Who we are
Melo & Lumi is published by Epaart s.r.o. It provides gentle stories and activities for children aged 2–5 and their families. This policy describes the app and its support, content-delivery and purchase-verification services. Parents can contact support@meloandlumi.com about privacy or information provided by a child.
Accounts and local information
There are no Melo & Lumi child or parent accounts. The app does not ask for child names, dates of birth, profiles or location, and does not access contacts, personal photos, the camera or microphone.
Story progress, completed activities, stickers and settings are stored locally. They are not sent to our billing service as analytics. Device or platform backup services may retain or restore app data according to their settings.
Purchases and subscription verification
Google Play processes Android purchases. Apple App Store processes purchases on iOS when available. We do not collect payment-card details or provide our own payment form; the relevant store handles payment under its own terms.
The app sends purchase tokens or receipts, available transaction identifiers, product/subscription information and app/platform identifiers to our verification service. We check evidence with the relevant store and retain protected records needed to verify access and recover unfinished purchases. Existing purchases can be checked on startup, return to the app and Restore Purchases. Child profiles and story progress are not included in these requests.
Review access
A code entered in the adult Review access area is sent securely to our server. The entered code is cleared and is not saved in app data, billing records or application logs. The app saves a server-issued authorization and checks it online to activate or renew access. This does not create a store purchase.
Story discovery and downloads
The app connects to our service to discover available stories and content updates. We use Cloudflare R2 to store and deliver story packages and catalogue preview images. Preview images can load when browsing the catalogue or map. Downloading or updating a story package requires the app's parental gate and download confirmation. Downloaded files are stored on the device and can be removed through the Parents area without deleting earned progress or stickers.
Cloudflare processes technical connection and request information, including the device's IP address and the requested content, to deliver and protect these downloads. Content is delivered over HTTPS using short-lived authorized links. The app does not include purchase tokens, receipts, review codes, child profiles, activity answers or sticker collections in requests to Cloudflare. Purchase verification remains with our verification service and the relevant app store.
Cloudflare's processing and retention of technical service information follow the applicable service terms and privacy policy, including the purposes for processing the information and applicable legal obligations. A download link's expiry does not mean that provider records are deleted at that time. For more information, see https://www.cloudflare.com/privacypolicy/ or contact us about content-delivery data and deletion requests.
Security, service providers and support
Our billing service uses protected purchase evidence, request identifiers, recovery state and limited error categories. Network addresses are used to derive short-lived protected rate-limit records, rather than being retained as raw addresses in the billing database. Application operational logs exclude purchase evidence and review codes.
We use store and hosting services, including Google Play, Apple, Render and Cloudflare, to operate purchases, verification, content delivery and service infrastructure. These providers may process technical connection information under their applicable terms. If you email support, we receive your email address and the message you send. Our support mailbox is hosted by Websupport.
Melo & Lumi has no advertising, advertising tracking or child behavioral analytics. We do not send children's story progress, activity results or sticker collections to an analytics service. There is no social posting or chat.
Google Play Billing automatically sends technical billing diagnostics to Google for billing reliability and troubleshooting. These diagnostics may include app and library versions, device/build and network characteristics, billing operations and results, and a random identifier used to link related billing events.
On supported Android devices, the audio playback system may also provide technical playback diagnostics through Android system diagnostic services. Google's collection of those platform diagnostics depends on device Usage & diagnostics settings. These technical diagnostics do not include children's story progress, activity answers, sticker collections, payment-card details or uploaded audio recordings.
Verification requests use HTTPS and retained purchase evidence is encrypted. No system can guarantee absolute security. Please do not send payment-card details, passwords, review codes or full purchase tokens in ordinary email.
Retention
Local progress and settings remain on the device until removed through app or platform controls. Backend verification information is retained while needed to check active subscriptions and resolve unfinished purchase processing. Eligible older records are removed through operator-run retention cleanup. Unresolved recovery work may require longer retention until it is resolved or reviewed for deletion. Short-lived security records help limit abusive requests.
Support email and temporary evidence are kept only while needed to handle the request and are deleted from active support records no later than 30 days after the case is closed. Unnecessary supporting material is removed sooner where practical. We retain a minimal record of the request's verification and outcome for 12 months after closure for accountability, repeat requests and applying approved deletions after disaster recovery. We then delete that record unless a separately documented legitimate requirement warrants retention. These are our operating policies, not automatic deletion deadlines for all purchase records.
Deletion from our live database or active support mailbox does not immediately erase every historical recovery copy. Temporary database and mail-provider backup copies may remain according to the applicable provider retention. We reapply approved deletions before a recovered database returns to normal use and do not intentionally restore deleted support material. Contact us about the information and recovery-copy limitations covered by your request.
Deletion and your choices
Uninstalling normally removes app-local data, subject to platform/device backups that may retain or restore it. Uninstalling does not delete our retained backend purchase-verification records or the store's records.
Parents can contact support@meloandlumi.com to request deletion of eligible retained information. Requests require verification and review before an authorized operator can remove records. Information still needed for active verification, unfinished purchase recovery or security may need to be retained. Ask support which records can be removed and how retained backups are handled. There is no automatic server-data deletion button and no Melo & Lumi account to close.
Deleting our records does not cancel a store subscription, issue a refund or erase Google's or Apple's records. Manage or cancel subscriptions through the store account used to purchase. Restoring or verifying an existing purchase can create necessary verification records again.
Policy updates and contact
We may update this policy when the app or its data handling changes, updating the date above. For privacy questions and requests, contact Epaart s.r.o. at support@meloandlumi.com. Our website is https://meloandlumi.com.