a medical, therapy or emergency service.
What we collect
- Account data: your email address, used for login and essential service messages.
- Wellbeing profile & check-ins: the preferences, energy/mood/stress inputs and notes you enter to generate your plans.
- Generated plans: the daily and weekly routines, meal ideas and habits created for you.
- Billing data: subscription status and identifiers from Stripe. We never see or store your full card number.
- Usage events: minimal metering (which generation you ran and when) to prevent abuse and keep the service reliable.
How we use your data
We use your data to create your personalized routines, keep your account working, process your subscription, and protect the service from misuse. We do not sell your personal data.
AI processing
To generate plans, the relevant parts of your profile and check-in are sent to our AI provider (Anthropic) as part of the request. Every request first passes a safety classification. We do not use your entries to train third-party models.
Storage & security
Your data is stored with our infrastructure providers (Supabase for the database and authentication, Vercel for hosting). Access to your rows is protected by row-level security so only you can read your own data.
Service providers
- Anthropic — AI plan generation (profile and check-in excerpts per request; not used to train third-party models).
- Stripe — subscription payments (we never see your full card number).
- Resend — transactional email (your email address and message content only; never your wellbeing entries).
- Supabase — database and authentication.
- Vercel — hosting.
These providers may process data outside your country; where they do, transfers rely on their standard contractual safeguards.
Retention
- Your profile, check-ins, plans, journal and habits: kept until you delete them or your account.
- Safety-event excerpts (short, redacted): up to 180 days, for safety-system quality only.
- Product analytics events: up to 12 months.
- Undelivered email records: up to 90 days.
Your rights
You can export a full machine-readable copy of your data, correct it, or delete your account at any time from Settings, or by contacting us. Deleting your account cancels any active subscription and removes every record linked to you — profile, check-ins, plans, meals, journal, habits, feedback and analytics links.
Contact
Questions about privacy? Email support@mellowa.app.