Privacy Policy

Last updated: October 27, 2026

My Mellow (“the app”) is published by Cinna Games (“we”). This policy explains what data the app handles and your choices. Contact: cinnagamesstudio@gmail.com.

What we collect

Account: an anonymous account is created when you open the app. If you choose “Continue with Apple”, we receive an Apple user identifier and, if you allow it, your name and email (Apple may hide your email).
Profile: the nickname you choose, your squirrel’s name and look, your garden, and a friend code that lets others add you.
Onboarding answers: the reasons you use the app, age range, gender, how you found us, your chosen habits and an optional invite code. All are optional or generic and used to improve the app.
Your content: habits, completions, moods, water intake, focus sessions, purchases made with in-app hazelnuts, and settings. Mood entries can be sensitive; they are only visible to you.
Friends: your friend list and requests. Friends can see your nickname, squirrel, hat, house and background.

What we do not do

We do not use advertising, we do not track you across other apps or websites, and we do not sell your data. The app has no real-money purchases; hazelnuts are earned in the app.

How we use data

To run the app, save your progress to your account, let you connect with friends, and improve the experience. Data is stored with our provider Supabase (servers in the EU, Ireland) and also on your device.

Sharing

We share data only with service providers needed to run the app (Supabase for hosting and authentication; Apple for sign-in). Other users only see the profile details listed above.

Retention and deletion

We keep your data while your account exists. You can delete your account at any time in the app: Settings → My account → Delete my account. This permanently erases your account, progress, friends and related data from our servers.

Your rights

Depending on where you live (including the EU/UK under the GDPR), you may access, correct, export or delete your data. Use the in-app deletion or email us and we will respond within 30 days.

Children

The app is not directed to children under 13 (or under 16 in the EU without parental consent). If you believe a child gave us data, contact us and we will delete it.

Security

Data is transmitted over encrypted connections and access is restricted to your account. No system is perfectly secure.

Changes

We may update this policy; the date above will change. Significant changes will be announced in the app.