Back to Mellow

Privacy Policy

Last updated August 17, 2026

Mellow (“Mellow,” “we,” “us,” or “our”) respects your privacy.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you access or use the Mellow website, web application, digital environments, accounts, subscriptions, and related services (collectively, the “Service”).

By using Mellow, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you use Mellow.

A. Account Information

When you create or maintain a Mellow account, we may collect information such as:

  • Email address
  • Name, if provided
  • User ID
  • Authentication information
  • Account creation date
  • Login information
  • Account preferences
  • Profile information
  • Subscription status

Authentication and account-management functionality may be provided through third-party infrastructure providers such as Supabase.

B. Google Sign-In Information

If you choose to create or access your Mellow account using Sign in with Google, we may receive basic information from your Google Account as authorized by you.

Depending on Google's authentication process and the permissions presented to you, this may include:

  • Your name
  • Your email address
  • Your Google profile picture
  • A unique identifier associated with your Google account

Mellow does not receive your Google Account password through Sign in with Google.

Your use of Google authentication is also subject to Google's applicable privacy practices and terms.

C. Subscription and Billing Information

If you purchase a Mellow Premium subscription, we may collect or receive information related to your transaction, including:

  • Subscription plan
  • Subscription status
  • Billing interval
  • Purchase date
  • Renewal date
  • Cancellation status
  • Payment status
  • Stripe customer identifier
  • Stripe subscription identifier
  • Transaction identifiers
  • Limited payment information made available by our payment processor
  • Billing information where applicable

Mellow currently uses Stripe to process subscription payments.

Payment-card information entered into Stripe's payment interface is processed by Stripe.

Mellow does not need to directly store your complete credit- or debit-card number when Stripe processes the transaction.

Stripe may independently collect and process information as described in its own privacy documentation.

2. Mellow Activity and Progress Data

When you use Mellow, we may store information necessary to operate and personalize your experience.

This may include:

  • Focus Points (“FP”)
  • FP earned or spent
  • Achievements
  • Room unlocks
  • Virtual rewards
  • Companion unlocks
  • User preferences
  • Room preferences
  • Settings
  • Focus sessions
  • Timer activity
  • Streaks, if offered
  • Progress information
  • Feature usage
  • Subscription entitlements
  • Premium access status
  • Other in-app progress associated with your account

We use this information primarily to provide the features you use, preserve your progress, manage access, prevent abuse, and improve Mellow.

3. Information Collected Automatically

When you access Mellow, certain technical information may be collected automatically by us or by service providers that help operate the Service.

This may include:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Approximate geographic region derived from technical information
  • Referring page or website
  • Pages or features accessed
  • Date and time of access
  • Session information
  • Device or browser identifiers
  • Error logs
  • Performance information
  • Security-related information

We may use cookies, local storage, session storage, or similar technologies for these purposes.

Additional information is available in our Cookie Policy.

4. Analytics

Mellow may use analytics or performance-monitoring technologies to understand how users interact with the Service.

If analytics tools are implemented, information collected may include:

  • Pages visited
  • Features used
  • Approximate session duration
  • General navigation patterns
  • Device and browser information
  • Technical errors
  • Performance metrics

Where applicable law requires consent before non-essential analytics technologies are used, Mellow will seek that consent.

Mellow may change or add analytics providers as the Service develops. If those changes materially affect our privacy practices, this Privacy Policy or the Cookie Policy will be updated accordingly.

5. Information You Provide When Contacting Us

If you contact Mellow for support, billing assistance, privacy questions, feedback, or another reason, we may collect:

  • Your name
  • Email address
  • Account information
  • Message contents
  • Screenshots or files you voluntarily provide
  • Transaction information relevant to your request
  • Records of our communications with you

Please do not send sensitive personal information that is unnecessary for resolving your request.

6. How We Use Information

We may use information collected through Mellow to:

  • Create and manage user accounts.
  • Authenticate users.
  • Provide access to Mellow.
  • Save user settings and preferences.
  • Record FP and virtual progress.
  • Maintain achievements and unlocks.
  • Determine Free and Premium access.
  • Process and administer subscriptions.
  • Confirm transactions.
  • Manage subscription renewals and cancellations.
  • Respond to customer-support requests.
  • Restore account functionality where appropriate.
  • Detect and prevent fraud.
  • Detect abuse or manipulation of FP and rewards.
  • Protect accounts and systems.
  • Diagnose technical problems.
  • Improve performance and reliability.
  • Develop and improve features.
  • Understand general usage patterns.
  • Comply with legal obligations.
  • Enforce our Terms of Service and other policies.
  • Protect Mellow, our users, and others.

We may also use aggregated or de-identified information for product analysis, development, research, or business operations where that information no longer reasonably identifies an individual.

7. Legal Bases Where Applicable

In jurisdictions that require us to identify a legal basis for processing personal information, we may process information because:

  • It is necessary to provide the Service you requested.
  • It is necessary to perform a contract with you.
  • You have provided consent.
  • We have a legitimate business interest in operating, securing, or improving Mellow.
  • Processing is necessary to comply with law.
  • Processing is necessary to establish, exercise, or defend legal claims.

The particular legal basis depends on the type of information and the circumstances in which it is processed.

Where we rely on consent, you may withdraw that consent where applicable.

8. How We Share Information

We do not disclose personal information indiscriminately.

We may share information in the following circumstances.

A. Service Providers

We may provide information to companies that help us operate Mellow.

These may include providers of:

  • Cloud infrastructure
  • Databases
  • Authentication
  • Hosting
  • Payment processing
  • Email services
  • Analytics
  • Error monitoring
  • Security
  • Content delivery
  • Customer support

These providers may process information on our behalf or as otherwise described in their own applicable terms and privacy policies.

B. Supabase

Mellow may use Supabase for services including:

  • User authentication
  • User account management
  • Database infrastructure
  • Storage of application data
  • Application backend functionality

Information associated with your Mellow account may therefore be processed or stored using Supabase infrastructure.

C. Stripe

Mellow uses Stripe for payment and subscription processing.

When you purchase Premium, Stripe may process information necessary to:

  • Complete your payment
  • Manage recurring billing
  • Prevent fraud
  • Manage subscriptions
  • Process cancellations
  • Process eligible refunds
  • Comply with financial and legal obligations

Stripe's handling of information is governed by its own applicable privacy practices.

D. Google

If you use Sign in with Google, Google processes the authentication request and may provide Mellow with authorized account information.

Mellow does not control Google's independent handling of your Google Account.

E. Legal Requirements

We may disclose information if we reasonably believe disclosure is necessary to:

  • Comply with applicable law.
  • Respond to valid legal process.
  • Respond to a lawful government request.
  • Protect the rights or safety of Mellow or others.
  • Investigate fraud or security incidents.
  • Enforce our Terms of Service.
  • Establish, exercise, or defend legal claims.

F. Business Transactions

If Mellow or substantially all relevant business assets are involved in a merger, acquisition, financing, restructuring, sale, bankruptcy, or similar transaction, information may be transferred as part of that transaction.

Any successor would remain subject to applicable privacy obligations concerning transferred personal information.

9. Selling Personal Information

Mellow does not currently sell personal information for money.

Mellow also does not currently operate a business model based on selling individual user profiles or personal information to data brokers.

If our practices materially change, we will update this Privacy Policy and provide any notices or choices required by applicable law.

Certain privacy laws define “sale,” “sharing,” or targeted advertising more broadly than an ordinary exchange of information for money. If Mellow later implements advertising technologies that fall within those definitions, we will provide applicable disclosures and opt-out mechanisms where required.

10. Advertising

Mellow does not currently rely on personalized third-party advertising as a core part of the Service.

If Mellow introduces advertising, behavioral advertising, retargeting pixels, or similar technologies in the future, this Privacy Policy and the Cookie Policy will be updated as appropriate.

Where required by applicable law, users will be given applicable privacy choices before information is used for such purposes.

11. Cookies and Similar Technologies

Mellow may use cookies and similar technologies that are necessary to:

  • Keep users signed in.
  • Maintain secure sessions.
  • Remember preferences.
  • Operate authentication.
  • Provide subscription functionality.
  • Prevent fraud.
  • Protect the Service.
  • Maintain application functionality.

We may also use optional technologies for analytics or performance measurement.

More information is provided in our Cookie Policy.

Where legally required, non-essential cookies will not be activated until the required consent has been obtained.

12. Local Storage

Mellow may use browser local storage, session storage, or similar browser technologies to maintain:

  • Preferences
  • Session information
  • Interface settings
  • Temporary application state
  • Certain progress data
  • Other functionality necessary to operate the Service

Removing browser storage may cause certain local settings or unsynchronized information to be lost.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by law.

Retention periods may depend on:

  • Whether your account remains active
  • Whether you have an active subscription
  • The type of information involved
  • Fraud-prevention requirements
  • Security requirements
  • Financial-record requirements
  • Tax requirements
  • Contractual obligations
  • Legal disputes
  • Applicable statutes of limitation
  • Legal or regulatory retention obligations

For example, account progress may generally be retained while your account exists, while transaction records may need to be retained for longer periods for financial, tax, fraud-prevention, or legal reasons.

14. Account Deletion

You may request deletion of your Mellow account using any account-deletion functionality we make available or through Mellow's Contact page.

Following a valid deletion request, we may delete, de-identify, or anonymize information associated with your account, subject to information we are permitted or required to retain.

Deletion may result in permanent loss of:

  • FP
  • Achievements
  • Room unlocks
  • Companion unlocks
  • Preferences
  • Progress
  • Subscription-related account information
  • Other digital account data

Deleting your account may be irreversible.

Important Billing Notice

Deleting a Mellow account does not necessarily cancel an active Premium subscription unless the Service specifically confirms that the subscription has also been canceled.

Users should cancel active subscriptions through the available subscription-management system before deleting their account.

15. Payment Data After Account Deletion

Certain payment or transaction information may remain with Stripe or within legally required business records even after a Mellow account is deleted.

Payment processors may retain certain transaction information to comply with:

  • Financial regulations
  • Tax requirements
  • Anti-fraud obligations
  • Chargeback requirements
  • Legal obligations

A request to delete a Mellow account does not necessarily require third-party financial providers to erase records they are legally required or permitted to retain.

16. Your Privacy Rights

Depending on where you live, applicable law may provide rights relating to your personal information.

These may include the right to:

  • Know whether we process your personal information.
  • Request access to personal information.
  • Request correction of inaccurate information.
  • Request deletion of certain information.
  • Request a copy of certain information.
  • Object to or restrict certain processing.
  • Withdraw consent where processing depends on consent.
  • Opt out of certain forms of sale, sharing, or targeted advertising if applicable.
  • Appeal certain privacy decisions where applicable.

These rights are not absolute and may be subject to legal exceptions.

Mellow will not unlawfully discriminate against you for exercising applicable privacy rights.

17. Privacy Requests

Privacy requests may be submitted through Mellow's Contact page.

We may need to verify your identity before completing a request.

Verification may involve asking you to confirm information associated with your account.

We will only request information reasonably necessary to verify the request.

If we cannot reasonably verify that a request relates to you, we may be unable to fulfill it.

18. Authorized Agents

Where applicable law permits an authorized agent to submit a privacy request on your behalf, we may require:

  • Proof that you authorized the agent.
  • Verification of your identity.
  • Information necessary to validate the request.

We may deny an agent request if the required authorization cannot reasonably be verified.

19. Security

Mellow uses reasonable administrative, technical, and organizational safeguards designed to protect personal information.

Depending on the system, these protections may include:

  • Authentication controls
  • Access restrictions
  • Secure third-party infrastructure
  • Encryption in transit
  • Database security controls
  • Monitoring
  • Fraud-prevention measures
  • Limited administrative access

No internet-based service or information-storage system is completely secure.

Accordingly, we cannot guarantee that unauthorized access, loss, disclosure, modification, or misuse of information will never occur.

You are also responsible for protecting your login credentials and devices.

20. Data Breaches and Security Incidents

If Mellow becomes aware of a security incident involving personal information, we will investigate and respond as appropriate.

Where applicable law requires notification to affected individuals, regulators, or other authorities, Mellow will provide such notification in accordance with those requirements.

21. International Processing

Mellow and its service providers may process or store information in the United States or other countries where service providers operate.

As a result, information may be processed in jurisdictions with data-protection laws different from those in your location.

Where legally required, appropriate safeguards will be used for international transfers of personal information.

22. Users Outside the United States

Mellow is currently operated from the United States.

Users who access Mellow from outside the United States acknowledge that their information may be processed in the United States and by service providers operating internationally.

Additional privacy rights may apply depending on the user's jurisdiction.

Nothing in this Privacy Policy is intended to eliminate rights that cannot legally be waived.

23. Children

Mellow is intended for individuals 18 years of age or older.

We do not knowingly collect personal information from children under 13.

We also do not intend for minors under 18 to create Mellow accounts or purchase subscriptions.

If we learn that personal information from a child has been collected in circumstances where it should not have been collected, we will take reasonable steps to delete or otherwise address the information.

If you believe a child has provided personal information to Mellow, please contact us.

24. Do Not Track Signals

Some browsers offer “Do Not Track” signals or similar mechanisms.

There is not currently a universally accepted technical standard governing how all websites must respond to these signals.

Where applicable law requires Mellow to recognize specific browser-based privacy preference signals, we will do so as required.

25. Third-Party Links

Mellow may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of third-party websites or services.

When you leave Mellow or interact directly with another service, review that provider's privacy policy.

26. Third-Party Content and Integrations

Certain Mellow functionality may depend on external providers, libraries, content sources, or integrations.

Information you provide directly to a third party is governed by that third party's privacy practices.

This Privacy Policy applies to information processed by or on behalf of Mellow.

27. Changes to This Privacy Policy

Mellow may update this Privacy Policy as the Service changes or as privacy requirements evolve.

When we make changes, we will update the Last Updated date at the top of the policy.

If a change materially affects how we use personal information, we may provide additional notice through:

  • The Mellow website
  • Your account
  • Email
  • An in-product notice
  • Another reasonable method

where required by applicable law.

28. Relationship to Other Mellow Policies

This Privacy Policy should be read together with Mellow's:

The Terms of Service govern your overall use of Mellow.

This Privacy Policy specifically governs our privacy practices.

29. Contact Us

For questions regarding this Privacy Policy, your personal information, or a privacy-rights request, please use Mellow's Contact page.

When submitting a privacy request, provide enough information for us to understand and appropriately respond to the request, but do not submit sensitive information that is unnecessary to process it.

By using Mellow, you acknowledge that you have read this Privacy Policy and understand the privacy practices described above.