melonnote.
THE DETAILS

Privacy policy

Updated 5 October 2026. Includes optional analytics controls for the upcoming iOS build 25 and Android build 25. For questions about your platform or version, contact [email protected].

Introduction

MelonNote ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how MelonNote handles your data when you use our iPhone, iPad and Android applications. Last updated: 5 October 2026.

Key Privacy Principle: MelonNote does not require a MelonNote account. Your note library is stored on your device. Content is sent to our service providers when you request AI features. Optional usage analytics, essential app verification, and purchase processing are described separately below.

Data Storage

Your note library is stored locally on your device:

  • Notes, PDFs, images, and documents you import or create
  • Audio recordings you make within the app
  • Flashcards and quizzes generated from your content
  • Chat history with the AI tutor
  • Your language preferences and study settings

MelonNote does NOT:

  • Require you to create an account or log in
  • Sell your study content or use optional usage analytics for advertising tracking
  • Include your study content in optional usage analytics

Optional usage analytics

These controls apply from iOS 1.0.10 (build 24) and Android 1.0.12 (build 25). Starting with iOS build 25, optional usage analytics are on by default for users without a saved preference. A previously saved choice to turn analytics off stays off. iOS build 24 and Android build 25 default to off. The same switch appears on the last onboarding screen and in Settings → Data & storage. You can turn analytics off at any time and continue using ordinary app features. Earlier versions may use a different analytics implementation; update to obtain these controls.

While analytics are enabled, we receive app opens, onboarding completion, note-creation and study-action outcomes, feature results, paywall views, selected plan type, checkout and restore outcomes, request duration and HTTP status, sanitized error categories, app version/build, app language, test/production environment, session timestamps, and bounded item counts. Our service also records operational outcomes and measured cost estimates for AI requests with analytics enabled. These estimates are not complete provider invoices. Client checkout events are diagnostics, not proof of payment.

Optional analytics never include notes, prompts, transcripts, titles, filenames, YouTube URLs, recordings, photos, flashcard text, quiz answers, email contents, payment tokens, receipt proofs, RevenueCat customer IDs, advertising identifiers, precise location, or raw error messages. App verification proofs are used separately for essential authentication, not placed in analytics event properties.

Cloudflare hosts the administration service and database. Events are linked to a pseudonymous app identity, not treated as anonymous. On iOS this identity is derived from Apple's verified app transaction identity and may span devices and reinstalls for the same Apple Account and app. On Android it is derived from an installation identity. These are different counting units: they do not provide comparable per-person or per-device counts. Optional analytics identities remain separate from billing identities.

Turning analytics off stops new optional collection, cancels pending uploads where possible, and clears queued events from your device. It does not recall events already delivered. Re-enabling starts with current activity; historical client activity is not backfilled. Scheduled cleanup removes raw analytics events after 90 days and identity activity records after 90 days without activity. A pending on-device event expires after seven days. The on-device analytics queue and consent/session material are excluded from device backup.

For privacy questions or requests about previously received records, contact [email protected]. Turning off analytics or deleting local notes does not itself delete records already held by the service.

Essential verification and purchases

App verification, security and subscription processing work independently of optional analytics. Apple or Google verifies your app and purchases, and RevenueCat manages subscription entitlements, purchases and restores. These services process app/purchase identifiers and subscription status as necessary to provide access. Payment card information is handled by the store; it is not an analytics event property.

Our existing RevenueCat billing integration records verified billing events separately from optional usage analytics. Scheduled cleanup removes administration billing-event records after 400 days and expired subscription-status records 400 days after expiry. These rules do not set the retention periods of Apple, Google, RevenueCat or AI providers. Uninstalling the app does not cancel a store subscription; manage or cancel it in the relevant store settings.

AI processing and provider retention

To provide AI-powered features, MelonNote temporarily sends your content to third-party AI services for processing. This happens only when you use these specific features:

  • Audio Transcription: Voice recordings are sent to AI services to convert speech to text
  • PDF/Image Text Extraction: Documents and images are sent to AI services to extract readable text
  • Flashcard & Quiz Generation: Your note content is sent to AI services to generate study materials
  • AI Tutor Chat: Your questions and relevant note context are sent to AI services to provide answers
  • Summaries & Key Points: Your notes are sent to AI services to generate summaries

Provider processing: AI services return results to your device. OpenAI processes supported transcription, image/text analysis and tutor requests; Replicate supports certain generated audio and visual features. Live conversations transmit microphone audio for processing. Providers may retain submitted content or security records beyond the request under their applicable service arrangements. Immediate provider-wide deletion is not guaranteed. We do not use your study content to train AI models.

Data Security

Your data security is our priority:

  • Local Storage: Your note library is stored locally on your device, protected by iOS's built-in security features and your device passcode/biometrics
  • Encrypted Transmission: When content is sent to AI services for processing, it is transmitted over secure, encrypted connections (HTTPS/TLS)
  • No Server Storage: MelonNote does not maintain servers that store your personal notes or study materials
  • Third-Party AI Security: AI processing services we use are industry-leading providers with robust security measures

Your data's security primarily depends on your iPhone's security. We recommend keeping your device updated and using a strong passcode or Face ID/Touch ID.

Your Data Control

You can manage your locally stored note library in the app:

  • Full Ownership: You own all your data - notes, recordings, and study materials
  • Delete Anytime: Delete individual notes or all data directly from the app
  • No Account to Cancel: Simply uninstall the app if you no longer wish to use it - this removes all local data
  • iOS Data Protection: Your data is subject to iOS's privacy and security features
  • No Marketing: We don't have your email or contact information and won't send you marketing communications

Deleting the app removes its local notes and settings from that device. It does not recall data already sent to service providers or cancel subscriptions. The optional analytics controls and retention rules above apply to analytics records.

Third-Party Services

MelonNote uses trusted third-party AI services to power its intelligent features:

  • AI language models for transcription, text extraction, and content generation
  • Apple or Google and RevenueCat for app verification and subscription processing
  • Cloudflare for API delivery, optional usage analytics and the separate administration billing service

These services process data to provide the requested features and operate subscriptions, analytics and security on our behalf. Their processing and retention depend on the applicable service arrangements. We do not sell your study content or use it for off-app advertising.

Children's Privacy

MelonNote is intended for adults aged 18 and older. It is not directed to children. If you believe a child has submitted personal information through MelonNote, contact us so we can investigate and address the request.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

[email protected]