Privacy Policy

Account data: when you create an account, we collect your email address and a securely hashed password. Authentication is handled by our provider Supabase.

App data: the App Store apps, keywords and competitors you choose to track, together with the public ranking, rating and metadata information we retrieve for them.

Payment data: if you subscribe to a paid plan, payments are processed by Stripe. We do not store your card details. We only keep limited billing information such as your plan and subscription status.

Usage and technical data: basic information such as your IP address, browser type, pages visited and actions taken, collected to operate, secure and improve the service.

We use your data to provide and maintain the service, manage your account, process payments, send service-related communications, analyse and improve the product, and comply with our legal obligations.

Under the GDPR, our legal bases are: performance of our contract with you (providing the service and billing), our legitimate interests (securing and improving the service), your consent (analytics cookies), and compliance with our legal obligations.

We use essential cookies that are required to keep you signed in and to operate the site.

We also use Google Analytics to understand how visitors use the site. These analytics cookies are only set with your consent, which you can give or withdraw at any time.

We share data with trusted providers who process it on our behalf: Supabase (database and authentication), Vercel (hosting), Google Analytics (audience measurement) and Stripe (payment processing). Each provider only receives the data needed to perform its function.

We also retrieve public data from the Apple App Store. Apple is a source of public information, not a recipient of your personal data.

Some of our providers are located outside the European Union, including in the United States. When personal data is transferred outside the EU, it is protected by appropriate safeguards such as the European Commission Standard Contractual Clauses.

We keep your personal data for as long as your account is active. If you delete your account, we delete your personal data and tracked content, except where we are required to keep certain records (for example billing records) to meet our legal obligations.

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to certain processing. You can exercise these rights at any time by contacting mellowaso@proton.me.

You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

We take reasonable technical and organisational measures to protect your data. Passwords are stored hashed and traffic is encrypted in transit. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Mellow ASO is not intended for anyone under the age of 16, and we do not knowingly collect data from children.

We may update this Privacy Policy from time to time. We will update the date above and, where appropriate, notify you of significant changes.

For any question about this policy or your data, contact Arthur Griffiths at mellowaso@proton.me.