Privacy Policy

Account data: when you create an account, we collect your email address and a securely hashed password. Authentication is handled by our provider Supabase.

App data: the App Store apps, keywords and competitors you choose to track, together with the public ranking, rating and metadata information we retrieve for them.

Payment data: if you subscribe to a paid plan, payments are processed by Polar, our payment provider and merchant of record. We do not store your card details. We only keep limited billing information such as your plan and subscription status.

Usage and technical data: basic information such as your IP address, browser type, pages visited and actions taken, collected to operate, secure and improve the service.

We use your data to provide and maintain the service, manage your account, process payments, send service-related communications, analyse and improve the product, and comply with our legal obligations.

Under the GDPR, our legal bases are: performance of our contract with you (providing the service and billing), our legitimate interests (securing and improving the service, and measuring audience with privacy-friendly analytics), and compliance with our legal obligations.

We use essential cookies that are required to keep you signed in and to operate the site.

For audience measurement we use Vercel Web Analytics, a privacy-friendly tool that does not use cookies and does not collect personal data that could identify you. Because no tracking cookies are set, no consent banner is required.

When we send you emails, we may measure whether they were opened and which links were clicked, to understand engagement and improve our communications. You can opt out of non-essential emails at any time from your settings or via the unsubscribe link in every email.

We share data with trusted providers who process it on our behalf: Supabase (database and authentication), Vercel (hosting and privacy-friendly analytics) and Polar (payment processing and merchant of record). Each provider only receives the data needed to perform its function.

We also retrieve public data from the Apple App Store. Apple is a source of public information, not a recipient of your personal data.

Some of our providers are located outside the European Union, including in the United States. When personal data is transferred outside the EU, it is protected by appropriate safeguards such as the European Commission Standard Contractual Clauses.

We keep your personal data for as long as your account is active. If you delete your account, we delete your personal data and tracked content, except where we are required to keep certain records (for example billing records) to meet our legal obligations.

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to certain processing. You can exercise these rights at any time by contacting mellowaso@proton.me.

You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

We take reasonable technical and organisational measures to protect your data. Passwords are stored hashed and traffic is encrypted in transit. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Mellow ASO is not intended for anyone under the age of 16, and we do not knowingly collect data from children.

We may update this Privacy Policy from time to time. We will update the date above and, where appropriate, notify you of significant changes.

For any question about this policy or your data, contact Nicoletti Laurine at mellowaso@proton.me.