Your family's data, and how we look after it.

Mellou is a family assistant made by Linna Labs Oy, based in Kirkkonummi, Finland. We are the data controller for the personal data described here. Contact: oona@mellou.me.

We collect data about your account details (name, email address, phone number), data from the messages you send Mellou, your calendar events and email messages, if you choose to connect those. We also gather technical data such as device and usage logs.

Your data is used to providing the service of the family assistant to you: the more knowledge we have about you the better the assistant will be in helping specifically you. Mellou uses data as context and sends messages, reminders and briefs for you. In addition to this, we use technical data to improve Mellou for all our customers. Integrations to other apps and tools require additional consent, and that data will be used to communicate with the connected tools.

Mellou processes information about children only as entered by their parents or guardians. Children's data is handled in a highly secure way: we understand that no parent wants information about their children getting to the wrong hands. You are always in control of your data and any data about your children: you can always ask to delete all data. You can also access some of the information in Mellou's context through the web app at a later point, where you will have the power to delete specific Mellou memories and data.

Mellou is hosted within the EU with AWS. Frontier AI models are run on European servers, but Mellou doesn't grant AI models the right to use the data to improve the models. These companies process your data on our behalf, as our processors, and only to run Mellou: Amazon Web Services runs Mellou's AI model (Amazon Bedrock) and its background service, in the EU. Supabase stores Mellou's database and your photos, voice messages and files in the EU (Ireland), and the waitlist sign-ups and contact messages from this website in the EU (Sweden). Vercel hosts the Mellou app and this website. 46elks, in Sweden, sends the sign-in codes by text message, so it receives your phone number. Resend sends our email, such as the notice we receive when you join the waitlist or write to us. OpenRouter turns voice messages into text, using OpenAI's Whisper model, so your voice recordings are sent to them for that. Composio connects Mellou to your Google Calendar and Gmail, if you choose to connect them. PostHog records how this website and the app are used, as described under Usage analytics. In addition to these, any discussions you have in Whatsapp or iMessage are subject to the privacy policies and terms of Whatsapp or Apple. Keep an eye on changes in their privacy policies or terms and conditions.

We use PostHog to see how mellou.me and the Mellou app are used, so we can make them better. PostHog processes this data on our behalf, as our processor, in the EU (Frankfurt, Germany). On this website we record only a few named events: which page was viewed, whether a waitlist or code form was sent, and which button was pressed. We do not record what you type, your phone number or your name, and visitors are not identified. Your browser keeps a random identifier so that a repeat visit is counted once. In the app we record the same kind of named events, never the content of your messages. During the pilot we also record the app's screens as you use them (session replay), so we can see where something goes wrong. A recording can show anything on the screen, including your family's information. The phone number and code you enter to sign in are never recorded. We keep events for 12 months and recordings for at most 30 days, and when we stop recording after the first pilots, the remaining recordings are deleted. To have your data deleted, write to oona@mellou.me.

For active accounts we retain your data as long as you actively use our service. This allows us to fully remove the mental load of parents, as Mellou can remember everything that has happened in the past years. If you want to stop using Mellou, all your data will be deleted permanently within 30 days of the deletion of the account.

You have the right to access, rectify, get data erased, restricted or objected, and the right to complain to the Finnish Data Protection Ombudsman.

Changes to our privacy policy will be posted here. If the privacy policy is updated in a way that changes your privacy rights in a significant way, we will send an email update so that you can review the changes and make a decision, whether you still want to continue using Mellou.