To complete before publishing. The controller's details in square brackets are still missing: full legal name (or company name), address, VAT number if any.
This is a good-faith text following the structure of the GDPR, not legal advice. Have a privacy consultant review it before the app goes on the stores.
This page explains what data Melifestation handles, why, who with, and what you can do about it. It's written to be understood.
In short
- There is no account in the app. What you write is stored on your phone.
- To write and read your stories we send your answers (and your voice, only if you record it) to our server and to ElevenLabs, which uses artificial intelligence models. You agree to this when you tap “Continue” at the start of the app, where you accept these terms and this policy.
- Our server doesn't keep what you write. The copy of your voice at ElevenLabs is deleted right after each story.
- We don't sell your data. No ads and no ad tracking.
Who handles your data
The data controller is [FULL LEGAL NAME / COMPANY], at [ADDRESS], VAT number [VAT]. For anything concerning your data, write to privacy@melifestation.com.
What stays on your phone
Your answers to the intro questions, the people in your circle, your board (words and photos), the stories and audio already created, your settings and the recording of your voice are stored in the app's own storage, on your device. There is no account and we don't back anything up to our servers: if you use “Delete all data” in Profile or delete the app, they are gone. Your board photos never leave your phone.
If your phone backup is on (iCloud or Google), the app's data may end up there too: that backup is yours to manage, with Apple or Google.
When we create a story: what we send, and who to
Stories, subliminals and sleep programs are written and read by an artificial intelligence. To do that, only after you consent, the app sends:
- your answers and your profile: name, how you want to be addressed, city, the answers you write (for example your ideal tomorrow), the people in your circle, the areas and values you choose, your phone's language. For follow-up questions we only send the answer they're about, your name, your city and the names in your circle;
- your voice, only if you choose to record it and confirm it's yours and that you're 18 or older.
This data goes through two places:
- Our server, a function hosted by Vercel Inc. (United States). It receives the request, passes it to ElevenLabs and sends the story back to you. It doesn't store what you write or your voice. Vercel only keeps technical logs (such as IP address, time and result of the request) for a short period, for security and to fix errors.
- ElevenLabs Inc. (United States), which processes the data on our behalf as a data processor. It uses its artificial intelligence models: a language model to write the texts (currently Claude, by Anthropic, which ElevenLabs uses as its own provider) and its voice models to read them (Eleven Multilingual v2 and, if you choose your own voice, Instant Voice Cloning).
The finished audio comes back to your phone, and you replay it from there, even offline. If what you write shows signs of serious distress, the app doesn't write the story and shows you where to find help.
Your voice
- When you answer the first questions out loud, the app also keeps the audio of what you say, on your phone only. At the end it asks if you want your stories in your voice: only if you say yes, and confirm that it's your voice and you're 18 or older, does that audio become your voice sample. If you say no, it's deleted right away. You can also record a short text instead.
- The recording stays on your phone.
- Each time you create audio in your voice, the app sends the recording to our server, which passes it to ElevenLabs. ElevenLabs makes a temporary copy of your voice, reads the story, and the copy is deleted right after, within the same request.
- This audio is AI-generated, and the app says so.
- You can delete the recording anytime from Profile. If you choose a standard voice, your voice never leaves your phone.
Legal basis
- Your consent (Art. 6(1)(a) GDPR and, for any sensitive information, Art. 9(2)(a)) to send your answers and your voice to the artificial intelligence. You give it when you tap “Continue” at the start of the app, before anything is sent. You can withdraw it anytime from Profile, under “Stories written with AI”: from then on we send nothing.
- Our contract with you (Art. 6(1)(b)) to let you use the app and your subscription.
- Our legitimate interest (Art. 6(1)(f)) for the technical logs needed for security.
If your answers include sensitive things (health, love life, beliefs), we only use them to write your stories.
Subscriptions
Subscriptions are bought and paid for through Apple (App Store) or Google (Google Play). Only they see your payment details: we never receive them.
To know whether your subscription is active we use RevenueCat Inc. (United States). It receives purchase information from the store (product, dates, renewal, country) and some technical device data, linked to an anonymous identifier created by the app: not to your name or email.
Notifications
Reminders (the morning story, new episodes, your board) are local notifications: your phone schedules them itself. We have no server sending you messages and we don't receive an identifier to do so. You can turn them off in Profile or in your phone settings.
What we don't do
- We don't sell or hand over your data to anyone.
- No ads and no ad tracking: the app doesn't use your phone's advertising identifier and has no third-party analytics.
- We don't use your answers or your voice to train artificial intelligence models.
- This website uses no cookies and no analytics. That's why there's no banner.
Who else is involved
- ElevenLabs Inc. (US): writes and reads the stories with AI and makes the temporary copy of your voice.
- Anthropic PBC (US): provides ElevenLabs with the language model that writes the texts.
- Vercel Inc. (US): hosts this website and our server.
- RevenueCat Inc. (US): checks the status of subscriptions.
- 650 Industries Inc. (Expo) (US): delivers app updates and only receives technical data, such as app version and operating system.
- Apple and Google: distribute the app and handle payments and subscriptions, under their own privacy policies.
These providers are in the United States. Data transfers rely on the European Commission's standard contractual clauses and, where the provider participates, the EU-US Data Privacy Framework.
If you joined the launch list in the past, your email was received by Formspree (US) on our behalf: we only use it to tell you once when the app is out, and you can have it deleted anytime by writing to us.
How long we keep data
- On your phone: until you delete it, from Profile or by deleting the app.
- On our server: nothing, apart from short-lived technical logs.
- At ElevenLabs: the copy of your voice is deleted right after each generation. Generated texts and audio may stay in ElevenLabs' systems for a limited period, under its retention rules and our data processing agreement. We don't use them for anything else.
Your rights
Under the GDPR you can, free of charge and at any time, write to privacy@melifestation.com to: see what we hold and get a copy, correct it, delete it, take it elsewhere in a readable format, object to or restrict processing, and withdraw consent. We reply within thirty days. Since there's no account, most of your data is already in your hands, on your phone.
If you think we're getting it wrong, you can complain to your national data protection authority.
Minimum age
The app is for people aged 16 or over. To use your own voice in the stories you must be at least 18. If we learn we've received data from someone younger, we delete it.
Changes
If we change this notice we update the date at the top. If the change is significant, we'll tell you in the app.