Privacy Policy

MeraFlow LLC ("MeraFlow," "we," "us," or "our"), a South Carolina limited liability company, is committed to protecting your privacy. This Privacy Policy applies to our website (meraflow.co), our mobile applications ("App"), and all related services (collectively, the "Services").

Two different things are covered here, and they collect different data. The website is a promotional site: it counts page views, and only if you accept the cookie banner. The App holds an account and the profile you enter into it. Where the difference matters, the sections below say which one they describe.

By accessing or using our Services, you agree to the practices described in this Privacy Policy.

A. Information You Provide to Us

• Account Authentication (App): We use third-party sign-in services (Sign in with Apple, Google Sign-In). We do not collect or store your password.
• Profile Information (App): Height, weight, age, gender, pregnancy status, activity level, and dietary preferences. Stored anonymously.
• Communications: Any information you provide when contacting us, including anything you write to [email protected].

B. Automatically Collected Information (App)

• Usage Data: IP address, device type, operating system, and usage patterns.

C. Automatically Collected Information (Website)

The website records nothing until you accept the cookie banner. Decline it, or ignore it, and no cookie is written and no page view is sent.

If you accept, each page view records the page address and title, the site that referred you, your browser, operating system and device type, the country the request came from as reported by our CDN, and a randomly generated visitor identifier kept in a cookie named _mf_vid for one year.

• We do not store your IP address. It is used in memory to rate-limit abuse and to derive a one-way hash with a salt that rotates daily, which lets us tell two visits apart within one day and is meaningless the next. The address itself is never written down.
• We do not collect your city or region, and your IP address is not sent to any third-party geolocation service.
• Declining also deletes the _mf_vid cookie if an earlier visit had set it.

The App may request access to:

• Push Notifications: Meal logging and hydration reminders.
• Camera: Photo-based food logging.

• Generate personalized nutritional recommendations via Google Gemini API.
• Monitor and analyze App performance.
• Count website page views, so we can see which pages people find useful.
• Communicate updates and marketing (opt-out available).

MeraFlow is not a medical organization. Our Services provide information for educational and wellness purposes only.

We do not sell your personal information. We may share data with:

• Service Providers: AWS, Google, Firebase, Stripe, Apple/Google.
• Legal Compliance: If required by law.

• Encryption: TLS/SSL in transit, encrypted at rest.
• Access Controls: Restricted to authorized personnel.
• Regular Audits: Periodic security assessments.
• Breach Notification: As required by law.

• Retention: Data kept while account is active. Deleted within 30 days of account deletion.
• In-App: Settings > Delete Account.
• Email: [email protected]

CCPA/CPRA, Virginia, Colorado residents have rights to:

• Know/Access, Correct, Delete, Opt-Out, Data Portability

Website

One cookie, _mf_vid, written only after you accept the banner. It holds a random identifier, lasts one year, and exists so that a returning reader is not counted as a new one. Declining deletes it. Your choice itself is remembered in your browser's local storage under meraflow-cookies.

The website uses no advertising cookies, no cross-site trackers and no third-party analytics service. Page views are recorded by our own server.

App

The App uses the Firebase SDK for analytics.

Not intended for users under 13.

Data processed and stored in the United States.

We are not responsible for third-party website privacy policies.

We may update this policy. Continued use constitutes acceptance.

MeraFlow LLC
Email: [email protected]