Consumer Health Data Privacy Notice

This notice is provided by MelloTone Studios LLC under the Washington My Health My Data Act and Nevada's consumer health data law (chapter 603A of the Nevada Revised Statutes). It describes the limited wellness related information our app works with. It sits alongside our main privacy policy, which covers everything else and applies to everyone. This notice applies to residents of Washington and Nevada, and to Connecticut residents for any sensitive data under the Connecticut Data Privacy Act. It covers our phone app and our website at listen.mellotonestudios.com (the "website").

The short version: our app has no user accounts and never asks for your name, email address or phone number. On our website, signing in is optional; an account holds your email address and sign-in details (with Google sign-in, also the name on your Google account) and none of the information described below. We do not collect health records, biometric data, symptoms, diagnoses, medications or precise location. Our analytics providers work out an approximate location, such as your country or city, from your IP address, as our main privacy policy explains. We do not sell any information about you for money, and we have never sold consumer health data.

What we collect that may count as consumer health data

The wellness goal you pick. When you first open the app it asks what you are hoping to get out of it, for example better sleep, more focus, less stress or a meditation practice. Your answer is used to choose what the app suggests first, and it is included in our usage analytics. If you choose Something else, what you type there (up to 20 characters) is sent as typed.
Which wellness content you use. Which beats, sounds, breathing patterns and sessions you play, and for how long. Because some of that content is organised by purpose, such as sleep or relaxation, your use of it can suggest what you are seeking.

Both are tied to a random identifier generated on your device the first time the app runs. That identifier is not linked to your name or to any account, because the app has no accounts. It is the same identifier the app shows as your Support ID in Settings. It is created fresh if you reinstall the app.

In the iOS app, this information reaches our analytics providers only after you choose Share when the app asks "Share usage data?" after setup, and it stops when you turn off Share usage data in the app's Settings.

The website does not send us, Mixpanel or anyone else the goal you picked or anything you type during setup, and its usage analytics never say which sound you play. They say only that a sound was played, of which kind and from which catalogue shelf (such as Focus), never a shelf named for a health condition, and, from setup, how familiar you are with these sounds and which kinds of content interest you (such as binaural beats, breathwork or meditation), never the goal you picked. Error reports never say what you play, with one exception: if a sound fails to load, the report sent to Sentry names that sound or the address of its file so we can fix it. Error reports carry no account and no stored IP address; the only identifier they can carry is the random ID the website uses to read prices in that browser tab, which is not linked to your account and is forgotten when the tab closes, so we cannot link a report to you. The website's usage analytics and error reports are therefore not consumer health data. The goal you pick on the website stays in your browser.

The website collects no consumer health data beyond what you choose to keep in your own browser, so it asks no separate consent for it. If that ever changes, we will ask for your consent first, separately for collecting and for sharing, as Washington and Nevada law require.

Where it comes from

Directly from you, through choices you make inside the app on your own device. We do not buy information about you, and we do not receive consumer health data from data brokers, advertising networks, health providers or any other outside source.

On the website, it comes from choices you make there, such as the goal you pick during setup, which is kept in your browser to suggest content.

Why we collect it

To choose what the app shows you first, so it is useful without setup
To understand which features people actually use, so we know what to improve
To find and fix problems, crashes and errors

We do not use it for advertising. The app shows no advertising at all, and we do not build advertising profiles or share this information with advertising networks, except that Google Analytics for Firebase receives it as described in our privacy policy.

Who it is shared with

Only with service providers who process it on our behalf, under contract, so that we can run the app. They may not use it for their own purposes.

Mixpanel and Google Firebase Analytics, for understanding product usage
Google Firebase Crashlytics, for crash and error diagnostics
RevenueCat and the app store (Google Play on Android, Apple's App Store on iOS), for subscription status

For the website: Google (Firebase Hosting, Cloud Firestore and Cloud Storage, which serve the website, its catalogue, pictures and sounds, and Firebase Authentication, which keeps accounts), Mixpanel, Inc. (usage analytics, without consumer health data), Functional Software, Inc. (Sentry; error reports, without consumer health data) and RevenueCat, Inc. (Premium prices and status).

We do not share consumer health data with anyone else, and we do not sell it. Selling consumer health data requires a signed authorisation under Washington law, and we have never sought one because we do not do it. The website shows no advertising, but it uses the Meta Pixel on a few general pages and on the Premium and offer pages, where you can open the checkout (see our privacy policy, "Advertising on Meta"). What it sends never includes which sound you play, the goal you picked, which category, guide, exercise or search page you opened, or anything you type. In Washington and Nevada, and whenever the website cannot tell which US state you are in, it uses the Meta Pixel only if you turn Advertising on Meta on. What the Meta Pixel receives is not the information described above, and Meta also uses it for its own advertising and products under its own terms, as our privacy policy describes.

From version 7.0367, while Ad measurement is on, the Android app also tells AppsFlyer, an ad measurement company, how it was installed and when it is opened, with your phone's advertising ID, and AppsFlyer may pass this on to Google and Meta (see our privacy policy, "Ad measurement on Android"). On a new install outside Europe, including in Washington and Nevada, Ad measurement is on from the first time you open the app, and you can turn it off at any time in the app's Settings, under About, Privacy preferences. AppsFlyer never receives your goal, what you play or what you search for.

How long we keep it

Usage records are kept while they remain useful for the purposes above, and are then deleted or aggregated so they can no longer be connected to a single installation. Data stored on your device, including anything you create in the app, is removed when you uninstall it. What the website keeps in your browser stays there until you clear the site's data in your browser.

Your rights

If you are a resident of Washington, Nevada or Connecticut, you have the right to:

Confirm whether we collect, share or sell your consumer health data, and access it
Get a list of the third parties it has been shared with
Withdraw your consent to its collection and sharing
Have it deleted, including from our service providers
Appeal if we refuse a request

How to make a request

Email contact@mellotonestudios.com and tell us what you would like. We respond within 45 days, and will tell you if we need a further 45 days for a complicated request. In the iOS app you can also stop sharing usage data at any time with the Share usage data switch in Settings. In the Android app you can turn off Ad measurement at any time in Settings, under About, Privacy preferences.

Because the app has no accounts, we cannot identify you from your name or email address. To find the records connected to your installation we may need the Support ID shown in the app's Settings or your purchase details. If we cannot verify that the data relates to you, we will say so rather than hand it to the wrong person.

If we deny your request you may appeal by replying to our response. If your appeal is denied, you may raise a complaint with the Washington State Attorney General at atg.wa.gov/file-complaint, the Nevada Attorney General at ag.nv.gov, or the Connecticut Attorney General at portal.ct.gov/ag.

Who is responsible

MelloTone Studios LLC
422 S Main Street #1129, Lombard, IL 60148, United States
contact@mellotonestudios.com

We will post any changes to this notice on this page and update the date at the top.