Effective date: June 18, 2026 · Last updated: June 18, 2026
Mélange Studios LLC, a California limited liability company (“Mélange,” “we,” “our,” or “us”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Mélange mobile application (the “App”), the website at getmelange.app (the “Website”), and any related services (collectively, the “Service”). It also explains how our artificial-intelligence features handle the information you give them.
Please read this policy together with our Terms of Service. By using the Service, you confirm that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.
The short version. We collect what we need to run a cocktail app and make it feel personal: your account details, what you create and save, and how you use the App. We use artificial intelligence to generate recipes, images, and videos, which means the text and images you submit are sent to AI providers (such as OpenAI) to produce a result for you. We do not sell your personal information, we do not use it for cross-app advertising, and we do not use your content to train our own AI models. You can export or delete your data at any time.
The App asks for certain device permissions only when a feature needs them. You can change these at any time in your device Settings.
| Permission | Why |
|---|---|
| Camera | To scan bottle barcodes when you add items to your bar inventory. Camera frames are processed on-device for barcode detection; we do not record or upload video. |
| Photo Library (add only) | To save menus and creations you choose to export to your photo library. This is “add-only” access — the App does not read your existing photos. |
| Face ID / biometrics | To lock and unlock premium or private areas of the App. Biometric data never leaves your device; it is handled entirely by iOS, and Mélange never sees or stores it. |
| Location (optional, if enabled) | If and when an ingredient store-finder ships, to find nearby retailers. Off by default; you may decline and the App will continue to work. |
| Notifications (optional) | To send you reminders and updates you opt into. We may collect a push token for this purpose. |
We use the information we collect to:
We do not use your personal information for cross-context behavioral advertising, and we do not sell or rent it. See Section 6.
If you are in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, we process your personal data under the following legal bases:
| Legal Basis | Examples |
|---|---|
| Contract performance | Creating your account, generating and saving cocktails, managing subscriptions |
| Legitimate interests | Improving and securing the Service, analytics, fraud prevention, and personalization that you can object to |
| Consent | Marketing emails, optional precise location, optional notifications |
| Legal obligation | Tax and accounting records, responding to lawful requests |
Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
Mélange uses third-party artificial-intelligence services to generate cocktail recipes, ingredient substitutions, descriptions, images, and videos. We want to be clear and specific about how this works, so you can make an informed choice.
| Feature | Provider used | What we send |
|---|---|---|
| Cocktail recipe generation and refinement, substitutions, descriptions | OpenAI (GPT-4-class models), processed through our secure server | Your text prompt, selected ingredients, bar-inventory item names, flavor directions, occasion, and your taste profile |
| Cocktail images (rolling out) | fal.ai (Flux) with DALL·E 3 as a fallback; an AI vision model checks images for safety | A recipe-derived text prompt; no personal identifiers |
| Cocktail preparation videos (rolling out) | Runway | A recipe-derived text prompt and reference image; no personal identifiers |
These features depend on third-party providers and may be added, changed, or replaced over time; we keep the current list in Section 7 and will update it as features ship.
AI transparency. Content marked or presented as AI-generated within the App is produced by automated systems. It is provided for informational and entertainment purposes and should not be treated as professional, medical, or nutritional advice.
To make Mélange feel personal, we build a private profile of your taste from what you do in the App — the cocktails you view, save, make, and rate; your searches; your inventory; and your stated preferences. We use this profile to rank recommendations, tailor your home feed and discovery results, suggest substitutions, and decide which content to surface. We may also group users into anonymous “persona” clusters and estimate things like engagement to improve the product.
We do not sell, rent, or trade your personal information, and we do not share it for cross-context behavioral advertising. We share information only in these limited circumstances:
We never sell your personal data. Mélange does not participate in data brokering, cross-context behavioral advertising, or any practice that sells or shares your information for third-party marketing.
We rely on the providers below to operate the Service. Each is bound by contract to protect your data and to use it only for the purposes we specify. We may add or change providers as the Service evolves; we will keep this section current.
| Provider | Role | Data it processes |
|---|---|---|
| Supabase | Cloud database, authentication, file storage, and server functions | Account data, profile and taste data, your content and images, inventory, analytics and crash records (encrypted in transit; access-controlled per user) |
| OpenAI | AI cocktail generation and (rolling out) image safety checks | Your prompts, selected ingredients, inventory item names, and taste context |
| Amplitude | Product analytics | Pseudonymous usage events, a user ID, device and app info, and IP-derived approximate location. We do not send your name or email to Amplitude. |
| Cloudflare | Bot protection (Turnstile), content delivery, and Website hosting | IP address and a challenge token during sign-up/verification |
| Apple | Sign in with Apple, in-app purchases, optional iCloud sync, and push notifications | Authentication tokens, purchase/subscription status, and (if enabled) iCloud-synced content and a push token. Payments are handled by Apple; we never receive card details. |
| fal.ai and OpenAI (DALL·E) (rolling out) | AI image generation and fallback | Recipe-derived prompts; no personal identifiers |
| Runway (rolling out) | AI video generation | Recipe-derived prompts and reference images; no personal identifiers |
Some providers operate their own infrastructure on major cloud platforms. Each provider processes your data under its own privacy and security terms in addition to our contract with them.
We take the security of your data seriously and use commercially reasonable, industry-standard measures, including:
No method of electronic storage or transmission is completely secure, so while we work hard to protect your data, we cannot guarantee absolute security.
We keep personal data only as long as needed for the purposes in this policy:
| Data Type | Retention |
|---|---|
| Account, profile, content, and inventory | Until you delete it or your account |
| AI prompts and inputs (held by us) | Up to 90 days for abuse prevention and quality, then deleted or de-identified |
| AI inputs held by AI providers | Per the provider’s API terms (e.g., OpenAI up to 30 days), then deleted |
| Analytics events | Up to 24 months in our systems (we configure our analytics provider accordingly), then aggregated or deleted |
| Crash and diagnostic logs | Up to 90 days |
| Newsletter email | Until you unsubscribe |
| Purchase and tax records | As required by law (typically up to 7 years) |
When you delete your account, we delete or de-identify your personal data within 30 days, except where we must retain certain records to comply with law, resolve disputes, or enforce our agreements.
Depending on where you live, you may have some or all of these rights:
To exercise these rights, email privacy@melange-studio.com. We will respond within the time required by applicable law (generally within 30–45 days) and may need to verify your identity first. You will not be treated differently for exercising your rights.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights to know, delete, and correct your personal information, to opt out of its sale or sharing, and to limit the use of sensitive personal information — and the right not to be discriminated against for exercising them.
We do not sell or share your personal information for cross-context behavioral advertising, and we do not use sensitive personal information for purposes beyond providing and securing the Service. There is therefore no “Do Not Sell or Share My Personal Information” sale to opt out of; you may still exercise your other rights at privacy@melange-studio.com with the subject line “California Privacy Request.”
| CCPA Category | Examples | Sold/Shared? |
|---|---|---|
| Identifiers | Name, email, user ID, device identifier, IP address | No |
| Commercial information | Subscription tier and purchase status | No |
| Internet/network activity | App usage, features used, searches, AI requests | No |
| Geolocation (approximate) | City/region inferred from IP | No |
| Audio/visual | Photos and images you upload | No |
| Inferences | Taste profile and persona classification | No |
We use and disclose these categories for the business purposes described in Sections 2, 6, and 7.
If you are in the EEA, UK, or Switzerland, you have all the rights in Section 10, plus the right to lodge a complaint with your local data-protection authority. The data controller is Mélange Studios LLC. For data-protection questions, contact privacy@melange-studio.com. If we are required to appoint an EU/UK representative, we will identify them here.
Mélange is based in the United States, and your information will be processed in the United States and other countries where our providers operate. Where we transfer personal data out of the EEA, UK, or Switzerland, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses and require our providers to maintain equivalent protections. By using the Service, you understand that your information will be transferred to the United States.
Mélange is intended only for adults of legal drinking age — 21 or older in the United States, and the legal drinking age in your jurisdiction elsewhere (never under 18). The Service is not directed to children, and we do not knowingly collect personal information from anyone under 21 (or under the local legal drinking age). If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, contact privacy@melange-studio.com.
How age verification works — and what we deliberately do not collect. The app verifies age at first launch. Where available, we use Apple’s Declared Age Range feature, which shares only an age category (such as “18 or older”) — never a birthdate. Otherwise the app asks for your date of birth and checks it entirely on your device against the legal drinking age for your App Store region (for example, 21 in the United States, 20 in Japan, 19 in South Korea). Your birthdate is never stored, transmitted, or shared. We record only the fact that verification succeeded.
If we become aware of a security incident that compromises your personal data, we will investigate promptly and notify affected users and applicable regulators as required by law, without undue delay. Our notice will describe, to the extent known, what happened, the data involved, and the steps you and we can take.
The Website may use essential cookies needed for basic functionality and privacy-respecting analytics to understand how visitors use the site. The Website does not use third-party advertising cookies or tracking pixels. The App does not use cookies; it uses on-device storage (the Keychain for credentials and a local database for content) as described above.
Apple requires every app to display a privacy summary (“privacy nutrition label”) on its App Store product page. That label is a simplified summary of the practices described here; this Privacy Policy is the controlling and more complete description. The label reflects that we collect data such as contact info, identifiers, user content, usage data, diagnostics, purchases, and approximate location, and that we do not use any data to track you across apps and websites owned by other companies.
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date, and we will notify you by email or in-app notice and, where required by law, obtain your consent. Your continued use of the Service after an update means you accept the revised policy.
For questions or requests about this Privacy Policy or our data practices:
We aim to respond to privacy inquiries within 30 days.