Privacy Policy

1. Introduction

The Meridian Health (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Meridian Health Tracker application (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect your email address and a password. During onboarding, you may voluntarily provide additional personal information including your name, date of birth, gender, and health-related data.

2.2 Health Data

The Service is designed to help you track and improve your health. With your consent, we collect:

• Health goals and preferences
• Diet and nutrition logs
• Exercise and activity data
• Sleep patterns and targets
• Supplement regimens
• Mood and wellness check-ins
• Blood test results and genetic markers (if provided)
• Health history and conditions

2.3 Usage Data

We automatically collect certain information when you access the Service, including your IP address, browser type, device information, and usage patterns. This helps us improve the Service and diagnose technical issues.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate personalised health insights, scores, and reports
• Send you notifications and reminders (with your consent)
• Respond to your inquiries and provide support
• Monitor and analyse usage patterns to enhance the Service
• Detect, prevent, and address technical issues or security vulnerabilities
• Comply with legal obligations

4. AI Processing

The Service uses artificial intelligence (AI) models, including Anthropic’s Claude, to generate personalised health insights, reports, and recommendations. When you interact with these features:

• Your health data and preferences are transmitted to the AI provider solely for the purpose of generating your requested content
• AI providers do not use your data to train their models
• Data transmitted to AI providers is subject to their respective privacy and data handling policies
• We minimise the data shared with AI providers to only what is necessary for the requested function

5. Data Storage and Security

Your data is stored on secure servers provided by Supabase, our database and authentication provider. We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Row-level security policies to isolate user data
• Secure authentication with hashed passwords
• Regular security reviews and updates

While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating the Service (e.g., hosting, AI processing), bound by confidentiality agreements
• Legal Requirements: If required by law, court order, or governmental regulation
• Protection of Rights: To protect the rights, property, or safety of The Meridian Health, our users, or the public
• With Your Consent: With your explicit permission for any other purpose

7. Your Rights and Choices

You have the right to:

• Access and review your personal data at any time through the Service
• Update or correct inaccurate information
• Export your data in a portable format
• Delete your account and all associated data permanently
• Opt out of non-essential communications
• Withdraw consent for data processing where applicable

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. When you delete your account, all associated data is permanently removed from our systems within a reasonable timeframe.

Certain information may be retained in backup systems for a limited period before being permanently deleted. We may also retain anonymised or aggregated data that cannot identify you for analytical purposes.

9. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries, and we will take appropriate measures to ensure your data remains protected in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. Your continued use of the Service after any such changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].