Back

Privacy Policy

Last updated 24 August 2026

PlusMinusOne, Inc., the operator of Melda, is the data controller responsible for your personal information. This policy explains what we collect, why, who else touches it and how you get rid of it. We do not sell your personal information or your health data, we do not use your conversations with the AI companion to train external AI models, and we do not use health data for advertising.

1. This page, and the app, are not the same thing

This page is a web funnel: it asks you some questions about your cycle and then offers you a subscription. The Melda app is where you use the product. They collect different things, and the difference is worth stating because it is not obvious from the outside.

On this page, your answers stay in your own browser as you go, and are sent to us so we can see which questions people answer and where they stop. They are deliberately NOT sent to any advertising platform: the route that carries them is separate from the one that talks to the Meta pixel, and that separation is a property of the code rather than a promise somebody has to remember.

If you buy, we pass your e-mail address and an identifier to Stripe so it can charge you and send you a receipt, and to RevenueCat so that the premium access you paid for is on the account you sign into. Nothing about your cycle goes to either of them.

2. The app does not require an account

Melda does not require account creation, registration or login. We generate a random unique identifier stored on your device using Apple's Keychain, and your data is associated with that. If you delete the app and reinstall it on the same device, that identifier may let us restore what was there.

We do not need your e-mail address or phone number to use the core features. If you buy on the web, we hold your e-mail address for that purchase — for receipts, subscription management, fraud prevention and support. It does not create an in-app account.

3. What you give us

Profile information you choose to enter: a name or nickname, date of birth, cycle length, period duration, birth control, health conditions, mental health information, preferences and goals.

Health logs you choose to enter: menstrual cycle data, symptoms, mood and emotional logs, energy levels, sexual activity, pregnancy-related data. This is sensitive health data under applicable privacy laws and we treat it as such.

Messages you send the AI companion, and voice recordings if you have enabled the microphone. Anything personal you put in a message may be processed and reflected in the reply.

4. What we collect automatically

Device type and OS version, the device identifier stored via Keychain, IP address (used for approximate location only), usage data such as feature interactions and session activity, and diagnostics including crash reports and performance metrics.

If you grant permission through Apple's App Tracking Transparency framework, we may use the advertising identifier (IDFA) for limited marketing attribution. If you decline, we do not access or use it. We do not collect precise GPS location.

5. What we use it for

To provide the service: tracking cycles, generating predictions, delivering personalised insights and phase-based guidance.

To run the AI companion: generating responses, supporting the emotional features, and maintaining safety and moderation standards. We may use de-identified and aggregated information to improve conversational quality. We do not use identifiable health conversations to train external AI models.

To keep the thing working and lawful: troubleshooting, stability, usage trends, new features, push notifications if you enabled them, support requests, legal obligations, preventing misuse and protecting user safety.

6. The AI companion, and who processes what

To generate replies we share your inputs with third-party AI providers that process data strictly on our behalf. They are contractually prohibited from using your data to train or improve their general models, are not permitted to sell it, and receive no right to use it for their own purposes.

Inputs may be retained by those processors for a limited time for safety monitoring, abuse prevention and reliability, under contractual limits. Your conversations are not used to train external AI systems.

7. Who else sees your information

Service providers acting on our behalf under contract: cloud hosting, analytics, AI processing, customer support tooling, and payment processing if you subscribe. Stripe processes the payment; we never store your full card details.

We may disclose information if required by law, court order or legal process, or where we believe it necessary to protect rights or safety. We review legal requests to check they are valid and appropriately limited. In a merger, acquisition or sale of assets, information may transfer as part of the transaction.

8. Tracking and advertising

This page carries the Meta pixel, which is how the advertising that brought you here is measured. It sees that you arrived, that you moved through the funnel, and — if you buy — that a purchase happened and what it was worth. It does not see your answers.

In the app, we and our providers may use SDKs to measure performance and attribute campaigns where consent was given. We do not track your activity across third-party apps or websites for advertising. We do not use health data for advertising. We do not sell your personal information. You can manage tracking permissions in your device settings.

9. Keeping it, and deleting it

We keep personal data only as long as needed to provide the service, fulfil the purposes described here, or comply with the law.

Deleting the app from your device does not delete your data from our servers. You can request permanent deletion at any time using "Delete My Data" in the app or by writing to support@melda.ai. On a verified request we delete your personal data from active systems within 30 days, unless the law requires us to keep it longer. We may ask for reasonable information to confirm the request matches the right device identifier — otherwise anyone could delete someone else's data.

10. Consumer health data (Washington, Nevada, California and others)

For this section, "consumer health data" means personal information reasonably capable of being associated with you that relates to your physical or mental health. In Melda that includes cycle and period data, fertility and ovulation information, pregnancy-related data, sexual activity logs, symptom tracking, mood and mental health logs, birth control information and reproductive health history.

We collect it directly from you, when you enter it. We do not buy health data from data brokers. Because the app requires no account, health data is associated only with a random device identifier — we do not need your name, e-mail or phone number to run the core service, and that architecture is itself a limit on how identifiable the data is.

We use consumer health data solely to provide and improve the service. We do not sell it. We do not use it for advertising, cross-context behavioural advertising or marketing profiling. We do not let third parties use it for their own purposes. We share it only with processors — secure hosting, AI processing — who are contractually bound to act on our behalf, or where valid legal process requires it.

Depending on where you live you may have the right to confirm we are processing it, access it, request deletion, withdraw consent, and appeal a refusal. Use "Delete My Data" in the app or write to support@melda.ai. If we deny a request you may appeal to the same address, and if the appeal fails you may have the right to contact your state Attorney General.

11. Security, transfers and children

We use encryption in transit and at rest, secure cloud infrastructure, role-based access controls and device-based secure identifiers. No system can guarantee absolute security, and we would rather say that than imply otherwise.

Your information may be processed outside your own country, including in the United States. Where required we use Standard Contractual Clauses, Data Processing Agreements and other lawful transfer mechanisms.

Melda is not intended for anyone under 13, or under the minimum age in their country if that is higher. We do not knowingly collect personal information from anyone below it, and will delete it promptly if we find we have. If you believe a child has provided information, write to support@melda.ai.

12. Not medical advice

Melda is not a medical device and does not provide medical advice. The predictions are arithmetic on the dates you give us. The companion and everything else in the service are informational and supportive only, and are not a substitute for professional medical advice, diagnosis or treatment. Ask a qualified healthcare provider about any medical concern.

13. Contact and changes

PlusMinusOne, Inc., 2451 Alvin Street, Mountain View, CA 94043, United States. E-mail support@melda.ai.

We may update this policy. If we make material changes we will say so in the app or update the date shown above. Last updated 24 August 2026.

PlusMinusOne, Inc. · 2451 Alvin Street, Mountain View, CA 94043, United States · support@melda.ai