Privacy Policy

Who We Are

MeldLife is operated by:

We act as the "Data Controller" for personal data under UK GDPR, EU GDPR and applicable US privacy laws.

What Data We Collect

2.1 Information you provide

We collect data you choose to upload or create, such as:

• Voice recordings
• Photos and images
• Videos
• Written text and notes
• Scanned documents (letters, journals, certificates, etc.)
• Story chapters and timelines generated during use
• Your account email address

2.2 Automatically collected information

We collect limited diagnostic information:

• IP address
• Device/browser type
• Log data for security & debugging

We do not use advertising trackers or third-party marketing cookies.

How We Use Your Data

We use your data solely to operate and improve the MeldLife service, including:

• Transcribing voice recordings
• Extracting information from photos, scans and documents
• Building timelines
• Generating story chapters
• Providing export formats such as PDF
• Improving service stability & safety

We do not use your data to train AI models, and we never sell your personal information.

How AI Is Used

We use AI models (Cloudflare Workers AI) to:

• transcribe audio
• extract information from images
• assist in creating narrative text

Your data is sent to these processors only for the purpose of generating your story content and is not stored or reused by them.

All processing follows GDPR-compliant data protection terms.

Where Your Data Is Stored

Your data is stored securely in:

• Cloudflare R2 (media storage)
• PostgreSQL (account and metadata)
• MeldLife application servers

All storage is encrypted at rest and transmitted over HTTPS.

Sharing Your Data

We only share data with service providers necessary to run the platform, such as:

• Cloudflare (file storage)
• Cloudflare Workers AI (AI processing)
• Email service providers (for account login)

We never sell, rent, or share your data with advertisers.

How Long We Keep Your Data

We keep your data for as long as your account remains active.

You may delete:

• your stories
• uploaded content
• your entire account

Once deleted, media is removed from Cloudflare R2 and text is removed from our database within 30 days.

Your Rights (UK / EU GDPR)

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion (right to erasure)
• Request data export
• Object to certain processing
• Restrict processing in specific circumstances

To exercise these rights, email privacy@meldlife.com.

US Privacy Notice (Basic Coverage)

For US-based users:

• We honour deletion requests
• We do not sell personal information
• We process data only with your consent
• You may request access to all personal information we hold about you

Children's Privacy

MeldLife is not intended for children under 13. Parents or guardians may create accounts for the purpose of recording a child's memories.

Security

We use:

• encryption at rest and in transit
• access controls
• isolated user data storage
• audit logging

No online service is 100% secure, but we take reasonable steps to protect your information.

Changes to This Policy

If we update this policy, we will update the "Last Updated" date at the top of this page.

Contact Us

If you have questions about your data or this policy: