Privacy policy
Last updated 29 September 2026
In short: we collect only what we need to run Mellodeo and bill you. We never see your full card number. We don't sell your data.
Who we are
Mellodeo is run by Paarth Madan, an individual based in India. We're responsible for the personal data described here. Contact hello@mellodeo.com with any privacy question.
What we collect
- Your email address, and your name and profile picture if you sign in with Google, so we can run your account, send sign-in codes and receipts.
- Purchase details from Dodo Payments: which plan you bought, when, the amount, and your country. Dodo handles your card details. We never see or store your full card number.
- What you ask for: the songs you request and the lessons generated for them.
- How you practise: which lesson steps you open and finish. When we add microphone practice, recordings will only be made after you choose to start one.
- Technical data: basic logs such as IP address, browser type and errors, which we use to keep the service running and secure.
Why we use it
- To provide lessons and your Pro subscription (to perform our contract with you).
- To process payments, refunds and tax records (legal obligation).
- To fix problems and improve lessons (our legitimate interest in making Mellodeo work well).
- To email you about your account. We'll only send marketing emails if you opt in, and every one has an unsubscribe link.
Who we share it with
- Dodo Payments, our merchant of record, to take payment and handle tax.
- AI providers (currently OpenAI), which receive the song title and artist you request so they can generate the lesson. We don't send them your email or payment details.
- Supabase, which runs our sign-in and stores your account and lessons (in the United States).
- Resend, which delivers our sign-in emails.
- Cloudflare, which hosts the site and app and delivers them to you.
- Sentry, which receives error reports when something breaks (the error, the page and the app version; not your name, email or payment details) so we can fix it.
- Authorities, if the law requires it.
We don't sell your personal data. Some of these providers process data outside India, including in the United States, under their own safeguards.
Cookies
When you sign in, your browser stores a sign-in session (in local storage) so you stay logged in. That is essential for the app to work. We don't use advertising or tracking cookies.
How long we keep it
We keep your account data while your account is active, and delete it within 90 days of you asking us to close it. We keep payment records for as long as tax law requires, usually up to 8 years.
Your rights
You can ask to see, correct, export or delete your personal data, or withdraw consent you've given. This includes your rights under India's Digital Personal Data Protection Act, 2023, and under the GDPR if you're in the EU or UK. Email hello@mellodeo.com and we'll reply within 30 days. You can also complain to your local data protection authority.
Children
Mellodeo isn't meant for children under 13, and we don't knowingly collect their data.
Changes
If we change this policy in a way that matters, we'll tell you by email or in the app before the change applies.