Privacy Policy

Last Updated: February 25, 2026

PlusMinusOne, the operator of Melda (“Melda,” “we,” “us,” or “our”), is the data controller responsible for your personal information.

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the Melda mobile application and related services (the “Services”).

We do not sell your personal information or health data. We do not use your AI conversations to train external AI models. We do not use health data for advertising purposes.

By using the Services, you agree to the practices described in this Privacy Policy.

1. No Account Required

Melda does not require account creation, registration, or login.

Instead, we generate a random unique identifier that is securely stored on your device using Apple’s Keychain technology. This identifier allows us to associate your data with your device and restore it if you delete and reinstall the app on the same device.

We do not require your email address or phone number to access the core functionality of the Services.

2. Information We Collect

Information You Provide

You may choose to provide profile information such as your name or nickname, date of birth, cycle length, period duration, birth control information, health conditions, mental health information, preferences, and goals.

You may also log reproductive and health-related information, including menstrual cycle data, symptoms, mood and emotional logs, energy levels, sexual activity (if logged), pregnancy-related data, and other health information you choose to enter. This information is considered sensitive health data under applicable privacy laws.

When you interact with Melda’s AI companion, we process the text messages you send and voice recordings if microphone access is enabled. Any personal information you include in your messages may be processed and reflected in AI-generated responses.

If you purchase Paid Services through our website, you may provide your email address and payment-related information. We use your email address and purchase-related information (such as subscription status and transaction identifiers) to process payments, provide receipts, manage subscriptions, prevent fraud, and provide customer support. Payments are processed by Stripe as our payment processor. We do not store your full payment card details.

Information Collected Automatically

When you use the Services, we automatically collect certain technical and usage information, including your device type, operating system version, device-based unique identifier stored via Keychain, IP address (used to determine approximate location), usage data such as feature interactions and session activity, and diagnostics information including crash reports and performance metrics.

If you grant permission through Apple’s App Tracking Transparency framework, we may access Apple’s Identifier for Advertisers (IDFA) solely for limited marketing attribution purposes. If you decline permission, we do not access or use the advertising identifier.

We do not collect precise GPS location data.

3. How We Use Your Information

We use your information to provide and improve the Services, including tracking menstrual cycles, generating predictions, delivering personalized insights, providing phase-based guidance, and enabling related features.

We use AI interactions to generate personalized responses, provide emotional support features, and maintain safety and moderation standards. We may use de-identified and aggregated information to improve conversational quality and product performance. We do not use identifiable health conversations to train external AI models.

We also use information to troubleshoot technical issues, improve app stability, analyze usage trends, develop new features, send push notifications (if enabled), respond to support requests, comply with legal obligations, prevent misuse, and protect user safety.

4. AI Companion and Data Processing

Melda includes an AI-powered companion designed to provide personalized insights and emotional support. When you interact with the AI companion, your messages and voice recordings (if enabled) are processed to generate responses.

To deliver these responses, we share inputs with trusted third-party AI service providers that process data strictly on our behalf. These providers act solely as our data processors and process information only to deliver responses within the Services. They are contractually prohibited from using your data to train or improve their general AI models, are not permitted to sell your data, and do not receive the right to use your information for their own independent purposes.

Your conversations with the AI companion are not used to train external AI systems.

AI inputs may be temporarily retained by our processors for safety monitoring, abuse prevention, and system reliability purposes, subject to strict contractual limitations.

5. Tracking Technologies and Advertising

We and our service providers may use software development kits (SDKs) and similar technologies to measure app performance, analyze usage trends, improve functionality, and attribute marketing campaigns where consent has been provided.

On iOS devices, we request permission before accessing the advertising identifier (IDFA) through Apple’s App Tracking Transparency framework. If you decline, we do not access or use the advertising identifier.

We do not track your activity across third-party apps or websites for advertising purposes. We do not use health data for advertising. We do not sell your personal information.

You may manage tracking permissions through your device settings.

6. How We Share Information

We may share information with service providers such as cloud hosting providers, analytics providers, AI service providers, customer support tools, and payment processors if you subscribe to paid features. These providers process information strictly on our behalf under contractual safeguards.

We may disclose information if required by law, court order, or legal process, or if we believe disclosure is necessary to protect our rights, safety, or the safety of others. We carefully review legal requests to ensure they are valid and appropriately limited.

In the event of a merger, acquisition, restructuring, or sale of assets, information may be transferred as part of that transaction.

The Services may contain links to third-party services that we do not control. Their privacy practices are governed by their own policies.

7. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process personal data based on your consent for health data and AI interactions, contractual necessity to provide the Services, legitimate interests in improving safety and performance, and compliance with legal obligations.

You may withdraw consent at any time by deleting your data or contacting us.

8. Data Retention and Deletion

We retain personal data only as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, or comply with legal obligations.

Because Melda does not use traditional accounts, your data is associated with a device-based unique identifier generated and stored securely on your device. If you delete the app and reinstall it on the same device, your identifier may allow restoration of previously stored data.

Deleting the application from your device does not automatically delete your data from our cloud servers.

You may request permanent deletion of your data at any time by using the “Delete My Data” feature within the app or by contacting us at the email address listed below. Upon receiving a verified deletion request, we will permanently delete your personal data from our active systems within 30 days, unless a longer retention period is required by law.

When processing deletion requests, we may request reasonable information to verify that the request is associated with the correct device identifier and to prevent unauthorized deletion of another user’s data.

9. Your Privacy Rights

To exercise your rights, including submitting a deletion request, you may use the “Delete My Data” feature within the app or contact us at support@melda.ai.

To protect your privacy and security, we may request reasonable verification information before fulfilling your request. We will respond to verified requests within the timeframes required by applicable law.

10. Additional U.S. Consumer Health Data Disclosures

This section provides additional disclosures for users located in certain U.S. states, including Washington, Nevada, and California, where laws provide specific rights related to consumer health data.

For purposes of this section, “consumer health data” means personal information that identifies or is reasonably capable of being associated with you and relates to your physical or mental health status. In Melda, this may include menstrual cycle and period data, fertility and ovulation information, pregnancy-related data, sexual activity logs, symptom tracking, mood and mental health logs, birth control information, reproductive health history, and other health-related information you choose to enter into the app.

We collect consumer health data directly from you when you choose to enter it into the app and when you interact with the Services. We do not purchase health data from data brokers or third parties.

Melda does not require account creation. Health data is associated only with a randomly generated device identifier stored securely using Apple’s Keychain technology. We do not require your name, email address, or phone number to use the core Services. This architecture reduces the ability to directly identify you from your health data.

We use consumer health data solely to provide and improve the Services. This includes tracking cycles, generating predictions, delivering personalized insights and phase-based guidance, operating the AI companion, maintaining safety and moderation, improving app functionality and reliability, and complying with legal obligations. We do not sell consumer health data. We do not use consumer health data for advertising, cross-context behavioral advertising, or marketing profiling. We do not allow third parties to use your health data for their own independent purposes.

We may share consumer health data only with service providers and processors who assist us in operating the Services, such as secure cloud hosting providers and AI processing providers. These entities are contractually required to process information solely on our behalf and are not permitted to use it for their own purposes. We may also disclose consumer health data if required by valid legal process or applicable law.

Depending on your state of residence, you may have the right to confirm whether we are processing your consumer health data, access your consumer health data, request deletion of your consumer health data, withdraw consent for the processing of health data, and appeal a denial of your request. You may exercise these rights by using the “Delete My Data” feature within the app or by contacting us at support@melda.ai. We may request reasonable information to verify your identity before fulfilling your request.

If we deny your request, you may appeal our decision by contacting us at support@melda.ai. If your appeal is unsuccessful, you may have the right to contact your state Attorney General.

11. Data Security

We use industry-standard safeguards, including encryption in transit and at rest, secure cloud infrastructure, role-based access controls, and device-based secure identifiers stored via Keychain. However, no system can guarantee absolute security.

12. No Medical Advice

Melda is not a medical device and does not provide medical advice. The AI companion and all content within the Services are for informational and supportive purposes only and are not a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of a qualified healthcare provider with any questions regarding a medical condition.

13. Children’s Privacy

Minimum Age Requirement: 13 years old (or the minimum age required in your country of residence, if higher).

Melda is not intended for individuals under 13 years old, or the minimum age required in their country of residence, whichever is higher.

We do not knowingly collect personal information from individuals who do not meet the applicable Minimum Age requirement. If we become aware that we have collected personal information from an individual who does not meet the Minimum Age requirement, we will take reasonable steps to delete such data promptly.

If you believe that a child has provided personal information in violation of this section, please contact us at support@melda.ai.

14. International Transfers

Your information may be processed in countries outside your own, including the United States. Where required, we implement appropriate safeguards such as Standard Contractual Clauses, Data Processing Agreements, and other lawful transfer mechanisms.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If we make material changes, we will notify you within the app or update the “Last Updated” date at the top of this policy.

16. Contact Us

If you have questions or concerns about this Privacy Policy, please contact:

PlusMinusOne

2451 Alvin Street

Mountain View, CA 94043

United States

Email: support@melda.ai