Privacy Policy

Last updated: 2026-05-15 · Contact: support@melo.show

Melo is a concert-tracking app. This page explains what data we collect, why we collect it, and what you can do about it. Plain English first, the lawyers can have their version when we have lawyers.

What we store

• Account info: your email and a username you choose.
• Your shows: artists, dates, venues, scores, vibes, notes, setlists, photo URLs — the stuff you log.
• Settings: app preferences and (if you provide one) your Setlist.fm API key, encrypted at rest.
• Push tokens: an opaque identifier for your iPhone so we can send tour-alert notifications. You can disable these in iOS Settings → Notifications → Melo.

What we don't store

• We don't sell your data. Ever.
• We don't track you across other apps or websites.
• We don't store your decrypted Setlist.fm key in our database — it lives encrypted, decrypted only briefly inside our serverless functions when you make a request.

Third-party services

Melo talks to these external services on your behalf:

• Supabase — our backend / database / auth.
• Ticketmaster — upcoming shows and festivals.
• Setlist.fm — past setlists (only if you provide a key).
• Apple Music / iTunes — 30-second song previews.
• Deezer — artist images.
• MusicBrainz — artist bios.
• Apple Push Notification service — delivering tour alerts.
• PostHog — anonymous product analytics, US-hosted.

Usage analytics

To understand how Melo is used — and where it can be better — we record anonymous product events through PostHog, a privacy-focused analytics service. These events are about actions, not content: opening the app, starting to log a show, finishing a show, viewing your Wrapped. We never send PostHog the artists, venues, notes, photos, or any other content you enter. Events are tied to your account's internal ID — never your email or name. We don't record your screen, and we don't track you across other apps or websites.

Your rights

You can delete your entire account from Settings → Account → Delete Account. That wipes every show, ranking, photo, and setting you've ever stored, plus all your push tokens. It can't be undone.

Children

Melo is rated 4+. We don't knowingly collect data from children under 13. If you believe a child's data has been collected, email support@melo.show and we'll delete it.

Changes

If we materially change this policy, we'll bump the date at the top and let you know in-app the next time you sign in.