Privacy policy

Nothing about you, without you

We respect the privacy of participants and app users and developed the Melon Privacy Policy to demonstrate our commitment to protecting your privacy.

The Melon Privacy Policy is intended to describe for you, as a user of Melon, why we collect personal and health information (“information”) about you, how we collect and “process” (store, use, and share) it, and your choices about such uses and sharing.

The Melon Applications are created by Pegasus Health Apps Ltd. (also called "Melon", "we", "us" and "our" in this privacy policy).

We encourage you to read this Privacy Policy carefully when using Melon.

Your consent

By agreeing to this Privacy Policy, you are consenting to the collection and processing of your information as set out in this Privacy Policy now and as amended by us.


Personal information is information about a living person. It is any information that identifies you, or is capable of identifying you, and includes things like your name and NHI number.

Health information is information relating to any past or present physical or mental health condition of an individual, or the provision of healthcare to an individual. When we say ‘information’, we mean both your Personal and your Health Information

Why do we collect information about you?

We collect information about you for the following purposes:

  • Provide our Services to you
  • To contact you for administrative or technical purposes
  • Personalise our Services to your particular circumstances
  • Connect you with other people who share the same characteristics and/or problems as you. We do this with your consent. (See “Sharing of your information” below)
  • Improve our Services based on your use of them by using anonymised data.
  • Report on the outcome of our Services in order to promote and evaluate them using anonymised information.

Collection of information for our Services

Melon has two types of Services:

  1. As part of Integrated Service Delivery - where your general practitioner/family doctor, general practice staff, marae clinic, community health provider or mental health clinician (“healthcare provider”) has referred you to Melon as part of their provision of care for you. They may use the Melon app to direct message you and/or provide video consults with you. In this Service, Melon may collect your phone number and other information, including your NHI number.
  2. Self-referral and sign-up - where you sign up to Melon on your own, outside the Service of a healthcare provider. In this Service, the only information collected from you is what you enter when you sign up to the Service. This does not include your phone number or NHI number.

Because our Programmes group participants are based on certain characteristics, such as diagnosis or region, there is potential that fellow community group members may be co-workers or other acquaintances. You can choose an username and profile picture that does not identify you.

Our Services may provide an optional online community where you may anonymously post and share information about yourself and your experience. This may include your location, username, and picture.

What information does the Application collect and how is it collected?

Information collected from you or your healthcare provider

The Application obtains the information you provide when you register as a user. Registration with us is optional. However, please keep in mind that you may not be able to use any of the features offered by the Application, unless you register with us.

When you register with us and use the Application, you generally provide:

  • Your name, email address, a username, password, and other registration information
  • Transaction-related information, such as when you download or use Applications from us
  • Information you enter into the Application during participation in a Programme
  • Information you provide us when you contact us for help

You may change or delete any information you provide at any time. See the “Right of access and correction” section of this Policy below, Melon may also collect information directly from your healthcare provider(s), clinic, nurse(s), coach(es), as well as third parties involved in the delivery of a Programme. This information may include unique identifiers, such as your NHI number.

As a Visitor, you can browse our website ( to find out more about our apps and other Services. You are not required to provide us with any personally identifiable information as a Visitor.

Automatically collected information

The Application may collect certain information automatically, including, but not limited to:

  • The type of computer or mobile device you use
  • Your computer or mobile devices unique device ID
  • The IP address of your computer or mobile device
  • Your operating system
  • The type of internet browsers you use, and
  • Information about the way you use the Application.

We use the information we collect to help us continuously understand and optimise the experience for you and ensure consistency across user devices. We only use your anonymised data for the purpose of internal analytics to improve our Services. This involves user activity, such as which pages get clicked on, and whether a user has visited before.


Our website uses “Cookies” to identify the areas of our website that you have visited. A Cookie is a small piece of data stored on your computer or mobile device by your web browser. We use Cookies to personalize the content that you see on our website. Most web browsers can be set to disable the use of Cookies. However, if you disable Cookies, you may not be able to access functionality on our website correctly or at all. We never place personally identifiable information in Cookies.

Does the Application collect precise real-time location information of the device?

This Application does not collect precise information about the location of your device.


We will not contact children under age 13 about special offers for marketing purposes or solicit data without a parent or guardian’s permission. If a parent or guardian becomes aware that their child has provided us with information without their consent, they should contact us at We will delete such information from our files within a reasonable time.

How is my information used?

We use and disclose information that we collect about you in order to:

  • Provide our Services as part of Programmes
  • Improve and personalise your experience
  • Share your information with other users within the Programme you are participating in (see section below “Sharing on our Service”)
  • Manage your account and resolve technical issues with a Programme
  • Communicate with you by email, and/or mobile devices about your use of Melon
  • Enforce the Terms and Conditions
  • Manage our business and perform functions as otherwise described to you at the time of collection
  • Perform research and analysis about your use of Melon and the outcomes achieved
  • Report the outcomes of our Services to our partners
  • Promote our Programmes/Services using anonymised data to potential clients

Data collected by the Service will not be shared or processed for any other reason than outlined in this policy. If we share your information for another purpose, we will gain your consent first.

We won’t ever use your email to spam you with marketing promotions not related to the Application or Programme.

Sharing of your information on our Service

Who can access my information?

By using the Services, you authorise Melon to disclose any or all of the collected personal or health information to:

  • Healthcare providers who referred you to the Service as part of their care for you
  • Your health coach if you have one assigned to you, and
  • Authorised administrative Melon personnel for the sole purpose of providing our Services

Your eligibility for and participation in Services/Programmes indicates you meet the inclusion criteria for the Services, which will by default identify the presence of specific health conditions or risk factors you may have. The range of personal and health information healthcare providers and administrative Melon personnel may have access to, includes but is not limited to, your username and profile picture, and by inference, the link to your diagnosis and/or reason for programme participation.

We will only ever share your information with people you have consented to receiving that information. These may include: a person of your choice, your healthcare provider, your health coach.

Please note we may contact crisis and/or emergency Services if there is concern for your safety.

Third party Services we use and their access to your information

We employ third party Services to provide functions on our behalf. We do not disclose your information to third parties without your consent, except for what is required for them to be able to provide their Services on our sites.

Google Firebase

We use the following Firebase features to help us build and maintain our apps: Realtime Database, Crash Reporting, Cloud Messaging, and Authenticator.


We use all Mixpanel features, which are used to better understand how people navigate the programme. This includes the tracking of your computer or mobile device's IP address. The information you provide is not included in Mixpanel’s tracking. The service provides information on how Mixpanel uses data it collects.

Social Media and Identity Providers

To use certain App or Programme features, you will have to create an account. You can choose to do this with certain third-party social media Services or Identity Providers, such as Facebook or Google. When you do so, we will create your account by taking certain personal information from these providers. This includes your email address and other personal information that your privacy settings allow us to access.

Our Applications may include social media features, such as the Facebook “Like” button, and widgets, such as the “Share This” button. These features may collect your IP address, which page you are visiting on our Applications, and may set a Cookie to enable the feature to function properly. Social media features and widgets are hosted by a third party or hosted directly on our Applications. Your interactions with these features are governed by the privacy statement of the company providing it.

Other legal reasons for disclosure of information

We may disclose information under certain circumstances, including:

  • As required by law, such as to comply with a warrant, or legal process
  • When we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a third party request. For any requests for information from third parties we will confirm the legal basis for the request first and follow our obligations under the Privacy Act

If Pegasus Health Apps. is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our Application of any change in ownership or use of this information, as well as any choices you may have regarding this information.

Rights of access and correction

You can access and update your information online by logging into your account.

You have the right to access and to request correction of any of your information provided to us in connection with your use of the Programme. If you would like to view the information relating to you that we have stored, or to request correction of such personal information, or if you have any concerns regarding your privacy, please contact us

What are my opt-out rights?

You can stop all collection of information by the Application easily by deleting your account under ‘Settings’. You can also request to have information corrected via email

To opt-out of all analytics we use, you can uninstall the Application or stop using our Services.

Data retention policy, managing your information

We retain users’ health information for 10 years after last date of modification, as required by law.

We retain Automatically-Collected information for up to 24 months, and after that time it is then stored in aggregate form.

Inactive accounts

In the interest of protecting your personal information we will deactivate your account six months after your last activity. Data will be retained, as required by legal requirements and best practice. Should you wish to reactivate your account, please contact us via indicating your wish to reactivate your Melon profile. We will respond in a timely manner.

If you’d like us to delete data that you have provided via the Application, please contact us at and we will respond in a reasonable time. Please note that some or all of the user-provided data may be required for the Application to function properly.


We take safeguarding the confidentiality of your information very seriously. We provide physical, electronic, and procedural safeguards to protect information we process and maintain. For example, we limit access to this information to authorised employees and contractors who need to know that information in order to operate, develop or improve our Application. Please be aware that, although we endeavour to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

Your data is stored, encrypted, and protected using AWS servers in Sydney. This is the preferred data storage location for Manatū Hauora | Ministry of Health.

Links to other websites

Our Application may contain links to other websites that are not under our direct control. These websites may have their own policies regarding privacy. We have no control of, or responsibility for, linked websites and provide these links solely for the convenience and information of our visitors. You access such linked websites at your own risk. These websites are not subject to this Privacy Policy. You should check the privacy policies, if any, of those individual websites to see how the operators of those third-party websites will utilise your personal information. In addition, these websites may contain a link to websites of our affiliates. The websites of our affiliates are not subject to this Privacy Policy, and you should check their individual privacy policies to see how the operators of such websites will utilise your personal information.


This Privacy Policy may be updated from time to time, for any reason. We will notify you of any changes to our Privacy Policy by posting the new Privacy Policy here and informing you via email. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes. You can check the history of this Policy by the revision numbers at the end of the Policy.

Contact us

If you have any questions regarding privacy while using the Application or have questions about our practices, please contact us via email


Version 2.5 updated 6 June 2023.