Mellune

Privacy Policy

Effective September 28, 2026

This policy explains how the Mellune: Skincare Scanner app (“Mellune”, “the app”) handles your information. Mellune is published by Ali Bayar, an individual developer based in Morocco (“we”, “us”).

1. Information stored only on your device

The following stays on your phone and is never uploaded to us, except as described in section 2:

• Your skin profile: first name (optional), skin type, sensitivities, skin concerns, age range, skin tone, ingredients you want to avoid, notes, and optional safety details (pregnant or nursing, prescription retinoid, acne medication).
• Your scan history: product photos you scanned and their results.
• App settings, such as your appearance preference.
• An anonymous device ID (a random code, not linked to your name, email or phone number) and a note that your free scan was used, kept in the iOS Keychain.

2. Information sent when you scan a product

Each time you scan, the app sends the following over an encrypted connection (HTTPS) to our server:

• the product photo you took or chose;
• your skin profile, without your first name;
• your anonymous device ID, to check your free scan or subscription.

Our server passes the photo and profile to our analysis service, which uses Google, to create your personalized result, and sends the result back to your phone. Our server does not save your photo, your profile or your result. It keeps only short technical error logs (for example, “analysis service unavailable”), which do not contain your photo or profile.

Your IP address is used briefly, in memory only, to limit how many requests can be made per minute and prevent abuse. It is not stored.

Some profile details you may choose to give, such as pregnancy, medication, sensitivities or skin conditions, can be health-related. They are all optional. By adding them and scanning a product, you agree to them being used for your result as described here. You can remove them anytime in the Profile tab.

Problem reports. If you tap “Something wrong?” on a result, we receive only the reason you pick, the note you write (if any), and the product name and brand shown in that result. We save these in our database to improve results. They are not linked to your device, photo or profile, so please don't include personal details in the note.

3. Subscriptions and purchases

Your first scan is free; further scans need a Mellune Pro subscription. Payments are handled entirely by Apple through your Apple ID. We never see your name, email, card or payment details.

We use RevenueCat to manage subscriptions. RevenueCat receives your anonymous device ID, your purchase and subscription status, whether your free scan was used, and basic technical details from Apple and the app (such as app version, device type and country). We use this only to know whether you can scan.

4. Service providers

These providers process data on our behalf under their own privacy policies, and may be located outside Morocco (for example, in the United States). Our analysis service is set up so that your photo and profile are not used to train models. The providers may keep request data for a short time for security and abuse prevention, under their own policies.

5. What we don’t do

• No user accounts, sign-up or email collection.
• No advertising, analytics or tracking SDKs, and no tracking across other apps or websites.
• We never sell or rent your information.

6. How long we keep data

• On your phone: until you delete it. Use Profile → Clear scan history, edit your profile, or delete the app. The anonymous device ID in the Keychain may remain after deleting the app, so your free scan is not reset.
• On our server: photos and profiles are not stored; they exist only while your scan is being processed. Problem reports are kept only as long as they help us improve Mellune.
• RevenueCat: your subscription record is kept while it is needed to provide your subscription. You can ask us to delete it (see section 8).

7. Children

Mellune is not directed to children under 13, and we do not knowingly collect information from them. Teenagers should use the app with a parent’s or guardian’s guidance. If you believe a child has used Mellune in a way that concerns you, contact us and we will help.

8. Your rights

Under Moroccan Law No. 09-08 on the protection of personal data, and similar laws where you live (such as the GDPR in Europe), you can ask to access, correct or delete your information, or object to its use. Most of your data is on your phone, where you control it directly. For anything held by RevenueCat, email us at alibayar1337@gmail.com. Because we have no accounts, we may need your help (for example, the date and store receipt of your purchase) to find your record. You may also contact your local data protection authority (in Morocco, the CNDP).

9. Security

All data sent by the app travels over encrypted HTTPS connections. Our API keys are kept on our server and are never included in the app. No method of transmission or storage is completely secure, but we work to protect your information and keep as little of it as possible.

10. Medical disclaimer

Mellune results are general cosmetic information, not medical advice. Always check a product’s label and ask a dermatologist or doctor about medical skin conditions, pregnancy or medications.

11. Changes to this policy

If we change this policy, we will update this page and the effective date above.

12. Contact

Ali Bayar, Morocco
alibayar1337@gmail.com