Privacy Policy

1. Who we are

Neuanth Inc (“we,” “us,” “our”) provides Melitelly, beekeeping-management software made up of a web application, a mobile app for iOS and Android, and the Melitelly website (melitelly.com). Our address is 15418 State Route 104, Ashville, OH 43103, United States. Neuanth Inc is the controller responsible for the personal data we process under this policy. This policy describes the personal data we collect, what we do with it, who processes it for us, and the rights you have over it.

For questions about this policy or to exercise your rights, contactprivacy@melitelly.com.

2. Data we collect

We collect only what we need to run the service:

• Account data. Your email address, display name, account role, and authentication identifiers supplied by Firebase Authentication when you sign up. If you choose Sign in with Apple or Google sign-in, we receive the account identifier and the email address that provider shares with us; with Apple this can be a private relay address.
• Profile & operational data. Information you enter about your apiaries, hives, inspections, breeding programs, inventory, and orders. This includes the yard locations (latitude/longitude coordinates) you provide so regional climate models can work, and the home location you set for the account.
• Photos and voice notes. Photos you take with your camera or choose from your photo library, and voice notes you record, when you attach them to an inspection or another record. The mobile app asks for camera, photo-library, and microphone permission and uses them only when you use these features. The camera is also used to scan hive QR codes, and the app can read and write hive NFC tags; scanned codes and tags are processed on your device to open or link the matching hive. You can withdraw these permissions at any time in your device settings. Uploaded files are scanned automatically for malware before they become available in the service, and uploaded photos, videos, and documents are also screened for unsafe content.
• Swarm reports. When you report a swarm, we collect its location, the address text you enter, an optional phone number, any description you add, and up to five photos, and send the report to the responders you choose. Those responders see the description, the photos, and an approximate area of about 5 square kilometres instead of the exact point. A responder sees your phone number only after accepting the report. After acceptance, the exact location and address are shown only to the assigned responder and to the owner and admins of that responder’s Melitelly account, and each such view is recorded in an audit log. Report photos are published at public links: anyone who has a link can open that photo. The web app re-encodes each swarm photo before upload, so the stored copy does not carry the camera’s location metadata. The public swarm map shows reports as approximate pins without your contact details. If you ask the public swarm map to use your location, your browser shares it with the web app, which centres the map on it and requests the pins for the surrounding region from our servers. If you rate a rescue, the rating and any review you write are shown to the responder. If you register as a swarm responder, we store the base location and address you give; people reporting a swarm see your display name, your distance from the swarm, your service range and the kinds of swarm you accept, and your rescue count and ratings.
• Online store orders. When you order from a seller’s Melitelly online store, we collect the name, email address, and phone number you enter, your pickup choice, and the order itself, and share them with that seller’s account so the seller can fulfil the order. If you pay and that email address is the verified email of a Melitelly account, the order is linked to that account. Payment is handled by Stripe.
• Pages you publish. If you publish an online store or a product traceability certificate, the information on it, such as your business name, logo, contact email, products, and the region and harvest details of a batch, is public to anyone who has its link.
• Data on your device. The mobile app keeps a copy of your operational data and unsent drafts on your device so fieldwork continues without a connection. Signing out removes it from the device.
• Billing data. If you subscribe to a paid tier, your Stripe customer and subscription identifiers are stored on your account. Card numbers are handled exclusively by Stripe; we never see them.
• Consent records. When you sign up we record that you accepted the current Terms of Service and Privacy Policy versions, the date of acceptance, and the IP address and user-agent we observed at the time. Users must be 18+ and confirm this at signup; we record this confirmation with the consent records.
• Crash reports. When the web or mobile app crashes or hits an unexpected error, it sends a crash report with technical details such as the app version, the type of error, and where in the code it occurred. Crash reports are configured to exclude your name, email address, account identifiers, the content you enter, and screenshots, and we do not link them to your account.
• Security and abuse-prevention signals. Sign-in and sign-up can include a Cloudflare Turnstile check, which evaluates browser or device signals and your IP address to block automated abuse. Firebase App Check confirms that requests come from a genuine copy of the app: the web app uses Google reCAPTCHA Enterprise, which evaluates browser signals and your IP address, and the mobile app uses Apple App Attest on iOS and Google Play Integrity on Android. We do not use these checks to identify or track you.
• Technical logs. HTTP request metadata, error traces, and audit events required to operate and secure the service. These are retained for a reasonable rolling window for debugging and fraud prevention.

3. How we use it

• To provide the core service you signed up for.
• To bill you on the tier you selected (paid tiers only).
• To run regionally-aware phenology and pest-pressure models against your data.
• To pass swarm reports to the responders you choose, and online store orders to the seller.
• To send operational email (account verification, receipts, security notices).
• To keep the apps reliable and fix crashes and errors.
• To comply with our legal obligations and defend against abuse.

We do not sell your data, use it for advertising, or track you across other companies’ apps or websites. We do not use your content to train public AI models. Aggregated, de-identified metrics (e.g., “X swarms rescued this month”) may be displayed publicly on our marketing pages.

4. Who processes your data

Apart from the sharing described in section 2 and at the end of this section, we share personal data with the service providers below, and only as needed to run Melitelly. Each provider receives the data it needs for its part of the service. When you choose Sign in with Apple or Google sign-in, Apple or Google also acts as your identity provider under its own terms.

• Google (Google Cloud and Firebase, including Firebase Authentication, Firestore, Cloud Run, Cloud Storage, Cloud Vision, Video Intelligence, Firebase App Check, reCAPTCHA Enterprise, Firebase Cloud Messaging, Google Maps Platform, and Google Fonts).Hosts the application, stores your operational data and media, authenticates your account, verifies app requests, and delivers the web notifications you turn on. Cloud Vision and Video Intelligence screen uploaded photos, videos, and documents for unsafe content. Google Maps Platform shows maps in the web app, so your browser sends Google the map area and your IP address when a map loads; our servers also use it to turn the address text you type into a location. Google Fonts serves the typefaces for the Melitelly website and web app, so your browser requests them from Google, which receives your IP address.Firebase privacy.
• Stripe. Processes subscription payments on paid tiers and, for sellers who connect a Stripe account, storefront payments.Stripe privacy.
• Apple. Provides Sign in with Apple when you choose it, and App Attest device checks for the iOS app.
• Cloudflare. Provides Turnstile abuse checks at sign-in and sign-up, hosts and delivers the Melitelly website and web app (Cloudflare Pages), and, only with your consent, runs Cloudflare Web Analytics on the website (see section 7).
• Sentry. Receives the crash reports described in section 2 from the web and mobile apps.
• Twilio SendGrid. Delivers our transactional email, such as account, receipt, and security emails.
• Expo. Delivers updates to the mobile app. When the app checks for an update, it sends Expo’s update service a random identifier for your installation, the app’s platform, version, and runtime version, the identifiers of the updates it has, and your IP address.

To produce forecasts, we send each yard’s location coordinates, without your name, email address, or account identifiers, to the public weather and climate data services Open-Meteo and NASA POWER. These coordinates are precise enough to identify where the yard is.

When a swarm responder chooses Directions, the swarm location opens in Google Maps or Apple Maps, which receive it under their own terms.

5. International transfers

Data may be processed outside your home jurisdiction depending on the configured cloud region and optional providers. The transfer mechanism applicable to a production region is documented and reviewed before that region is offered.

6. Your rights

Depending on where you live, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and the data associated with it, except as described in section 8.
• Export your data in a portable format.
• Object to certain kinds of processing, including marketing.
• Withdraw consent where we rely on consent as the legal basis.
• For EU/EEA/UK residents: lodge a complaint with your supervisory authority. For California residents: exercise CCPA/CPRA rights (we do not sell or share your personal information for cross-context behavioural advertising).

You can delete your account yourself in the mobile app under Settings › Your personal data. Otherwise, email us using the address below and we will delete it for you. Deleting your account does not remove your details from online store orders you placed; see section 8. If you bought without an account, email privacy@melitelly.com to ask us to remove your details.

To exercise any right, emailprivacy@melitelly.com. We respond within the timeline required by the law that applies to your request.

7. Cookies & tracking

We use the minimum set of cookies and similar browser storage needed to keep you signed in and remember your preferences. We do not use advertising cookies. A full inventory is available on request. The web and mobile apps contain no analytics or advertising SDKs.

On the Melitelly website, if configured, Cloudflare Web Analytics loads only after you chooseAccept all. Cloudflare measures public page visits and performance without analytics cookies. Choosing Essential only stops collection; withdrawal reloads the page. Global Privacy Control also keeps analytics off. We do not use advertising cookies or enable cross-context behavioural advertising.

8. Data retention

We keep operational data while your account is active. Account closure installs a permanent write fence and starts a durable, retryable deletion and anonymisation workflow across identity, operational, media, commerce, and audit records. Active legal holds pause the affected deletion. Financial or security evidence is retained only for the period approved for the production region; unsupported regions are not offered. Contact us for the schedule applicable to your account.

One exception applies for now. If you bought from a seller’s online store, deleting your account does not remove your details from the seller’s records of those orders. Your name, email address and phone number stay on the seller’s order and in the seller’s customer list, and your account identifier stays on the order if it was linked to your account. The seller’s account can still see them. If you bought without an account, email privacy@melitelly.com to ask us to remove your details. This is an interim measure; we will update this policy when it changes.

9. Children

Users must be 18+ and confirm this at signup. If you believe a minor has created an account, contact us and we will delete it.

10. Security

Access to production data is restricted to the smallest set of operators who need it. All transport is TLS-encrypted. Authentication is delegated to Firebase. Payment data is handled exclusively by Stripe. We run audit logs for all administrative actions.

11. Changes to this policy

When we change this policy, we post the updated policy on this page and update the version date at the top of the page. You can always find the current version atmelitelly.com/privacy.

12. Contact

Questions, complaints, or requests about this policy should go toprivacy@melitelly.com.

You can also write to us at Neuanth Inc, 15418 State Route 104, Ashville, OH 43103, United States.