Privacy Policy — Mellow

Effective date: August 21, 2026

Mellow is a sleep companion app made by MELLOW LLC ("Mellow", "we", "us"), the company behind the Mellow store at mellowsleep.com. This policy explains what data the Mellow app collects, why, where it is stored, who it is shared with, and how you can delete it.

The short version: we collect only what the app needs to work — your sign-in details, your answers about your sleep, and how you use the app. We run no advertising, no third-party analytics, and no trackers. We never sell your data.

What we collect

Account information. You can sign in with Google or Apple, or use the app as a guest without any account details. When you sign in, we store the email address and display name provided by Google or Apple. Guest use creates an anonymous account with no email or name attached.

Sleep and wellbeing information you tell us. When you set up the app, a short quiz asks about your main sleep complaint, how long you have had it, whether a doctor has diagnosed you with a sleep disorder (such as sleep apnea or insomnia), and your current stress level. During onboarding you also pick sleep goals and challenges. Each day you can record a sleep check-in (how you slept, an optional reason). We use this only to personalize your sleep plan and show you your own history. This is sensitive information and we treat it that way: it is never shared with anyone, never used for advertising, and deleted with your account.

App activity. We record first-party usage events inside our own database — for example: a session was completed, a sound mix was started and for how long, a check-in was answered, onboarding was finished, a notification was opened, the care guide was viewed, a store link was tapped, or a reward was claimed. These events help us understand which features help people sleep and improve the app. We do not use Google Analytics or any other third-party analytics or advertising SDK.

Push notification token. If you allow notifications, a Firebase Cloud Messaging token for your app installation is stored with your account so we can deliver reminders. It is removed when you sign out or delete your account. Reminder and check-in notifications themselves are scheduled locally on your device.

What we do not collect. No location. No contacts. No advertising identifier. No health data from sensors, HealthKit, or Health Connect — everything about your sleep comes from what you type into the app. No data from your microphone or camera.

How we use your data

• To create and secure your account.

• To personalize your 7-day sleep curriculum, reminders, and check-ins.

• To show you your own progress, streaks, and check-in history.

• To send the reminders and check-in notifications you configure.

• To grant the one-time store credit reward described below, if you claim it.

• To understand feature usage and improve the app (first-party analytics only).

We do not use your data for advertising, and we do not sell or rent it to anyone.

Where your data is stored

Your data is stored in Google Firebase (Cloud Firestore and Firebase Authentication), operated by Google LLC as our data processor, in the us-central1 (United States) region. Data is encrypted in transit using TLS.

Who we share data with

Google (Firebase). As our hosting and infrastructure processor, described above. Google processes this data on our instructions.

Shopify — only if you claim the store credit reward. The Mellow app offers a one-time store credit (currently USD $20) redeemable on mellowsleep.com. If you claim it, we send the email address from your Google or Apple sign-in to our Shopify store to find your existing customer record or create a new one, and the credit is attached to that customer. The customer record is created with marketing set to not subscribed — claiming the reward never signs you up for marketing email. We store the resulting Shopify customer ID with your app account. If you never claim the reward, nothing is sent to Shopify. The mellowsleep.com store itself is governed by its own store policies.

No one else. We do not share your data with advertisers, data brokers, or any other third party, except if required by law or to protect our legal rights.

How long we keep your data

We keep your data while your account exists. When you delete your account, everything listed under "Deleting your account" below is deleted immediately.

One exception, kept deliberately: if you claimed the store credit reward, we retain a SHA-256 hash of your email address in an anti-abuse record. This one-way hash cannot be reversed into your email address; it exists solely so the same email cannot claim the one-time credit twice, including by deleting an account and signing up again. It contains no name, no sleep data, and no other information, and it is retained after account deletion. The Shopify customer record created when you claimed the reward also lives in our store systems and is handled per the store's policies; you can ask us to remove it via support@mellowsleep.com.

Deleting your account

You have three ways to delete your account and data:

1. In the app: Profile → Delete account. Deletion runs immediately on our servers.

2. On the web: follow the instructions at mellowsleep.com/pages/delete-your-mellow-account-and-data — you do not need the app installed.

3. By email: write to support@mellowsleep.com from the email address on your account.

Deletion removes your account profile (email, name, sign-in), sleep quiz answers, daily check-in history, curriculum and story progress, streaks, reminder settings, app activity events, push token, and the sign-in account itself. Only the anti-abuse email hash described above survives, and only if you claimed the store credit.

Your rights

Depending on where you live (including under the EU/UK GDPR and the California Consumer Privacy Act), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to complain to your local data protection authority. We honor these requests for all users regardless of location: contact support@mellowsleep.com and we will respond within the timeframe your local law requires. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of.

Children

Mellow is intended for adults and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact support@mellowsleep.com and we will delete it.

International transfers

Our servers are in the United States. If you use Mellow from outside the US, your data is transferred to and processed in the US by us and by Google as our processor, under the safeguards our processors provide for international transfers.

Not medical advice

Mellow provides general sleep-wellness content. It is not a medical device and does not diagnose, treat, or cure any condition. See our Terms of Service for the full disclaimer.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the effective date, and for material changes we will notify you in the app.

Contact

MELLOW LLC support@mellowsleep.com