Privacy Policy

Mellow (“Mellow,” “we,” “us,” or “our”) respects your privacy.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you access or use the Mellow website, web application, digital environments, accounts, subscriptions, and related services (collectively, the “Service”).

By using Mellow, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you use Mellow.

A. Account Information and Security

We process your email address and other account information needed to create and manage your account, sign you in, and provide account recovery. This may include information such as:

• Email address
• User ID
• Account creation date
• Login and session information
• Account preferences and profile information associated with your account
• Subscription status and related entitlement information

We use authentication and account-management providers, cloud hosting, database, storage, and application-infrastructure providers, and security, bot-detection, and abuse-prevention technologies. These providers process information needed to perform those services.

B. Google Sign-In Information

If you choose to create or access your Mellow account using Sign in with Google, we may receive basic information from your Google Account as authorized by you.

Depending on Google's authentication process and the permissions presented to you, this may include:

• Your name
• Your email address
• Your Google profile picture
• A unique identifier associated with your Google account

Mellow does not receive your Google Account password through Sign in with Google.

Your use of Google authentication is also subject to Google's applicable privacy practices and terms.

C. Onboarding Preferences

When you complete Mellow onboarding, we may store information you provide about how you want to use Mellow. This may include:

• Intended use / purposes
• Atmosphere preferences
• Sound preferences
• Visual activity preferences
• Focus-duration preferences
• Recommended room
• Related room-matching or recommendation information

We use these preferences to recommend rooms and personalize your Mellow experience.

D. Subscription and Billing Information

If you purchase a paid Mellow subscription (currently, publicly purchasable paid plans are shown on the Pricing page and at checkout — presently including Plus), we may collect or receive information related to your transaction, including:

• Subscription plan
• Subscription status
• Billing interval
• Purchase date
• Renewal date
• Cancellation status
• Payment status
• Stripe customer identifier
• Stripe subscription identifier
• Transaction identifiers
• Limited payment information made available by our payment processor
• Billing information where applicable

Mellow currently uses Stripe to process subscription payments.

Payment-card information entered into Stripe's payment interface is processed by Stripe. Mellow does not need to directly store your complete credit- or debit-card number when Stripe processes the transaction.

Stripe may independently collect and process information as described in its own privacy documentation.

2. Where Information Is Stored

Some information is associated with your Mellow account on our servers. Other information may remain only on your device.

A. Server / Account-Level Information

Depending on how you use Mellow, account-level information may include:

• Account and profile information
• Authentication identifiers
• Onboarding preferences and recommendation / matching information
• Focus Points and related session/progress totals stored with your account
• Subscription status and entitlements
• Contact form submissions and optional supported attachments (where the submission is retained)
• Other account data Mellow stores to operate the Service

B. Device / Local Information

Certain information may be stored in your browser (for example, using localStorage or similar browser storage) rather than on Mellow's servers. Depending on the feature, this may include:

• Tasks and related local task state
• Sound mixer / audio preferences
• Interface preferences and session settings
• Certain progress, unlock, or acknowledgment preferences kept on the device
• Other local application state used to operate the experience in your browser

Clearing browser storage on a device may remove locally stored information on that device. Device-local information is not necessarily synchronized to Mellow's servers.

3. Mellow Activity and Progress Data

When you use Mellow, we may store information necessary to operate and personalize your experience. What is stored on our servers differs from what may remain only on your device.

Server-side aggregated progress may include, where applicable:

• Focus Points (“FP”) and related session/progress totals associated with your account
• Subscription entitlements and paid-access status
• Onboarding preferences and recommendation information

Device-local tasks, mixer preferences, interface settings, and certain unlock or acknowledgment preferences may remain in browser storage and are not broadly persisted as separate server-side achievement or task records.

We use account-level information primarily to provide the features you use, preserve applicable progress, manage access, prevent abuse, and improve Mellow.

4. Information Collected Automatically

When you access Mellow, certain technical information may be collected automatically by us or by service providers that help operate the Service.

This may include:

• IP address
• Browser type
• Device type
• Operating system
• Approximate geographic region derived from technical information
• Referring page or website
• Pages or features accessed
• Date and time of access
• Session information
• Device or browser identifiers
• Error logs
• Performance information
• Security-related information

We may use cookies, local storage, session storage, or similar technologies for these purposes. Additional information is available in our Cookie Policy.

5. Analytics

Mellow does not currently operate a dedicated analytics tracking SDK as part of the Service.

If analytics tools are introduced later, information collected may include pages visited, features used, approximate session duration, general navigation patterns, device and browser information, technical errors, and performance metrics.

Where applicable law requires consent before non-essential analytics technologies are used, Mellow will seek that consent. If those changes materially affect our privacy practices, this Privacy Policy or the Cookie Policy will be updated accordingly.

6. Information You Provide When Contacting Us

If you contact Mellow through the Contact form for support, billing assistance, privacy questions, feedback, or another reason, the form currently collects:

• Email address
• Category
• Subject
• Message
• Optional supported attachment

The Contact form does not currently collect a separate name field. If you include a name or other identifying details in your message, we may receive that information as part of the message contents.

Contact submissions may be stored in Mellow's systems and processed by email-delivery and customer-support providers so we can receive and respond to your request.

Please do not send sensitive personal information that is unnecessary for resolving your request.

7. How We Use Information

We may use information collected through Mellow to:

• Create and manage user accounts.
• Authenticate users and protect against bots or abuse.
• Provide access to Mellow.
• Recommend rooms and personalize your experience based on onboarding preferences.
• Save user settings and preferences associated with your account.
• Record Focus Points and virtual progress associated with your account.
• Determine Free and paid-plan access.
• Process and administer subscriptions.
• Confirm transactions.
• Manage subscription renewals and cancellations.
• Respond to customer-support requests.
• Restore account functionality where appropriate.
• Detect and prevent fraud.
• Detect abuse or manipulation of Focus Points and rewards.
• Protect accounts and systems.
• Diagnose technical problems.
• Improve performance and reliability.
• Develop and improve features.
• Comply with legal obligations.
• Enforce our Terms of Service and other policies.
• Protect Mellow, our users, and others.

We may also use aggregated or de-identified information for product analysis, development, research, or business operations where that information no longer reasonably identifies an individual.

8. Legal Bases Where Applicable

In jurisdictions that require us to identify a legal basis for processing personal information, we may process information because:

• It is necessary to provide the Service you requested.
• It is necessary to perform a contract with you.
• You have provided consent.
• We have a legitimate business interest in operating, securing, or improving Mellow.
• Processing is necessary to comply with law.
• Processing is necessary to establish, exercise, or defend legal claims.

The particular legal basis depends on the type of information and the circumstances in which it is processed.

Where we rely on consent, you may withdraw that consent where applicable.

9. How We Share Information

We do not disclose personal information indiscriminately.

We may share information in the following circumstances.

A. Service Providers

We may share personal information with vendors, contractors, and service providers that perform services for us or help us operate, secure, maintain, and improve Mellow. These may include providers of:

• Authentication and account management
• Cloud hosting, databases, storage, and application infrastructure
• Payment and subscription processing
• Email delivery and customer support
• Security, fraud prevention, bot detection, and abuse prevention
• Performance monitoring, error detection, and content delivery

These providers may access or process information only as reasonably necessary to perform services for Mellow or as otherwise permitted by their applicable terms and privacy practices.

B. Payment Processing (Stripe)

Mellow uses Stripe for checkout, recurring billing, subscription management, refunds, and payment processing.

When you purchase a paid subscription, Stripe may process information necessary to:

• Complete your payment
• Manage recurring billing
• Prevent fraud
• Manage subscriptions
• Process cancellations
• Process eligible refunds
• Comply with financial and legal obligations

Payment-card information entered into Stripe's payment interface is processed by Stripe. Mellow does not need to directly store your complete credit- or debit-card number when Stripe processes the transaction.

Stripe's handling of information is governed by its own applicable privacy practices.

C. Google

If you use Sign in with Google, Google processes the authentication request and may provide Mellow with authorized account information.

Mellow does not control Google's independent handling of your Google Account.

Mellow loads certain fonts through Next.js font tooling that self-hosts font files with the application. Routine browsing of Mellow does not send separate font requests to Google Fonts solely because those fonts are displayed.

D. Legal Requirements

We may disclose information if we reasonably believe disclosure is necessary to:

• Comply with applicable law.
• Respond to valid legal process.
• Respond to a lawful government request.
• Protect the rights or safety of Mellow or others.
• Investigate fraud or security incidents.
• Enforce our Terms of Service.
• Establish, exercise, or defend legal claims.

E. Business Transactions

If Mellow or substantially all relevant business assets are involved in a merger, acquisition, financing, restructuring, sale, bankruptcy, or similar transaction, information may be transferred as part of that transaction.

Any successor would remain subject to applicable privacy obligations concerning transferred personal information.

10. Selling Personal Information

Mellow does not currently sell personal information for money.

Mellow also does not currently operate a business model based on selling individual user profiles or personal information to data brokers.

If our practices materially change, we will update this Privacy Policy and provide any notices or choices required by applicable law.

Certain privacy laws define “sale,” “sharing,” or targeted advertising more broadly than an ordinary exchange of information for money. If Mellow later implements advertising technologies that fall within those definitions, we will provide applicable disclosures and opt-out mechanisms where required.

11. Advertising

Mellow does not currently rely on personalized third-party advertising as a core part of the Service and does not currently use advertising cookies or advertising trackers.

If Mellow introduces advertising, behavioral advertising, retargeting pixels, or similar technologies in the future, this Privacy Policy and the Cookie Policy will be updated as appropriate.

Where required by applicable law, users will be given applicable privacy choices before information is used for such purposes.

12. Cookies and Similar Technologies

Mellow may use cookies and similar technologies that are necessary to:

• Keep users signed in.
• Maintain secure sessions.
• Remember preferences.
• Operate authentication.
• Provide subscription functionality.
• Prevent fraud and bots using security, bot-detection, and abuse-prevention technologies.
• Protect the Service.
• Maintain application functionality.

More information is provided in our Cookie Policy.

Mellow does not currently display a cookie-consent banner because it does not currently operate optional analytics or advertising tracking cookies. If optional non-essential technologies are added later and consent is legally required, Mellow will seek that consent.

13. Local Storage

Mellow may use browser local storage, session storage, or similar browser technologies to maintain:

• Preferences
• Session information
• Interface settings
• Temporary application state
• Tasks and other local product state
• Other functionality necessary to operate the Service in your browser

Removing browser storage may cause certain local settings or locally stored information to be lost on that device.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by law.

Retention periods may depend on:

• Whether your account remains active
• Whether you have an active or recent subscription
• The type of information involved
• Fraud-prevention requirements
• Security requirements
• Financial-record requirements
• Tax requirements
• Contractual obligations
• Legal disputes
• Applicable statutes of limitation
• Legal or regulatory retention obligations

For example, account progress may generally be retained while your account exists, while transaction records may need to be retained for longer periods for financial, tax, fraud-prevention, or legal reasons.

15. Account Deletion

You may delete your Mellow account using the account-deletion functionality available in Account settings, or contact us through Mellow's Contact page if you need help.

Deleting a Mellow account is not the same thing as canceling a subscription.

If you have an active or trialing paid subscription, you may need to cancel that subscription first (for example, through Manage Subscription / the Stripe Customer Portal) before account deletion can complete.

Following a valid deletion, we may delete, de-identify, or anonymize information associated with your account, subject to information we are permitted or required to retain.

Deletion may result in permanent loss of:

• Focus Points and related account progress
• Onboarding preferences and related account data
• Subscription-related account information stored by Mellow
• Other digital account data associated with your Mellow account

Deleting your account may be irreversible.

Account deletion does not necessarily erase information stored only in local browser storage on every device you have used. You may need to clear local storage on those devices separately. Mellow cannot guarantee remote erasure of local browser storage on every device after account deletion.

16. Payment Data After Account Deletion

Certain payment or transaction information may remain with Stripe or within legally required business records even after a Mellow account is deleted.

Payment processors may retain certain transaction information to comply with:

• Financial regulations
• Tax requirements
• Anti-fraud obligations
• Chargeback requirements
• Legal obligations

Deleting your Mellow account does not promise that Stripe records will be erased, and does not necessarily require third-party financial providers to erase records they are legally required or permitted to retain.

17. Your Privacy Rights

Depending on where you live, applicable law may provide rights relating to your personal information.

These may include the right to:

• Know whether we process your personal information.
• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion of certain information.
• Request a copy of certain information.
• Object to or restrict certain processing.
• Withdraw consent where processing depends on consent.
• Opt out of certain forms of sale, sharing, or targeted advertising if applicable.
• Appeal certain privacy decisions where applicable.

These rights are not absolute and may be subject to legal exceptions.

Mellow will not unlawfully discriminate against you for exercising applicable privacy rights.

18. Privacy Requests

Privacy requests may be submitted through Mellow's Contact page.

We may need to verify your identity before completing a request.

Verification may involve asking you to confirm information associated with your account.

We will only request information reasonably necessary to verify the request.

If we cannot reasonably verify that a request relates to you, we may be unable to fulfill it.

19. Authorized Agents

Where applicable law permits an authorized agent to submit a privacy request on your behalf, we may require:

• Proof that you authorized the agent.
• Verification of your identity.
• Information necessary to validate the request.

We may deny an agent request if the required authorization cannot reasonably be verified.

20. Security

Mellow uses reasonable administrative, technical, and organizational safeguards designed to protect personal information.

Depending on the system, these protections may include:

• Authentication controls
• Access restrictions
• Secure third-party infrastructure
• Encryption in transit
• Database security controls
• Security, bot-detection, and abuse-prevention technologies
• Fraud-prevention measures
• Limited administrative access

No internet-based service or information-storage system is completely secure.

Accordingly, we cannot guarantee that unauthorized access, loss, disclosure, modification, or misuse of information will never occur.

You are also responsible for protecting your login credentials and devices.

21. Data Breaches and Security Incidents

If Mellow becomes aware of a security incident involving personal information, we will investigate and respond as appropriate.

Where applicable law requires notification to affected individuals, regulators, or other authorities, Mellow will provide such notification in accordance with those requirements.

22. International Processing

Mellow and its service providers may process or store information in the United States or other countries where service providers operate.

As a result, information may be processed in jurisdictions with data-protection laws different from those in your location.

Where legally required, appropriate safeguards will be used for international transfers of personal information.

23. Users Outside the United States

Mellow is currently operated from the United States.

Users who access Mellow from outside the United States acknowledge that their information may be processed in the United States and by service providers operating internationally.

Additional privacy rights may apply depending on the user's jurisdiction.

Nothing in this Privacy Policy is intended to eliminate rights that cannot legally be waived.

24. Children

Mellow is intended for individuals 18 years of age or older.

We do not knowingly collect personal information from children under 13.

We also do not intend for minors under 18 to create Mellow accounts or purchase subscriptions.

If we learn that personal information from a child has been collected in circumstances where it should not have been collected, we will take reasonable steps to delete or otherwise address the information.

If you believe a child has provided personal information to Mellow, please contact us.

25. Do Not Track Signals

Some browsers offer “Do Not Track” signals or similar mechanisms.

There is not currently a universally accepted technical standard governing how all websites must respond to these signals.

Where applicable law requires Mellow to recognize specific browser-based privacy preference signals, we will do so as required.

26. Third-Party Links

Mellow may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of third-party websites or services.

When you leave Mellow or interact directly with another service, review that provider's privacy policy.

27. Third-Party Content and Integrations

Certain Mellow functionality may depend on external providers, libraries, content sources, or integrations.

Information you provide directly to a third party is governed by that third party's privacy practices.

This Privacy Policy applies to information processed by or on behalf of Mellow.

28. Changes to This Privacy Policy

Mellow may update this Privacy Policy as the Service changes or as privacy requirements evolve.

When we make changes, we will update the Last Updated date at the top of the policy.

If a change materially affects how we use personal information, we may provide additional notice through:

• The Mellow website
• Your account
• Email
• An in-product notice
• Another reasonable method

where required by applicable law.

29. Relationship to Other Mellow Policies

This Privacy Policy should be read together with Mellow's:

• Terms of Service
• Billing & Refund Policy
• Cookie Policy
• Acceptable Use Policy

The Terms of Service govern your overall use of Mellow.

This Privacy Policy specifically governs our privacy practices.

30. Contact Us

For questions regarding this Privacy Policy, your personal information, or a privacy-rights request, please use Mellow's Contact page or email hello@mymellowrooms.com.

When submitting a privacy request, provide enough information for us to understand and appropriately respond to the request, but do not submit sensitive information that is unnecessary to process it.

By using Mellow, you acknowledge that you have read this Privacy Policy and understand the privacy practices described above.