This English version is provided for convenience. In the event of any discrepancy, the French version prevails.
1. Data controller
The controller of your personal data is Krafter SAS, SIREN 902 139 047, whose registered office is at 130, chemin de la combe, 69480 Morancé, France.
For any question about the processing of your personal data, you can contact Krafter SAS at hey@krafter.io.
2. Data collected
Account data
- Email address
- First name and surname
- Password (encrypted)
Usage data
- Content created (lists, events, tasks, notes, recipes)
- Documents and photos uploaded
- Information about the household and its members
- Activity data within the app
Conversations with Melia
- The requests you make to Melia, in writing or by voice, and the photos you share with her
- The household information needed to answer them, for example the contents of the fridge, a recipe or the week’s meal plan
Technical data
- Device type, operating system
- IP address, connection logs
- Unique device identifiers
App audience measurement
The Melimelo app, on iPhone, iPad, Android, Mac and in the browser at app.melimelo.co, includes Google Analytics for Firebase, an audience measurement tool provided by Google. It receives:
- The internal identifier of your account and of your household, the household’s plan (free, trial or Premium) and its number of members, by band (1, 2, 3 or more)
- The screens viewed and the modules used
- The key steps of your journey: sign-up, login, discovering the app, invitations, subscription journey
- The technical data collected by the tool: device model, operating system, app version, language, country or region, app installation identifier
The tool does not receive your email address, your name or your household’s content (lists, notes, recipes, documents, photos).
3. Purposes of processing
Your data is used for:
- Creating and managing your account
- Syncing across your devices
- Sharing within the household
- Running Melia, the household assistant: answers, actions in the modules, speech recognition and synthesis, creation of recipes and images
- Improving and developing the service
- Measuring the app’s audience, to understand how the modules and journeys are used
- User support and service communications
- Fraud prevention and security
4. Legal basis
The processing of your data is based on:
- Performance of the contract: providing the Melimelo service
- Legitimate interest: improving the App, measuring its audience, security, fraud prevention
- Consent: for uses that are specifically subject to your agreement
- Legal obligations: retention required by law (invoicing, for example)
5. Data sharing
Your data is never sold to third parties. Your data is shared only in the following cases:
- Members of your household: in line with the very principle of Melimelo, content shared within your household (lists, calendar, recipes, etc.) is visible to the members invited to the household. The Wellbeing module is the exception: its data remains strictly private to each user.
- Technical service providers: OVH SAS for hosting the app’s data (EU), Google Ireland Limited for hosting the melimelo.co website, and support providers strictly necessary for the operation of the service.
- Artificial intelligence providers: the model providers that power Melia (text and image generation, speech recognition and synthesis), located in the European Union and the United States. They receive only the information needed for the request in progress and do not use it to train their models.
- Audience measurement and advertising: Google, via Google Analytics for Firebase, to measure the app’s audience; Meta Platforms Ireland Limited, via the pixel on the melimelo.co/links page only, to measure our advertising campaigns, as detailed in the cookie policy.
- Legal obligation: in the event of a legitimate request from the competent authorities (courts, tax authorities, etc.).
6. Retention period
- Account data: kept for as long as you use the service
- Content: kept until deleted by the user or until the account is deleted
- Technical data: 12 months maximum
- Audience measurement data: 14 months maximum in Google Analytics
- Billing data: 10 years (legal obligation)
When your account is deleted, your personal data and your Content are permanently erased within a maximum of 30 days, unless there are legal retention obligations.
7. Security
Krafter SAS implements technical and organisational measures to protect your data:
- Encryption of data in transit (HTTPS / TLS)
- Passwords stored in encrypted form
- Secure hosting of the app’s data in the European Union (OVH)
- Regular backups
- Access to data restricted to authorised staff
- Continuous monitoring of the platform
8. Your rights (GDPR)
You have the following rights regarding your personal data:
- Right of access: obtain a copy of the data concerning you
- Right to rectification: request the correction of inaccurate data
- Right to erasure: request the deletion of your data
- Right to restriction: restrict the processing of your data
- Right to data portability: receive your data in a structured format
- Right to object: object to the processing of your data for certain purposes
- Withdrawal of consent: at any time, without retroactive effect
To exercise these rights, contact Krafter SAS at hey@krafter.io. If you disagree with how your data is processed, you also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL).
9. International transfers
Your account and household data (profiles, content, documents, photos) is stored within the European Union, on OVH servers located in France.
Some third-party services may process data outside the European Union, in particular in the United States, under the EU-US Data Privacy Framework: Melia’s artificial intelligence providers, for the requests you make to her; Google, for hosting the melimelo.co website and measuring the app’s audience; Meta, for the pixel on the melimelo.co/links page.
11. Changes
Krafter SAS reserves the right to amend this privacy policy. Users are informed of substantial updates via the app or by email.
12. Contact
For any question about the processing of your personal data or to exercise your rights, contact: