Privacy
Policy

Overview

Melio offers facial analysis, body assessment, nutrition tracking, and personalised wellness planning. You can use core scan features without creating an account. Creating an optional account (via Sign in with Apple or Google) unlocks cloud sync, scan history across devices, and additional features.

Regardless of whether you have an account, your scan images are transmitted to our servers and processed by third-party AI services in order to generate results. By using Melio you consent to this processing as described below.

Data Controller

Venatra Inc., a Delaware corporation, is the data controller for all personal data processed through the Melio app. For privacy enquiries, contact us at trymelioapp@gmail.com.

Data We Collect

Without an account (guest users):

• Facial photographs (front, left, right) captured during a scan — transmitted to our servers for AI analysis
• An anonymous installation identifier used for subscription status (via RevenueCat)
• Aggregated, anonymised app usage and crash diagnostics

With an account (authenticated users):

• Name and email address provided by your Apple or Google account at sign-in
• All guest-level data above, now linked to your account
• Facial scan images and analysis results, stored on our servers and synced across devices
• Body scan images (front and side photographs) and physical measurements you provide (height, weight, sex, goal)
• Nutrition scan images of food or meals you photograph
• Plan progress photos (nature, weekly face, and body check-in photos) you choose to upload
• Journal entries, habit logs, weight records, and to-do items you create within the app
• Push notification token (if you grant permission), used to send reminders

AI Processing of Images & Biometric Data

Melio's analysis features are powered by third-party artificial intelligence services. When you perform a scan, your images are transmitted over an encrypted connection to our servers and then forwarded to these AI providers for processing:

Your images may be processed on servers located in the United States. These providers are bound by their own privacy policies and data processing agreements. By using Melio's scan features you explicitly consent to your images being processed by these third-party AI services.

We do not use your images to train AI models, and we do not sell your images or biometric data to any third party.

How We Use Your Data

• To perform facial, body, and nutrition analysis and return results to you
• To generate and store your personalised wellness protocol and plan
• To sync your scan history and progress data across your devices (authenticated users)
• To send push notifications for reminders and plan updates (only with your permission)
• To manage your subscription and verify Pro status via RevenueCat
• To diagnose crashes and improve app stability
• To comply with legal obligations

Third-Party Services

We use the following third-party providers. Each processes data only as necessary to perform their function:

• AWS (Amazon Web Services) — secure cloud storage for scan images and app data (servers located in the United States)
• Supabase — authentication and user account management (Sign in with Apple / Google)
• Firebase (Google) — push notification delivery

None of these providers are permitted to use your personal data for their own marketing or purposes beyond the service they provide to us.

Camera & Microphone Access

Melio requires camera access to capture scan images. Images are transmitted to our servers and processed by AI as described above. We do not access your camera in the background or record video. We do not access your microphone.

Data Storage & Security

Scan images and account data are stored on AWS servers in the United States using industry-standard encryption at rest and in transit. Scan results are also cached locally on your device for fast access. We implement technical and organisational security measures appropriate to the sensitivity of biometric and health-related data.

Data Retention

• Guest scan data is retained for a limited period and then deleted from our servers
• Authenticated user data is retained until you delete your account
• When you delete your account through the app, all associated data — including scan images stored on AWS, scan results, body data, nutrition data, plan data, and your user record — is permanently deleted from our systems
• Local device data (cached scans, images) is removed when you uninstall the app

International Data Transfers

Venatra Inc. is based in the United States. If you use Melio from the European Economic Area (EEA), United Kingdom, or Switzerland, your personal data — including scan images — will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal basis for these transfers where required.

Your Rights — EU / EEA Users (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following rights under the GDPR:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data; you may also delete your account directly in the app under Profile → Delete Account
• Right to restriction — request that we limit processing of your data in certain circumstances
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing

Our legal basis for processing scan images and biometric data is your explicit consent, given when you perform a scan. Our legal basis for account data is contract performance. To exercise any of these rights, contact us at trymelioapp@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

Your Rights — California Residents (CCPA)

If you are a California resident, you have the following rights under the CCPA:

• Right to know — request disclosure of the categories and specific pieces of personal information we collect, use, and share
• Right to delete — request deletion of personal information we have collected from you (you can also do this directly in the app)
• Right to opt out of sale — we do not sell your personal information to third parties
• Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights

To submit a CCPA request, contact us at trymelioapp@gmail.com with the subject line "CCPA Request."

Children's Privacy

Melio is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with information, please contact us and we will promptly delete it.

Changes to This Policy

We may update this policy when we add new features or change how we process data. We will notify users of material changes via an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

Contact

For privacy questions, data requests, or to exercise your rights, contact Venatra Inc. at trymelioapp@gmail.com.