Privacy
How Mellow uses your data.
The operator is Spody App, LLC. We collect the minimum and we do not sell data.
Who is responsible
The operator is Spody App, LLC, Limited Liability Company (Delaware), 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA. The App Store listing is published by Spody Ai LLC. For anything about your data, write to contact@mellow.world.
What we keep
The email address you sign in with, your drafts, plans and uploaded media, service records of what was published, and the technical logs security requires. To measure acquisition, we also keep the first touch: bounded source, medium, campaign and creative labels, the referring domain, and the landing-page path. This first-touch record does not contain the full referrer or advertising click IDs; separate Meta cookie storage is described below. Mellow never receives or stores your Instagram or Apple ID password.
What Instagram gives us
When you connect it: your professional account’s identifier, username and profile picture. Those are stored with us so it is clear whose account is connected. While a screen is open: the posts on your profile with their media and captions, and the view and reach figures Instagram reports — shown to you and held on the phone itself, with no copy left on Mellow’s servers.
What we do not do
We do not sell data. Mellow has no recommendation feed. Your drafts, photos, videos, captions and conversations with the assistant are not sent to advertising partners. Acquisition measurement using technical events is described separately below.
Public-page load counts
Before sign-in, we count received load signals for selected public pages. We store only daily totals by page and source category, such as Google or an AI referral. This counter does not store an IP address, full referrer, URL parameters, visitor identifier or individual browsing history, and adds no cookies. It respects your banner choice: Essential only disables this counter; where consent is required, collection waits for Accept. Daily totals older than 400 days are deleted on the next received signal. Repeat loads may belong to the same person; these totals are not unique visitor counts.
Advertising and cookies
The public pages — the home page, the Hub page, sign-in and pricing — carry the Meta (Facebook) and Whop measurement tags. They report that a page was opened and that somebody registered or started a payment, so we can tell which advertising pays for itself. They receive what a tag sees by itself: the page address, the kind of device, and a cookie identifier for the browser. Your drafts, your posts and your conversations with the assistant are never sent to them. In the EU, the UK and Switzerland nothing loads until you press "Accept" in the banner, and choosing "Essential only" means it never loads. Elsewhere your browser's settings or an extension will block them. If you came from a Meta advertisement, we keep the identifier of that click — the same cookies the tag writes — for up to 90 days, and tell Meta from our server about the registration and the payment, so the advertising is counted even when the browser did not show the tag. It is kept only where the tag is allowed, and it leaves with the account.
Measurement in the iOS app
The app uses AppsFlyer and Meta to measure installs and advertising results. The SDKs may send technical installation and device information, along with app activation, registration, trial-start and purchase events. Purchase information may include the product identifier, currency and known actual amount; this does not mean every later charge is measured. These events do not contain your media or conversations. AppsFlyer runs in strict mode without the IDFA advertising identifier; Meta IDFA collection is enabled only after you allow it in the iOS system tracking prompt. Refusing this permission does not disable aggregate measurement, including SKAdNetwork, which does not require IDFA.
Who receives data
To provide the service: Instagram and the other networks through their official APIs, to publish; Stripe, to take payment on the website; Apple, to take payment in the app; the model provider, so the assistant can answer. To measure advertising: Meta and Whop on public pages, and AppsFlyer and Meta in the iOS app, within the limits above.
Storage and protection
Data is kept for as long as your account exists. Database access is restricted, connections are encrypted, and access tokens are stored apart from content.
Your choices
You can disconnect Instagram, export, or delete your account in the app at any time. A separate data deletion page describes what to do if the app is not available to you. You can change tracking permission in iOS settings; refusing it does not block your use of Mellow.
Contact
Spody App, LLC, 390 Northeast 191st Street, Miami, FL 33179, United States. Email: contact@mellow.world.