Privacy Policy

Effective date: September 20, 2026

This Privacy Policy explains how Heartflow ("Heartflow," "Meylo," "we," "us," or "our") collects, uses, shares, and protects information when you use Meylo, including our mobile applications, websites, AI video-generation features, AI character and chat features, community features, and related services (collectively, the "Services").

By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services.

1. Information We Collect

1.1 Information You Provide

Depending on the features you use, we may collect information you provide directly to us, including:

Account information: such as your username, email address, login credentials, age or date-of-birth information, profile details, avatar, and account identifiers.
User content: prompts, text, images, videos, audio, character descriptions, profile information, comments, posts, messages, and other content that you submit, upload, generate, publish, send, or otherwise make available through the Services.
AI interaction data: conversations with AI characters, prompts, instructions, generated responses, feedback, and related interaction history.
Communications: information you provide when you contact customer support, report content, submit an appeal, respond to a survey, or otherwise communicate with us.
Transaction-related information: information about subscriptions, Credits, purchases, refunds, and transaction status. Payment card details are generally processed by the applicable app store or payment provider rather than stored directly by us.

1.2 Information Collected Automatically

When you use the Services, we may automatically collect:

device type, operating system, app version, language, time zone, device identifiers, advertising identifiers where permitted, and similar technical information;
IP address, approximate location derived from IP address, network information, and diagnostic data;
usage information, including screens viewed, features used, searches, clicks, interactions, session duration, referral information, and crash or performance data;
fraud-prevention, abuse-prevention, safety, and security signals.

1.3 Information From Third Parties

We may receive information from third parties, such as Apple, Google, analytics providers, advertising partners, authentication providers, payment processors, AI infrastructure or model providers, content-delivery services, and other service providers, subject to their applicable terms and your settings.

2. How We Use Information

We may use information for the following purposes:

to provide, operate, maintain, and personalize the Services;
to create and manage accounts and authenticate users;
to process prompts and other inputs and generate AI text, images, videos, audio, characters, or other outputs;
to provide AI chat, memory, recommendation, discovery, social, and community features;
to process subscriptions, Credits, purchases, entitlements, and refunds;
to analyze usage, troubleshoot issues, improve reliability, and develop new features;
to detect, prevent, and investigate fraud, abuse, security incidents, prohibited content, and violations of our Terms of Service;
to review content where reasonably necessary for trust and safety, moderation, support, legal compliance, or enforcement;
to communicate with you about your account, purchases, service changes, security, support requests, and other transactional matters;
to send promotional communications where permitted by law and according to your preferences;
to comply with legal obligations and protect the rights, safety, and property of users, Heartflow, and others.

3. AI Processing and Model Improvement

To provide AI-powered features, your prompts, uploads, chat messages, character data, and other content may be processed by Heartflow and by service providers that provide hosting, moderation, inference, storage, safety, or AI model services.

We may use interaction data, feedback, and content to evaluate and improve the quality, safety, and performance of the Services and AI systems where permitted by applicable law. Where required by law, we will provide applicable choices or rights to object to certain processing. We may also use aggregated or de-identified information for analytics, safety, research, and product improvement.

Private AI conversations are not intended to be publicly visible unless you choose to share or publish them. However, automated systems and, where necessary, authorized personnel or service providers may process content for service operation, safety, abuse prevention, support, and legal compliance.

4. Public Content and Social Features

Meylo may allow you to publish characters, generated videos, profile information, posts, comments, or other content. Content you choose to make public may be visible to other users and, depending on the feature, may be accessible outside Meylo or indexed by search engines.

Do not publish personal information or content that you do not want others to see, copy, save, redistribute, or use. Deleting public content may not remove copies previously saved or shared by others.

5. How We Share Information

We may share information with:

Service providers: companies that help us provide hosting, cloud storage, AI processing, content moderation, analytics, customer support, security, communications, payments, and other operational services.
Other users: when you choose to publish content, interact publicly, communicate with another user, or use social features.
Business and advertising partners: where permitted by law, for measurement, attribution, advertising, or campaign performance, subject to applicable consent and opt-out requirements.
Authorities and legal recipients: where we reasonably believe disclosure is required by law, legal process, or necessary to protect rights, safety, security, or prevent fraud and abuse.
Corporate transaction participants: in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction.

We do not disclose private chat content to advertisers for the purpose of serving ads based on the substance of your private conversations.

6. Cookies, Analytics, and Advertising Technologies

Our websites and Services may use cookies, SDKs, pixels, local storage, mobile advertising identifiers, and similar technologies to operate the Services, remember preferences, analyze performance, detect fraud, measure campaigns, and, where permitted, provide or measure advertising.

Where required by applicable law, we will request consent before using non-essential technologies. You may also be able to control certain tracking through device settings, browser settings, or privacy controls made available in the Services.

7. Payments and App Stores

Purchases made through Apple App Store, Google Play, or another third-party payment provider are subject to that provider's privacy practices. We may receive transaction identifiers, product information, purchase status, subscription status, currency, price, refund status, and similar information needed to provide purchased features, but we generally do not receive your full payment-card number from app-store transactions.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud and abuse, and protect the safety and integrity of the Services.

Retention periods may vary depending on the type of data, the feature involved, legal requirements, safety considerations, and whether the information is stored in active systems or backups. We may retain aggregated or de-identified information for longer periods where permitted by law.

9. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no system, network, transmission method, or storage method is completely secure, and we cannot guarantee absolute security.

10. Your Choices and Privacy Rights

Depending on your location, you may have rights to request access to, correction of, deletion of, or a copy of your personal information; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to opt out of certain targeted advertising, sale, sharing, or profiling activities as defined by applicable law.

You may also be able to update account information, manage communication preferences, change device permissions, control public visibility settings, or delete your account through the Services.

To exercise a privacy right that is not available directly in the Services, contact us at support@ravalive.com. We may need to verify your identity before completing certain requests.

11. International Data Transfers

Meylo may be operated using service providers and infrastructure located in multiple countries. As a result, your information may be transferred to, stored in, or processed in a country different from the country where you live. Where required, we use appropriate safeguards for international transfers of personal information.

12. Children and Age Restrictions

The Services are intended only for users who are at least 18 years old. We do not knowingly permit children under 18 to create or maintain an account. If we learn that personal information has been collected from a person under 18 in violation of this policy, we may take steps to delete the information and close the account.

If you believe that a person under 18 is using Meylo, please contact support@ravalive.com.

13. Third-Party Services and Links

The Services may contain links to, integrate with, or rely on third-party services. This Privacy Policy does not govern third parties' privacy practices. We encourage you to review their privacy policies before providing information to them.

14. Legal Bases for Processing in the EEA and UK

If applicable to you, we process personal data under one or more legal bases, including performance of a contract, our legitimate interests, compliance with legal obligations, protection of vital interests, and consent where required.

Our legitimate interests may include operating and improving the Services, maintaining security, preventing abuse, understanding product performance, and supporting users, provided those interests are not overridden by your rights and freedoms.

15. U.S. State Privacy Disclosures

Residents of certain U.S. states may have additional rights regarding access, correction, deletion, portability, and the ability to opt out of certain uses of personal information, including targeted advertising, sale, or sharing as defined by applicable state law. We will not discriminate against you for exercising a privacy right protected by law.

We may use analytics and advertising technologies that could constitute "sharing," "targeted advertising," or similar regulated activity under some U.S. state laws. Where required, we provide mechanisms to exercise applicable choices.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the Services or by other appropriate means. The "Effective date" above indicates when this Privacy Policy was last updated.

17. Contact Us

If you have questions, requests, or complaints about this Privacy Policy or our privacy practices, contact:

Heartflow
Email: support@ravalive.com