Privacy Policy

Mellott.US is a private, family-operated personal cloud. It is not an advertising business: we do not sell personal information, show ads, or put advertising, cross-app tracking or third-party analytics code in the website or the iOS and Android apps. Your data is stored on servers we operate ourselves.

What we collect depends on the features you use. Anything the website or the apps send to our servers counts as collected, even though the servers are our own.

• Account information — your name, email address and account ID from sign-in, and a mobile number if you add one for text messages.
• Content you store — files, documents, notes, photos and videos, mail, messages, calendar events, recipes, password-vault items, and voice recordings such as voice memos and dictation, which is transcribed on our own server.
• Health and fitness — only if you connect Apple Health or log workouts: weight, resting heart rate, sleep, steps and workouts.
• Financial figures — budgets, transactions and ledger entries you enter in the finance features. We do not collect card or bank-account numbers.
• Location — only with your permission: weather for where you are, photo locations, and family location sharing, which reports your location in the background while you have it turned on.
• Contacts — only the contacts you choose to import, share, or save as a weather place.
• Camera and microphone — only while you use a feature that needs them, such as uploading a photo, scanning a code or a math problem, dictation, or the remote browser, which streams your camera and microphone live to your own browser session on our servers without recording them.
• Remote browser — the history, cookies and downloads of the browser you use through Mellott.US are kept in your own browser container on our servers.
• Device information — a random ID created when you install an app, the device name, platform, operating-system and app version, device model, and the push-notification token. We never use advertising identifiers.
• AI assistant — the messages you send to the AI assistant. If you choose a cloud model, the conversation is processed by that model's provider (Anthropic or Google); local models run on our own servers.
• Feedback — what you write in a feedback report and the recent app errors attached to it.

We record every visit to the website and every request to our API, from everyone, whether or not they are signed in. A record can include the full IP address, the approximate location derived from it (country, region and city), the browser and device, screen size, the referring page and campaign tags, the pages viewed, clicks and scroll depth, timings and errors, and your account ID when you are signed in. A one-year cookie recognizes returning visitors.

Normal recording does not capture what you type. To diagnose a problem, the site owner can turn on detailed diagnostic capture for one account, device or session for a limited time; it can include the page structure, form input, console messages and network details.

Passwords, one-time codes, payment-card fields, sign-in tokens, encryption keys and other secrets are always masked on your device before anything is sent.

Visit, usage and diagnostic records share a fixed storage budget of 5 GiB. When it is full, the oldest records are deleted first.

You can see your own content and your own signed-in devices, and other people see only what you share with them. Visit, usage and diagnostic records can be read only by the site owner's super-administrator accounts.

We use first-party cookies only: a sign-in session cookie, a 30-minute analytics session cookie and the one-year visitor cookie described above. There are no advertising or third-party tracking cookies.

Traffic between the apps and our API is end-to-end encrypted (X25519 key exchange with AES-256-GCM) in addition to HTTPS/TLS. Access requires authentication, and administrative access uses multi-factor authentication. Backups are encrypted at rest.

We do not sell or rent personal information. We use a few service providers only to run the service: email delivery (SendGrid), text messages (Twilio), push notifications (Apple Push Notification service and Firebase Cloud Messaging), the cloud AI model providers named above when you choose one, and Google ML Kit in the Android app, which sends Google performance diagnostics when you scan a code or read a math problem.

If you provide a mobile number for text messages, it is used only to deliver the messages you asked for — sign-in verification codes and account or service alerts. Mobile numbers and SMS consent are never sold, rented, or shared with third parties or affiliates for marketing or promotional purposes, and they are not shared with any other party except the messaging carrier required to deliver the message to your handset.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Message frequency varies and is driven by your own activity — typically a few messages per month, plus one code each time you sign in with SMS two-factor authentication enabled. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. Full program details are on the SMS messaging page.

Mellott.US uses Twilio SendGrid exclusively to deliver transactional account emails (password resets, two-factor authentication alerts, security notifications, and billing receipts) and opt-in operational or product announcements to users who have explicitly subscribed. We never purchase, rent, or scrape email lists.

Every non-essential or campaign email includes a clear sender identity, physical contact information, a RFC 8058 List-Unsubscribe one-click header, and a visible unsubscribe link. You may opt out of non-essential emails at any time via our public Email Unsubscribe & Preferences Center. Bounce, spam-complaint, and unsubscribe events are processed in real time via SendGrid webhooks to immediately suppress further non-essential mailings.

With your explicit OS or browser permission, Mellott.US registers a device push token using W3C Web Push (VAPID), Apple Push Notification service (APNs) on iOS/iPadOS/macOS, or Google Firebase Cloud Messaging (FCM) on Android. Push tokens are linked to your user account solely to deliver real-time security alerts, approval requests, and user-configured notifications.

Push tokens are never shared with advertisers or third-party data brokers. You can revoke push notification permissions at any time in your browser settings, iOS/Android system settings, or inside Settings → Notifications, which immediately deactivates the stored device push endpoint.

The Mellott Cloud Browser Extension (Chrome, Edge, Brave, and Firefox) accesses browser APIs (storage, alarms, identity, notifications, contextMenus, activeTab, clipboardWrite, and scripting) only to provide user-initiated autofill, zero-knowledge vault decryption (Argon2id + AES-256-GCM), passkey/WebAuthn mediation, and security notifications on your own Mellott.US vault. The extension does not collect browsing history across unrelated websites, inject ads, or transmit telemetry to third parties.

The use of information received from Google APIs and browser extension APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Full permission-by-permission technical justifications are published on our Browser Extension Privacy & Permissions Policy.

Depending on your jurisdiction (including the EEA, UK, Switzerland, California, and other US states), you have the right to access, export, correct, restrict processing of, or permanently delete your personal data, and to withdraw consent at any time without affecting the lawfulness of prior processing. We do not sell or share personal information for cross-context behavioral advertising.

You can permanently delete your account and associated personal data in-app under Settings → Account → Delete Account, or without signing in by submitting a request on our public Account & Data Deletion Page. Additional compliance details are available in our Cookie & Local Storage Policy and Acceptable Use & Anti-Spam Policy.

Your content is kept until you delete it or ask us to delete your account. Visit and usage records are deleted oldest-first when the storage budget is full. To request a copy, a correction, or the deletion of your data or your whole account, email us at the address below and we will act on your request.

Mellott.US is a private family service and is not directed at children under 13, and we do not knowingly collect their personal information.

Questions or requests about this policy or your data: support@mellott.us.