Privacy Policy

Last updated: 23 October 2026

In short.

Your dictation history, transcriptions, clipboard, screenshots and tasks stay on your Mac.
When you use a cloud feature, the audio or text goes through our server to the provider that processes it, and the result comes back. We don't store it.
On our server we keep your account (email, name, picture), your organisation, and usage counts such as minutes and words, never the words themselves.
We don't sell your data, show ads, or use trackers on this website.

1. Who we are

Melonn is made by Douxl Technologies FZE, a company registered in the United Arab Emirates (“Douxl”, “we”, “us”). This policy covers the Melonn app for Mac, the Melonn server (api.melonn.si), the admin panel (admin.melonn.si) and this website (melonn.si). Douxl is responsible for the personal data described here. For anything about privacy, write to [email protected].

If your organisation gives you access to Melonn, your organisation also decides some things, such as which plan you are on, and its owners and admins can see your usage as described below.

2. What stays on your Mac

The Melonn app keeps these on your Mac only, in its data folder and the macOS Keychain. They are not sent to us:

your dictation history and its corrections, file transcriptions, clipboard history, screenshots, captured text, tasks, your dictionary and your settings;
your Melonn sign-in (a refresh token in the macOS Keychain).

Melonn can back these up into a file on your Mac, encrypted with a restore key that only you hold. Uninstalling the app does not delete this data; you can delete it yourself at any time.

Apple's on-device speech recognition, formatting and translation run entirely on your Mac. Nothing leaves your Mac when you use them.

3. What we collect on our server

Data	Why
Account: your email address; with Google sign-in, also your name and profile picture address and Google's account identifier	To create your account, sign you in and show who you are to you and your organisation's admins
Sign-in records: each sign-in attempt with the email address and IP address it came from, one-time sign-in codes and session tokens (stored only as fingerprints), and each session's app or browser name and IP address	To keep you signed in, end sessions when you sign out, and protect accounts against abuse
Organisations: organisation names, members and their roles, invitations (including the email address invited)	To let organisations manage their members
Usage records for each cloud request: the time, the kind of work (speech-to-text, formatting or translation), the model used, the amount (seconds of audio, number of tokens and words), credits, how long it took, whether it worked, and the app version	To show you and your organisation your usage, to run plans and allowances, to compare models, and to keep costs in check
Admin actions: a log of changes made by administrators, such as blocking an account or changing a plan	Security and accountability

What we do not keep: the audio you record, the text of your dictations, and the text sent for formatting or translation. Our server passes them to the provider and returns the result; it does not write them to its database or its logs.

The website melonn.si sets no cookies and uses no analytics or trackers. The admin panel keeps your sign-in in your browser tab's session storage, not in cookies.

4. Cloud features and the providers that process them

Some features are processed by other companies on our behalf. They receive only what they need for the request:

ElevenLabs (speech-to-text, when you choose the cloud engine): the audio of that dictation or file, and the words in your dictionary.
Anthropic (Claude, for smart formatting and translation when you choose Claude): the text to format or translate, the name of the app you are typing into, and the words in your dictionary.

These providers process the data under their own terms for business customers. Which provider and model handles a request is set on our server for your plan or organisation, so it can change without an app update.

We also use these service providers to run Melonn:

Hetzner (Finland, EU): the servers and database that run Melonn.
Cloudflare: secure connections and the network between you and our servers.
Amazon Web Services (Amazon SES): sending sign-in and invitation emails.
Google: “Sign in with Google”, if you use it.

Some of these providers are outside your country, including in the United States and India. Where the law requires it, we rely on the safeguards in our agreements with them.

5. Google sign-in

If you sign in with Google, we receive your name, email address, profile picture address and Google account identifier, and nothing else from your Google account. We use them only to create and identify your Melonn account. Melonn's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use this information for advertising, we don't sell it, and we don't use it to train AI models.

6. Who can see your data

You see your plan and usage in the app.
Owners and admins of your organisation see its members, roles, invitations, and each member's monthly usage in credits, minutes and words. They never see what anyone said.
Melonn administrators at Douxl see accounts, organisations and usage records, including what the cloud requests cost us, to run and support the service.

We don't sell personal data and we don't share it for advertising.

7. How long we keep it

We keep account, organisation and usage records while your account exists. Sign-in codes expire within minutes. If you ask us to delete your account, we delete or anonymise its records within 30 days, unless the law requires us to keep something longer. Copies in our encrypted backups are removed as the backups expire, within 30 days.

8. Your choices and rights

Use only on-device engines, so nothing you say leaves your Mac.
Sign out at any time; this ends your session on our server.
Ask us for a copy of your data, to correct it, or to delete your account, by writing to [email protected]. Depending on where you live, you may have further rights, such as objecting to some processing or complaining to a data protection authority.

9. Security

Connections to Melonn are encrypted. Sign-in uses one-time codes bound to your device (PKCE), and refresh tokens are stored on our server only as fingerprints. Provider keys are kept on our server and never sent to your Mac. Access to our servers is limited to our administrators over a private network.

10. Children

Melonn is made for work and is not intended for anyone under 16.

11. Changes

If we change this policy, we'll update the date at the top. If a change matters, we'll tell you in the app or by email before it applies.

12. Contact

Douxl Technologies FZE, United Arab Emirates · [email protected]