Clear information, thoughtful boundaries
Privacy & safety
MellowRoom is a temporary shared play space for one host and one invited guest.
Who can enter a room?
Hosts need an existing active account. Guests use a private invitation or code and wait for the owning host’s approval. Guests have no permanent account and are not asked for names, ages, diagnoses or reasons for joining. This does not make room contents anonymous.
What happens to shared activities?
Current boards support activity switching and authorized reconnects during the room. They have an expiration deadline; ending a room triggers deletion, with retry cleanup after failures. They are not saved rooms, exports, histories or progress records. Drawings and toy arrangements can still be sensitive personal information.
What information is kept?
Host/admin accounts use an email, display name and authentication records. Invitations and guest access use temporary credentials stored as hashes or protected cookies. Minimal room status/timestamps and fixed security events help operate the service.
Current application settings schedule closed-room metadata for deletion after 7 days and security events after 30 days. Inactive host accounts become eligible after 90 days without account changes, once they own no retained rooms. Active accounts remain while needed for access; administrators require operator offboarding. Expired authentication records are swept.
Cleanup depends on the worker and services being available and can be delayed. Application deletion does not establish immediate removal from infrastructure logs or backups. Their locations, access and retention must be reviewed before real use.
Who can access information?
Application administrators have bounded account and operational access, without room contents, participant credentials, impersonation or room controls. Infrastructure operators and vendors can have technical access beyond these application permissions. We do not promise end-to-end encryption, zero operator access or guaranteed deletion.
Communication and sound
MellowRoom has no built-in calls, camera/microphone capture, chat, uploads, recording, transcripts or AI analysis. Professionals use their existing systems for communication, scheduling, consent, records and care. Ending or leaving this room does not end an external call. These separate responsibilities do not remove MellowRoom’s own privacy obligations.
Optional bundled soundscapes only play locally after you enable them. Your volume, mute and off choices stay on your device. They do not capture or transmit speech.