Last updated 14 September 2026
The short version. The details you enter into the Mneddy's World app are stored on your own phone, in the encrypted store the phone itself provides — Apple's keychain on iOS, Android Keystore-backed secure storage on Android. MNEDDY Connect works the other way round: it is a private messaging app, so your account and your messages are held on a server. The website has no accounts and no logins. Where information does leave your device, this policy says so and says where it goes. The longer version below exists so you can check it for yourself.
This policy covers www.mneddy.com, the Mneddy's World app for iOS and Android, and the MNEDDY Connect iOS app. All three are operated by Deejay Mneddy, based in Dubai, United Arab Emirates, who decides what information is collected and why. If you have a question about anything here, write to info@mneddy.com.
Where information is held is a separate question from who holds it, and the sections below say so in each case. Some of it sits on servers outside the UAE.
mneddy.com is a static page. It does not set cookies of its own, does not ask you to log in, and does not carry an advertising pixel, a session recorder or a tag manager. The embedded third-party content described further down is a separate matter and is covered there.
The site is hosted on shared cPanel hosting. Like nearly all web servers, it keeps routine access logs — IP address, time of request, page requested, browser user-agent. These are generated by the hosting platform for security and troubleshooting.
The booking form collects what you type into it: your name, contact details and the details of your event. When you tap the button, your device opens WhatsApp with those details composed into a message, which you then choose to send or not.
A copy of the enquiry is also recorded in Mneddy's own booking system, hosted at mpc.intellahivecloud.com, so that enquiries are not lost if the WhatsApp handoff does not complete. That record is used to respond to your enquiry, and is visible to Mneddy and to the people who help manage his bookings.
The Mixtapes section embeds SoundCloud players. When one of those loads, SoundCloud receives your IP address and can set its own cookies, under SoundCloud's privacy policy rather than this one. Nothing about you comes back to us from them.
Mneddy's World sends no personal account or profile data to our servers. Your account, your profile information and your saved library preferences are stored locally on your device. Nothing below describes information being collected about you — it describes what stays on your phone, and which outside services your phone talks to when you play or browse something.
The app has no user server. When you create an account, the details you enter — your name, email address and city — are written into your device's own encrypted secure storage: Apple's keychain on iOS, and Android Keystore-backed secure storage on Android. If you add a profile picture, the picture itself is kept as a file in the app's private storage and only a reference to it is held with your profile; see Photo library below.
Your password is never stored, on the device or anywhere else. When you create the account, the app turns the password into a one-way scrambled value — a salted PBKDF2-HMAC-SHA256 derivation, to name it precisely — and keeps only that. When you sign in, it scrambles what you have typed in the same way and compares the two. The password itself exists only for the instant that takes. The practical consequence is that nobody can read it back, including us, and nobody can recover it for you.
The other practical consequence is worth stating plainly: because there is no server copy, an account cannot be recovered. If you delete the app or lose the device, that account and its saved data are gone. Please don't rely on the app as the only copy of anything that matters to you.
All of it lives on the phone. Deleting the app removes all of it.
You can also remove your account without deleting the app: open Settings, scroll to Start Over, tap START OVER, and confirm with Delete Account. That removes your name, email address and city, your saved sign-in and your signed-in session. Your saved mixes, playlists, saved events, wishlist and app settings are kept — the confirmation tells you exactly what goes and what stays before you tap it.
Most of what you see — mixes, events, the gallery, the shop catalogue — is published with the app itself and is already on your phone. Where the app does reach the internet, these are the only services it contacts, and none of them is sent anything that identifies you:
These are ordinary web requests. As with any web request, each service receives the network-level information that every request carries, such as your IP address. None of them is told who you are, because the app holds no identifier for you to send.
If you send a booking enquiry from inside the app, the app does not transmit it. On iOS and on Android alike it composes an email draft addressed to deejaymneddydxb@gmail.com, filled in with what you typed, and hands it to whichever mail app you use. You can read it, change it, and decide whether to send it — nothing leaves your device unless you send it, and it is sent by your mail app, from your own address. No copy is made on a server of ours along the way. This is a different route from the booking form on the website described above, which uses WhatsApp.
If you choose to set a profile picture, the app asks permission to open your photo library. The picture you pick is copied into the app's own private storage on the device so that it survives a restart. Choosing "Remove photo" deletes the copy. The app opens your library only when you tap to change your picture, and does not browse your photos in the background. The picture is never uploaded anywhere.
If you turn on biometric unlock, the check is performed entirely by your phone's operating system — Face ID or Touch ID on iOS, and the equivalent fingerprint or face unlock on Android. The app is told only whether the check passed. It never receives, stores or transmits your face or fingerprint data; neither Apple nor Android makes that available to apps.
Settings contains switches for new-mix, event and live alerts. In the current version these record a preference on your device. The app does not register for push notifications on either iOS or Android, and turning a switch on does not cause messages to be sent to you. If that changes in a future version, this policy will be updated before that version ships.
The app plays SoundCloud mixes through an embedded player, shows YouTube thumbnails, and plays Mneddy's live broadcast through YouTube's own embedded player. The live player is loaded in privacy-enhanced mode (youtube-nocookie.com), which means YouTube does not set its usual personalisation cookies for someone who never presses play. Once you do play something, SoundCloud or YouTube receives your IP address and the usual request information, and their own privacy policies apply. Mneddy does not receive their viewing analytics — none of it comes back to us, and the app has no way to see it.
The app also opens Instagram, WhatsApp and the AVYBZ store in your phone's browser. Once that page loads you are on that company's service and its privacy policy applies, not this one. Those companies may set their own cookies and may recognise you if you are signed in to them.
Mneddy's World contains no advertising identifier, no ad network, no third-party analytics and no crash or diagnostic reporting. It does not track you across other apps or websites. It does not ask for or collect your location at any precision. No usage or diagnostic information is sent from the app to us or to anyone else, and we do not sell your data.
Worth stating plainly, because the two apps share a look and behave differently: MNEDDY Connect keeps your account and your messages on a server, not only on your phone. It has to. The point of the app is a conversation with Mneddy, and a conversation needs somewhere both sides can reach. Everything in this section describes data that leaves your device.
There is no public registration. You reach the app only by entering an invitation code that was issued to you. When you use it, we record which invitation you came through — including the campaign it was attributed to, if the code reached you as a QR code. That tells us which invitation route worked. It does not follow you anywhere else.
Your conversation is between you and Mneddy. This is enforced by the database itself, not only by the app: your account is permitted to read and write your own thread and no one else's, so a fault in the app cannot expose another person's messages.
The data is handled on our behalf by Supabase, which hosts the database, and by Mneddy's own system at mpc.intellahivecloud.com, hosted by Hostinger, which is what the app talks to. If you allow notifications, Apple receives the notification and your device token in order to deliver it, which is why notification text is kept short.
Mneddy operates from Dubai, United Arab Emirates, but the database itself is hosted in Mumbai, India. So whoever you are and wherever you are, your account and your messages are stored in India and transferred there when you use the app. We would rather state that plainly than let the operator's address imply something about where the data sits.
There are no advertising identifiers, no ad networks and no third-party analytics in this app. We do not sell your data.
As in Mneddy's World, the check is performed by the device rather than by us. MNEDDY Connect is an iOS app, so that check is performed entirely by iOS, and the app is told only whether it passed. Your face or fingerprint data is never received, stored or transmitted by us.
Biometric unlock is a convenience rather than your credential. It unlocks a session already signed in on that device; your account is still protected by your username and password.
Your account and its message history are kept for as long as the account exists, so the conversation stays available to both sides. A signed agreement is kept for seven years after signature, because it is a commercial record either party may need. Push tokens are deleted when you turn notifications off or remove the app.
You can delete your account from inside the app. Open You and choose Delete my account. You do not have to ask us and you do not have to give a reason.
Deletion is not total, and you are entitled to know that before you tap it rather than afterwards. What is erased: your username, your display name, your sign-in, and every device that could be sent a notification. You cannot get back in with those credentials and we cannot restore them for you.
What remains: the messages in your conversation with Mneddy, and anything you have signed. Those are the records of a business relationship that belongs to both sides — a signed agreement in particular is evidence that should not evaporate because one party closed an app. What remains is no longer attached to a username that identifies you.
If you want a copy of what we hold, a correction, or something removed beyond the above, write to info@mneddy.com. You can turn off notifications at any time in iOS Settings.
Merchandise is sold and fulfilled by the AVYBZ store. Payment happens on their service, under their terms and their privacy policy. The app and this website do not take card details, do not process payments and do not receive your payment information.
Inside Mneddy's World, browsing the shop shows product pictures loaded from Shopify's image service and prices published with the app. When you check out, the app hands you to the AVYBZ store in your phone's browser and the purchase happens there. Mneddy's World does not collect payment-card information and keeps no purchase history — it cannot see whether an order was completed.
Apple asks developers to declare, on each App Store listing, the categories of data an app may collect. Google asks for the same thing on Google Play, in a form called Data safety. For Mneddy's World the two declarations say the same thing — Apple's is "Data Not Collected", Google's is "No data collected and no data shared" — and both describe what the section above sets out: the app sends no personal data to us, and contains no analytics, advertising or diagnostic collection.
MNEDDY Connect is a different app, with its own listing and its own declaration, because it genuinely does keep your account and your messages on a server. What it stores is set out in its own section above. Nothing in that section applies to Mneddy's World.
Neither the site nor the apps are directed at children under 13, and we do not knowingly collect information from them. MNEDDY Connect is invite-only and intended for adults.
Data-protection law gives you rights to access, correct and delete personal information held about you. For Mneddy's World those rights are unusually simple to exercise, because the data is on your own device: Settings → Start Over → Delete Account removes your account and profile, and deleting the app removes everything the app has stored. For MNEDDY Connect the data is on a server, but you still delete your account yourself, in the app under You → Delete my account. What that erases and what it leaves behind is set out under "Deleting your account" above. For a booking enquiry you have sent, write to info@mneddy.com and it will be removed from the booking system on request.
If this policy changes, the date at the top changes with it. Material changes to how an app handles data would arrive with an app update, and the policy would be updated before that update ships.
Deejay Mneddy
Dubai, United Arab Emirates
info@mneddy.com