MelliBridge privacy policy

Publisher and contact

MelliBridge is published by WeCareAboutYou. Contact contact@mellitinexus.com about privacy, support or account/data removal. Local profiles and the optional connected account are separate.

Local family workspace

Local child and parent profiles, schedules, handovers, expenses, health and wellbeing notes, growth records, care-support plans, small attachments and the local chat archive stay in local app preferences. Signing in does not automatically upload this original local workspace. Importing an existing category into the optional shared organizer requires an explicit selection. Local preferences and shared-record caches are not encrypted by this app.

Android preference backups and device transfer are excluded in this build. In Android version 1.4.1 and later, attachments are read within the file-size limit without creating a temporary input copy. Clear local data also checks removal of temporary import files left by earlier versions. Earlier Android builds may retain those temporary import files after in-app local clearing; Android app-storage controls can remove them, subject to platform behavior. Clearing local app storage cannot erase copies already exported or backed up by other tools.

Optional connected account

Shared family records, shared messages and Community use verified Supabase accounts. Sign-in sends the email address and authentication information you supply to the configured Supabase service. MelliBridge uses the account ID, display name, family memberships and invitation information to provide access to these features. The configured suite uses a shared sign-in identity across connected apps.

Authentication tokens are held in memory for the app session. Network requests to Supabase use HTTPS. Local records are not automatically included in these requests.

Optional shared family organizer

When you select a shared family workspace, records you create or import there are sent to Supabase and made available to the current authorized parents in that family. This may include child names and birth dates, parent labels and email addresses, photo references, calendar events, tasks, pickup/drop-off times and locations or addresses you enter, expense amounts and purchase/receipt information, health and growth measurements, behaviour and wellbeing entries, responsibility logs, allergy/autism/disability care-support plans, and document names, descriptions, references and attached contents.

Sharing these categories is optional. Only add information you are entitled to share with the other parent. The shared organizer is separate from the original local organizer. Edits refresh while the app is in use; pending changes and conflicts can require a decision before another upload. This is not a background push-notification service or an end-to-end encrypted medical vault.

Attachments are limited to 2 MiB per file and 5 MiB total in a workspace; the complete snapshot is limited to 8 MiB. A file path or link without embedded contents does not upload the original file. Opening an external photo/file link can contact its host.

Server access is tied to current family membership and parent-pair version. A changed pairing starts a separate snapshot. An old pairing's device draft is not inherited automatically; any supported recovery/import is an explicit action by the signed-in user on that device. Former parents may still hold information already downloaded or exported. Revoking server access cannot remotely erase those copies.

Private conversations and optional AI

Private conversation messages are stored by the connected service and shown to the current authorized parents. Family membership changes affect access to conversation history.

Where available, AI is requested explicitly and requires consent from both current parents. A request sends the question and bounded current-conversation context to OpenAI through a server adapter. At most 20 recent current-version messages, each limited to 1,000 characters, and a question limited to 1,000 characters are included. Organizer records, child profiles, health records and documents are not attached automatically. Information you choose to include in a message may still be sensitive.

The adapter sets OpenAI response storage to false. This does not mean zero provider retention: provider security, abuse-monitoring or other permitted operational processing may still apply. The AI offers communication suggestions and cannot agree for a parent, change plans or contact another person.

Community and safety

Community posts are visible to signed-in members under the author’s display name. Post content, reports, blocks and related account identifiers are stored by the service. Posting is optional. Avoid children’s identifying details, contact information, precise locations and private health information.

Report controls create moderation records and hide reported posts for the reporter. Blocking limits mutual post visibility. These controls do not establish automatic or continuously staffed moderation. The publisher can review reports. Read the community rules before posting.

Retention and deletion

Current shared organizer records remain until replaced or deleted through applicable app or operator controls. Old parent-pair organizer snapshots become eligible for cleanup after 30 days without an update, and retry receipts after 90 days. A daily server job and authorized sync cleanup enforce these rules. Retry receipts store operation identifiers and hashes rather than another copy of attachment contents. These limits do not define retention for chat messages or provider backups. The in-app Delete MelliBridge shared data action removes shared families/conversations involving you, their organizer snapshots and retry receipts, and your MelliBridge profile, community posts, reports, blocks and rate records. It preserves your local workspace and the suite-wide email identity used by other apps.

To request removal of a MelliBridge account or the shared sign-in identity, use the account and data deletion page. State the intended scope because removing a shared identity can affect other connected apps. Ownership verification may be needed. After ownership and scope are verified, the publisher handles the request within 30 days and confirms the result. Provider logs and backups are subject to the providers' separate privacy and retention policies.

Remove local records separately in the app’s local-data controls where provided, or Android Settings → Apps → MelliBridge → Storage → Clear data. This removes device records and cached drafts, but does not remove server records, another device’s cache or exported files. Selecting a shared workspace again can download records still retained on the server.

Other services

The reviewed MelliBridge UI uses bundled/system Material typography and does not call Google Fonts. No ad, billing or analytics SDK is initialized in the app code. Supabase and OpenAI may process connection/request metadata for operation, security or provider purposes; their retention and contractual settings are separate from the client source.

Opening an external policy page or composing a support email uses your browser/email provider. Support receives the message you choose to send. Avoid sending unnecessary child or medical details.

Adults and health information

MelliBridge is intended for adult parents and caregivers. Health and care-support notes are planning information, not clinical recommendations. The app is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. It provides no emergency response, custody determination or legal advice. Consult an appropriate qualified professional for medical or legal decisions.