Melonset Privacy Policy

Last updated: June 4, 2026

Melonset is operated by Blockpulsar, Inc. ("Blockpulsar," "we," "us," or "our"), a U.S.-based company. This Privacy Policy describes how we collect, use, and protect your information when you use Melonset (the mobile app, website, and related services).

For privacy-related requests, or other legal or support questions, email support@melonset.com with the subject line Privacy Request.

1. Data Controller

Blockpulsar, Inc. is the data controller responsible for your personal data. To request our current business mailing address, contact support@melonset.com.

2. Information We Collect

We collect information needed to provide Melonset, including:

Information you provide

Account information, such as email address and display name (when you create an account or sign in).
Shopping list content, including items, quantities, notes, preferences, and categories.
Prompts, chat messages, and text you enter when using the AI assistant.
Voice input, when you use voice or speech features: audio may be captured on your device and, when you use AI-assisted voice features, audio or a transcript may be sent for processing to generate responses or add items to your lists.
Images and photos, when you upload or capture pictures (for example, of products, receipts, or packaging): image data may be stored on our systems and, when you use AI-assisted image features, sent to our AI provider to identify items, add them to lists, or generate responses.
Sharing and collaboration data, such as who you invite to a list and permissions you grant.

Information collected automatically

Usage data, such as features used, interactions, and session activity.
Device and technical data, such as device type, operating system, app version, IP address, language, and time zone.
Diagnostic data, such as crash logs and performance information.
Push notification tokens, if you enable notifications.

Information from third parties

If you sign in with Apple or another provider, we may receive information they share with us (such as a unique identifier and, where permitted, email address).

We do not knowingly collect personal information from children under 13 (or under 16 where required by local law). If you believe a child has provided us data, contact us and we will delete it.

3. How We Use Information

We use your information to:

Provide, operate, and maintain Melonset, including syncing and sharing lists.
Process your input through AI features and return shopping and planning suggestions (without using your content to train LLM models).
Authenticate accounts and secure the service.
Send service-related communications and push notifications (where enabled).
Monitor performance, fix errors, and prevent abuse or fraud.
Improve reliability, features, and product quality, including evaluating and improving AI-assisted features using aggregated or de-identified data where possible.

We do not sell your personal information.

4. AI Features, Third-Party AI Provider, and Your Consent

Melonset uses artificial intelligence to power the AI assistant, voice input, image recognition, and related features. Before you use these AI features for the first time, the Melonset app shows you what information may be sent, that it is sent to Google for processing on Google Cloud, and asks for your explicit permission. You can decline; AI features that require this processing will not send your content until you agree. You can review this policy in Settings (or the equivalent privacy area in the app). To withdraw consent for AI data sharing with Google after you have agreed, you must delete your account in Account Settings in the app, as described in Account and Data Deletion below.

Who receives your data

When you use AI features and have given permission, Blockpulsar transmits certain content to Google LLC for processing on Google Cloud. Google processes this data on our behalf to generate responses and perform tasks you request (such as updating your shopping list). Google is identified as a service provider in our agreements with Google, including Google Cloud’s data processing terms.

What data is sent to Google

Only data needed to fulfill your AI request is sent. Depending on how you use Melonset, this may include:

Data type	When it may be sent	Purpose
Text prompts and chat messages	When you type or send messages to the AI assistant	To understand your request and generate a reply or list updates
Shopping list context	When relevant to your request (for example, current list items, categories, or notes you reference)	To tailor suggestions and apply changes to the correct list
Images and photos	When you use AI-assisted image features (upload or camera)	To recognize products, receipts, or packaging and suggest or add items
Voice and audio	When you use AI-assisted voice features	To transcribe speech and process your request; this may include audio and/or a text transcript
Account or session identifiers	As needed to authenticate the request through our backend	To link processing to your account and secure the service; we do not send your password to Google

We do not send your payment information to Google for AI processing. We minimize what we transmit and do not send data to Google for AI features you have not enabled or consented to.

How data is collected and transmitted

You provide text, images, voice, and list content through the app when you choose to use AI features.
Our servers receive your request after you submit it in the app and, if you have consented, forward the applicable content to Google Cloud over encrypted connections.
Google processes the content to return a response to us; we then display the result in the app or apply list changes you requested.
Automatically collected technical data (such as device type or app version) may be used by us for security and operations; only the categories above are sent to Google for AI inference, unless we disclose otherwise in the app.

How we and Google use this data

Blockpulsar uses AI responses to operate Melonset, update your lists, and improve reliability and safety using aggregated or de-identified data where possible.
Google uses your content only to provide the AI service to Blockpulsar under our contract, in line with Google Cloud’s customer data and training-restriction terms.
We do not sell your personal information.

Your data is not used for LLM model training

We do not use your data to train, fine-tune, or improve large language models (LLMs) or other generative AI models. This includes your prompts, chat messages, shopping list content, images, photos, voice input, and AI responses.

Google does not use your data sent to Google Cloud for AI features to train, fine-tune, or improve LLMs or other generative AI models on your behalf or for other customers. Your content is processed only to fulfill your requests in Melonset, under Google Cloud’s enterprise AI and training-restriction terms.

We will not change this practice unless we clearly disclose it in advance and, where required by law, obtain your separate consent.

Third-party protections

Google processes personal data under Google Cloud’s Cloud Data Processing Addendum and related service terms, which require Google to handle customer data according to our instructions, apply security measures appropriate to the risk, and restrict use of your data for delivering the contracted services. We require our AI and infrastructure providers to maintain confidentiality and data-protection obligations comparable to those in this policy. If you have questions about Google’s role, see Google Cloud Privacy Notice.

Withdrawing consent

If you have agreed to AI data sharing, the only way to withdraw that consent is to delete your account in Account Settings in the app (see Account and Data Deletion). Until you delete your account, you may choose not to use AI features, but your prior consent remains in effect for as long as your account exists. Deleting your account stops new data from being sent to Google for AI features and initiates deletion of your associated personal data as described in this policy. Deletion does not by itself remove all copies of data already processed by Google or held in backups for a limited retention period; you may submit a Privacy Request for access or deletion rights described in Your Privacy Rights.

5. Shared Lists and Collaboration

When you share a cart (or any other data) with others:

People you invite (or who have access via a shared link, if available) can view and, depending on permissions, edit the cart (or any other data) you and others add.
You are responsible for choosing whom you share with and what data you put on shared lists.
Data added by collaborators is visible to others with access to that list.

6. How We Share Information

We may share information with:

Service providers that help us operate Melonset (for example, cloud hosting, authentication, analytics, and crash reporting), subject to confidentiality and data-processing obligations.
Google Cloud, when you use AI features and have consented, for Google to process the text, list context, images, and voice-related data described in Section 4 on our behalf.
Other users you authorize, when you share cart (or any other data) or collaborate.
Legal and safety recipients, when required by law, legal process, or to protect rights, safety, and security.
Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

We do not sell personal information for monetary consideration.

7. Data Retention

We retain personal data only as long as needed for the purposes described in this policy, unless a longer period is required by law. In general:

Account and list data are kept while your account is active.
After you delete your account, we delete or de-identify associated personal data within 30 days, except where we must retain limited information for legal, security, or backup purposes (typically no longer than 90 days).
Technical logs and diagnostic data are retained for a limited period appropriate for security and troubleshooting.

8. Account and Data Deletion

You may delete your account and associated personal data:

In the app: open Account Settings and use the account deletion option there.
By email: send a request from your registered email address to support@melonset.com with the subject Account Deletion.

We will confirm and process deletion requests within 30 days. Deleting your account does not automatically remove content on lists owned or shared by others; you should remove or transfer shared content before deletion where appropriate.

9. Security

We use reasonable administrative, technical, and organizational safeguards to protect your information. No internet-based service can guarantee absolute security. If we become aware of a data breach that affects your personal data and requires notification under applicable law, we will notify you as required.

10. International Data Transfers

Blockpulsar is based in the United States. If you use Melonset from outside the United States, your information may be processed in the U.S. and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses.

11. Your Privacy Rights

EEA and UK (GDPR / UK GDPR)

If you are in the European Economic Area or the United Kingdom, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data, subject to legal exceptions.
Object to or restrict certain processing.
Request data portability, where applicable.
Withdraw consent where processing is based on consent.
Lodge a complaint with your local data protection supervisory authority.

Our legal bases for processing may include performance of a contract (providing Melonset), consent (where required), compliance with legal obligations, and legitimate interests (such as security, fraud prevention, and improving the service), balanced against your rights.

To exercise these rights, email support@melonset.com with the subject Privacy Request. We will respond within one month, unless an extension is permitted by law.

California (CCPA / CPRA)

If you are a California resident, you may have the right to know what personal information we collect, use, and disclose; to request deletion; to correct inaccurate information; and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise California privacy rights, email support@melonset.com with the subject Privacy Request.

We will not discriminate against you for exercising privacy rights.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice in the app, on our website, or by email where appropriate. The "Last updated" date at the top indicates when this policy was last revised. Continued use of Melonset after the effective date of an update means you accept the revised policy, except where your consent is required by law.

Melonset is designed and developed by Blockpulsar, Inc.