Meloo Legal

Privacy Policy

Last updated: September 21, 2026

Lcommerce Solutions DBA Meloo (“Meloo”, “we”, “us”, “our”) operates the Meloo language-learning platform. It is the controller of your personal data. This Privacy Policy explains what we collect when you visit or use meloo.io, and how we handle that information.

1. Information We Collect

Newsletter / Waitlist

When you join our waitlist, we collect:

  • Email address
  • Whether you want to receive new-song updates
  • Locale (used to send the email in the right language)
  • IP address and user-agent (for abuse prevention only — never shared)
  • Timestamp of subscription

Catalog & Player Use

Meloo’s public catalog (the song library and player) is available without an account, and we don’t track personal identifiers while you browse it. Standard server logs (IP, user-agent, requested URL, response code, timestamp) are kept short-term for security and operational diagnostics.

Your Account

You can create a free account (email and password, or Google sign-in). For an account we hold:

  • Identity — your email address, display name, a hashed password (never the password itself) and, if you use Google sign-in, your Google account identifier.
  • Settings — the language you learn in, your time zone, daily pace and theme.
  • Your learning — the packs you started, every flashcard answer and its schedule, sessions you opened and whether you finished them, words and lines you saved from songs, favourite songs, the songs you played, pack tests and badges.
  • Spoken answers — if speech practice is enabled for you, the recording is sent for transcription and discarded; we keep only the text that was recognised and whether it matched.
  • Notification data — your notification choices with the date of each change, push subscription details for the devices you enabled, and a log of the reminders we sent you (type, channel, time, whether you came back).

The legal bases (GDPR Art. 6) are: performance of the contract with you for running your account and your learning; our legitimate interest in keeping the service secure, understanding how it is used, and reminding you about learning you started yourself; and your consent for analytics cookies, push notifications, learning reminders and any news about Meloo.

Cookies We Set

Necessary — set without asking, because the site does not work without them:

  • platform_jwt — keeps you signed in (only after you log in).
  • platform_returning_user — remembers that this browser has an account, so the homepage can offer “Open app”.
  • theme, locale — your light/dark and language preference (~1 year).
  • meloo_cookies — your answer to the cookie question (6 months).

Analytics — only if you press Accept on the cookie banner. We use Mixpanel (EU data residency) to see page views and in-app actions such as starting a pack, answering a card or playing a song. Decline, and the analytics script is never loaded. You can change your mind any time through “Cookie settings” in the footer. We use no advertising cookies.

Separately from cookies, our servers record product events for signed-in accounts (for example “a session was finished”) tied to your account id, email and display name, under our legitimate interest in understanding and supporting real usage. We never send your password, payment data or IP address to analytics.

Songs play through YouTube’s privacy-enhanced embed (youtube-nocookie.com): YouTube sets no cookies until you press play.

Reminders, Emails and Push Notifications

We keep three kinds of message strictly apart:

  • About your own learning — flashcards that are due, a session you left unfinished. These concern learning you started yourself and are sent by email under our legitimate interest, at most once a day and three times a week. If you stop coming back they fade out by themselves: a few attempts, further and further apart, then none. You have the right to object at any time — every such email has a one-click “stop these emails” link that works immediately and without logging in, and the same switch is in your profile.
  • Learning reminders and suggestions — for example a song picked for your level. Only if you switched reminders on yourself (in the app, never by email).
  • News about Meloo — new features and content. Only with your explicit prior consent, given in the app; off by default, and you can withdraw it at any time with the same ease.

Push notifications need your browser’s permission on each device and, on iPhone, Meloo added to the Home Screen. Switching them off in your profile or in the browser stops them at once. All notification settings live in one place: Profile → Notifications. We never write at night (21:00–8:00 in your time zone).

2. How We Use Your Information

  • Service delivery — to operate the catalog, the player, your account and your learning (scheduling reviews, saving words, tests and badges).
  • Reminders — to tell you when learning you started is waiting, as described above.
  • Waitlist communications — to email you about Meloo’s public launch and (if you opted in) when new songs land.
  • Improvement — to understand which songs and features people use, in aggregate.
  • Abuse prevention — to block spam signups and protect the platform.

3. Third-Party Services

We share minimal data with the providers we need to run Meloo:

  • YouTube — embedded video playback. Subject to YouTube’s privacy practices.
  • OpenAI / transcription & translation providers — used internally during catalog production. End users’ data is not sent to these services.
  • Resend — email delivery (account emails, reminders, waitlist). Receives your email address and the message.
  • Mixpanel — product analytics, EU data residency.
  • Web push services (Apple, Google, Mozilla) — deliver push notifications to devices you enabled.
  • fal.ai — speech transcription for spoken answers, where enabled; the audio is not kept.
  • Google — sign-in, if you choose it.
  • Hosting — infrastructure provider (servers in the EU) storing your account and learning data.

We do not sell, rent, or trade your data.

4. Data Retention

Account and learning data are kept for as long as your account exists. Deleting your account (Profile → Danger zone) removes it together with your learning history, notification settings and push subscriptions; the record of consents you gave or withdrew is kept for up to 3 years as proof. Reminder logs are kept for 12 months.

Newsletter records are kept until you unsubscribe. After unsubscribing, we keep a hashed reference of your email for up to 12 months to honor the opt-out (so a future signup doesn’t accidentally re-subscribe you), then it’s deleted.

5. Your Rights

You can:

  • Ask what data we hold on you
  • Correct or delete it
  • Export it in a portable format
  • Object to reminders and unsubscribe from any email (every email has a one-click link; Profile → Notifications has every switch)
  • Withdraw any consent you gave — analytics cookies, push, learning reminders, news — as easily as you gave it
  • Lodge a complaint with your data protection authority (in Poland: UODO)

For any of these, email us at [email protected].

6. Children’s Privacy

Meloo is not directed at children under 13. We don’t knowingly collect personal information from children. If we find out we did, we’ll delete it promptly.

7. Changes

We’ll update this policy as Meloo evolves. Material changes will be announced on this page and, where relevant, by email to subscribers.

8. Contact

Lcommerce Solutions DBA Meloo · [email protected]