Privacy Policy
1. What MeloMove is
MeloMove uses AI to match music to your motion (CoreMotion + optional front-camera Desk Watch) and surface a fitting micro-break when stillness piles up — all played from your Apple Music. For solo desk workers who don’t want a wristband nagging them. Not a medical device, not a fitness tracker.
2. What we collect
(a) Motion segments classified by CoreMotion (walking / running / cycling / automotive / stationary); (b) daily rollups derived from those; (c) profile fields you enter (age range, gender, focus, experience, height, weight); (d) saved favourites and their labels; (e) your LLM API key, encrypted in the iOS Keychain; (f) notification preferences. MeloMove does not collect your name, email, contact list, photos, browsing history, or any cross-app identifier.
3. Where data lives
On your iOS device (local store) and your private CloudKit database (iCloud.ai.melomove, only your Apple ID can read it). SYMBOT LTD has no access to either. Profile in the app’s Documents folder. API keys in the iOS Keychain. No user data is transmitted to SYMBOT LTD servers — there are none for user data.
4. Desk Watch (opt-in front-camera feature)
Off by default. Enable or disable any time from the always-visible DESK WATCH · ON / OFF toggle on the dial, or from Settings → Privacy → Desk Watch. When enabled, MeloMove uses the front camera to detect when you’re at the desk, when you start stretching, and when you step away — designed for solo workers, writers, programmers, traders whose setup has only the user in frame. Frames are processed in-memory by Apple’s Vision framework and NEVER recorded, written to disk, uploaded, or transmitted off-device. Only a small classification (still / active / away) flows into the on-device + iCloud-private movement history. The camera session stops immediately when toggled OFF. iOS-level camera permission is managed in iOS Settings → Privacy → Camera.
5. Location (WeatherKit)
MeloMove uses Apple’s WeatherKit for weather context. Your approximate location is shared directly with Apple to fetch conditions. SYMBOT LTD does not receive or retain it. Disable in iOS Settings → Privacy → Location Services → MeloMove.
6. iCloud sync
Motion history syncs across your devices via Apple’s CloudKit private database. SYMBOT LTD has no access. Revoke MeloMove’s iCloud access in iOS Settings → Apple ID → iCloud → Apps using iCloud.
7. AI Coach (BYOK)
The AI Coach is bring-your-own-key. Pick a provider in Settings → AI Coach (OpenAI, Anthropic, Google Gemini, Qwen, OpenRouter) and supply your own API key. The key is encrypted in the iOS Keychain. Requests go directly from your device to your chosen provider. SYMBOT LTD never sees the key, never proxies the request. Data sent to the provider is governed by their privacy policy.
8. Apple Music
MeloMove plays through MusicKit using your own Apple Music subscription. Apple Music is the catalogue MeloMove draws from. Apple handles playback, search, and the subscription. SYMBOT LTD does not receive your listening history or any Apple Music account data.
9. Notifications
One local category: the long-sit nudge. Scheduled and delivered locally on your device. No notification content reaches SYMBOT LTD or any third party.
10. No analytics, no advertising
No third-party analytics SDK, no crash reporter, no advertising identifier, no telemetry. The app does not phone home.
11. Data retention
Raw motion segments kept for 90 days, auto-trimmed on launch. Daily rollups kept indefinitely. Export your full local archive as JSON via Settings → Your Data → Export my data. Uninstalling deletes the local store; iCloud data follows Apple’s policy.
12. Children
MeloMove is not designed for children under 13. SYMBOT LTD does not knowingly accept data from children under 13. Parents or guardians: uninstall the app and email support@sym.bot.
13. Changes to this policy
SYMBOT LTD may update this policy. Changes take effect when published on this page. Continued use after a published change constitutes acceptance.
14. Contact
support@sym.bot for privacy questions. SYMBOT LTD has no access to user data, so account-specific data recovery is not possible.