Privacy Policy
1. Who is responsible for your data
Data controller: Meloo International Kft.
Registered seat: 4440 Tiszavasvári, Munka utca 4., Hungary
Company registration number: 15-09-094292
Privacy requests: support@mymelo.ai
We have not appointed a data protection officer, because the nature and scale of our processing do not require one; the address above handles all privacy requests.
2. What we process, why, and on what legal basis
| Data | Purpose | Legal basis (GDPR Art. 6) | Kept for |
|---|---|---|---|
| Account: name, e-mail address, password hash or Google login identifier, profile photo | Creating and securing your account, signing you in, contacting you about the service | Contract (6(1)(b)) | While your account exists |
| Country and language | Showing jobs for your country and the app in your language | Contract (6(1)(b)) | While your account exists |
| Job preferences: keywords, location, radius, pay, job type | Running your default search | Contract (6(1)(b)) | While your account exists |
| Saved jobs and applications: the job’s title, employer, link, date, status (saved / applied) and, if you tell us, the outcome | Your Applications list, reminders to update an outcome, product statistics | Contract (6(1)(b)); statistics: legitimate interest (6(1)(f)) | While your account exists |
| Melo assistant requests: the text you type and the filters derived from it | Turning your request into a search; improving the assistant’s accuracy | Contract (6(1)(b)); improvement: legitimate interest (6(1)(f)) | Last requests kept on your device; server logs 90 days |
| Consent records: which Terms and Policy version you accepted and when | Proving acceptance | Legal obligation (6(1)(c)) | 5 years after deletion of the account |
| Success story: first name, photo, job title, employer | Showing your story on the app’s start screen | Consent (6(1)(a)), withdrawable any time in Profile → Notifications | Until you withdraw or delete your account |
| Push notification token and notification settings | Sending the notifications you switched on | Consent (6(1)(a)) via the system permission and the in-app switches | Until you switch off or uninstall |
| Problem reports and support e-mails: your message, app version, device type | Answering you and fixing bugs | Legitimate interest (6(1)(f)) | 2 years |
| Technical data: device type, operating system, app version, crash logs, anonymous usage events | Keeping the app working, measuring which features are used | Legitimate interest (6(1)(f)) | Crash logs 90 days, aggregated statistics indefinitely |
| Launch waitlist e-mail | Sending one message when the app launches | Consent (6(1)(a)) | Until the launch message is sent or you unsubscribe |
Where we rely on legitimate interest we have weighed it against your interests: the processing is limited to what a job app plainly needs, you can expect it, and you can object at any time (see section 6). We do not use your data for third-party advertising, and we do not sell it.
3. Who else sees your data
- Google Ireland Ltd. (Firebase): hosting, authentication, database, file storage, push notifications, crash reporting and analytics. Processor acting on our instructions.
- Google (Gemini via Firebase AI Logic): processes the text you type into the Melo assistant to extract search filters. The text is not used to train Google’s models under the enterprise terms we use.
- Job providers (currently Jooble): receive your search terms (keywords, location, filters) so they can return postings. They never receive your name, e-mail or account identifier.
- Employers and job sites: when you apply, you do so on their website. What you enter there is processed by them under their own privacy policy.
- Apple, Google (app stores): process payments and downloads under their own terms; we receive no payment data.
- Public authorities, when the law obliges us to disclose.
4. Transfers outside the EU
Our servers are in the European Union. Some providers, such as Google, may process data in the United States under the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses, with additional safeguards. You can ask us for a copy of the safeguards.
5. How long we keep your data
In general while your account exists. When you delete your account in the app, or ask us to, we erase your profile, applications, saved jobs, photo and success story within 30 days. We keep only what the law requires (for example the record that you accepted the Terms, for 5 years) and anonymised statistics that cannot be linked to you. Backups are overwritten within 35 days.
6. Your rights
You have the right to: access the data we hold about you and get a copy; rectify inaccurate data (most of it directly in Profile); erase your data (Delete account in the app, or by e-mail); restrict processing in certain cases; data portability (a machine-readable export of your account data on request); object to processing based on legitimate interest; and withdraw consent at any time without affecting earlier processing. Write to support@mymelo.ai; we answer within one month, extendable by two months for complex requests, and we may ask you to verify your identity.
7. Complaints
If you think we handle your data unlawfully, please tell us first. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11., postal address 1363 Budapest, Pf. 9., ugyfelszolgalat@naih.hu, +36 1 391 1400, www.naih.hu, or with the authority of your place of residence, and you may turn to court.
8. Security
Data is encrypted in transit (TLS) and at rest, access is limited to people who need it, passwords are stored only as hashes, and security rules restrict every account to its own data. No system is perfectly secure; if a breach is likely to put you at high risk, we will inform you and the authority as the GDPR requires.
9. Children
Melo is for people aged 16 and over. We do not knowingly collect data from younger children; if you believe a child has created an account, contact us and we will delete it.
10. Automated processing
The Melo assistant uses a language model to turn your sentence into search filters, and the job list is ordered by the job provider’s relevance and date. Neither makes decisions with legal or similarly significant effects on you: you always see and can change the filters, and you decide where to apply. We do not profile you for advertising.
11. This website and cookies
The website stores your language choice on your device (local storage) and uses no analytics or advertising cookies, so no cookie banner is needed; it also remembers your light or dark theme choice the same way. If you join the launch waitlist, we store your e-mail address as described in section 2. Our web host: Websupport Magyarország Kft., 1132 Budapest, Victor Hugo utca 18-22.
12. Changes to this Policy
We will post any new version here and in the app with a new date, and tell you in the app when the change matters to you (for example a new purpose or a new recipient).