Melanix Health Inc.

Privacy Policy

Last updated: June 4, 2026

This policy explains what information Melanix Health Inc. ("Mela," "we," "us") collects when you use melanixhealth.com and the Field Notes email, how we use it, and the choices you have. We collect as little as possible. It covers this website and the Field Notes email only. The Mela app is not yet released; if and when it collects information, it will have its own privacy notice.

Who is responsible for your data

Melanix Health Inc. ("Mela") is the data controller responsible for the personal data described in this policy. For any privacy question, or to exercise your rights, contact us at skin@melanixhealth.com.

What we collect

• Your email address, only if you choose to join the Field Notes list. We use it solely to send you Field Notes when we publish, plus a small number of important announcements (such as the app launch). We do not run marketing drip sequences.
• Anonymous, aggregate usage data via Vercel Web Analytics — page views and general device/region information. This is cookieless, contains no personal identifiers, and is not used to track you across other sites.
• Standard server logs (such as IP address and browser type) kept briefly for security and reliability, as is typical of any website.

We collect this information from two sources: directly from you, when you choose to enter your email to join Field Notes; and automatically from your device and browser, through cookieless analytics and brief standard server logs when you visit the site.

We do not collect health information through this website, and we do not ask you to submit medical data here.

How we use it

• To send the Field Notes you subscribed to.
• To understand, in aggregate, which pieces are read so we can improve the publication.
• To keep the site secure and working.

In the categories used by California's privacy law, your email address and IP address are "identifiers," and the analytics and server-log data are "internet or other electronic network activity." We use the identifiers to deliver Field Notes and keep the site secure, and the activity data, in aggregate, to understand readership and maintain reliability. We do not use this information for profiling or automated decision-making, and we collect no other categories of personal information.

Our legal basis (for visitors in the EU/UK)

• Sending Field Notes — your consent, which you give by subscribing and can withdraw at any time by unsubscribing. Withdrawing consent does not affect emails already sent.
• Cookieless analytics and brief server logs — our legitimate interests in understanding which pieces are read, and in keeping the site secure and reliable. Because the analytics are aggregate and cookieless and the logs are kept only briefly, the impact on your privacy is minimal.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising (these are the meanings of "sell" and "share" under California's privacy law). We also do not use or disclose sensitive personal information except as needed to provide the newsletter and operate the site. Because we do not sell or share your personal information, we are not required to — and do not — provide a "Do Not Sell or Share My Personal Information" link. We use a small number of service providers strictly to operate the site:

• Resend — to deliver email to subscribers.
• Vercel — to host the site and provide cookieless analytics.

Resend and Vercel act as our data processors: they handle data only on our behalf and on our instructions, under data processing terms that require them to protect it, and they may not use it for their own purposes. We may also disclose information if required by law.

International data transfers

Mela is based in the United States, and our service providers (Resend and Vercel) process data in the United States. If you are in the EU or UK, this means your information is transferred to the US. We rely on the safeguards required by law for such transfers — the EU-US Data Privacy Framework where our providers are certified under it, and the European Commission's Standard Contractual Clauses (plus the UK Addendum for UK transfers) as a backstop. You can ask us for more detail at skin@melanixhealth.com.

Cookies

This site does not use advertising or cross-site tracking cookies, and our analytics are cookieless and store nothing on your device. For that reason, we do not show a cookie consent banner — there is no tracking technology that would require your consent.

Your choices

• Unsubscribe at any time — every Field Notes email includes a one-click unsubscribe link, and you can also unsubscribe at any time by emailing skin@melanixhealth.com.
• Access, correct, delete, or port the email we hold for you — and object to or restrict our processing of it — by writing to skin@melanixhealth.com.

Your rights

We send Field Notes only to people who asked for them. If you are in the EU, the UK, or another region with comparable data-protection law, you have the right to: access the personal data we hold about you; correct it if it is wrong; delete it; restrict or object to our processing of it; receive it in a portable, machine-readable format; and withdraw your consent to our emails at any time (just use the unsubscribe link, or write to us). Because the only personal data we hold is the email address you gave us with your consent, withdrawing consent — unsubscribing — also ends our use of it. To exercise any right, email skin@melanixhealth.com. We will respond within one month, there is no charge, and we will not treat you differently for asking. If you are in the EU or UK and believe we have mishandled your data, you also have the right to complain to your local data protection authority — for example, your national supervisory authority in the EU, or the Information Commissioner's Office (ICO) in the UK — though we would appreciate the chance to address your concern first at skin@melanixhealth.com.

If you are a resident of California or another US state with privacy rights, you have similar rights to access, correct, delete, and receive a copy of your information, and to not be discriminated against for exercising them. To make a request, email us at the address above; we will verify it by confirming control of the email address in question, and we will respond within 45 days (we may extend once by another 45 days for a complex request, and will tell you if we do). You may use an authorized agent to submit a request on your behalf, and we may ask the agent for proof of your written permission. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we will not deny you Field Notes, charge you a different price, or give you a lesser experience because you exercised any privacy right.

Data retention

We keep your email for as long as you remain subscribed. If you unsubscribe or ask us to delete it, we remove it promptly. Server logs are retained only briefly — no more than 30 days — for security and troubleshooting, after which they are deleted or overwritten. Our analytics data is aggregate and contains no personal identifiers, so it is not tied to you and is kept only in summary form.

Children

This site is for adults and is not directed to children. We do not knowingly collect personal data from anyone under 16 (or the minimum age set by your country's law, which in some places is 13; in the United States, our practices also meet the Children's Online Privacy Protection Act, which protects children under 13). If you believe a child has subscribed, write to us at skin@melanixhealth.com and we will delete the information.

Changes

If we update this policy, we will change the date above. Material changes will be noted clearly.

Contact

Questions about privacy: skin@melanixhealth.com.