Privacy Policy

Meridian Privacy Policy

Effective date: May 19, 2026

Plain-English Summary

  • Your journal stays on your device. Meridian stores journal entries locally. We don’t run ads and we don’t sell journal content.
  • If you create an account, we store account and economy data (such as Stardust balance and subscription status) in our backend so features work across sessions.
  • We collect first-party product analytics (for example, which features you use) to improve Meridian. We do not use ad networks or sell your data.
  • Optional AI features may send entry text to an AI provider for processing. We do not intend to store journal content on our servers.
  • If you join the waitlist on this website, we collect your name and email so we can contact you about early access.

Who We Are

Meridian is operated by Baeram Alfreh (“Meridian”, “we”, “us”).

If you have questions or want to exercise privacy rights, contact baeramaflreh@gmail.com.

What This Policy Covers

This policy describes how we handle information for (1) the Meridian iOS app and (2) the Meridian marketing website (including the waitlist form).

Information We Collect

In the iOS app — stored on your device

Journal entries are created by you and stored locally on your device using on-device storage. Meridian is designed so your journal content stays private on your phone.

Handwriting photos (optional) may be captured by you to extract text. When this feature is used, optical character recognition (OCR) is performed on-device using Apple frameworks. Handwriting images are not sent to our servers for OCR.

Screen Time settings (optional) — if you enable app locking, you choose which apps to shield. Meridian uses Apple’s Family Controls APIs to apply shields based on your settings.

In the iOS app — account and cloud-synced data

If you create an account (email/password, Sign in with Apple, or Google), we collect authentication information through Supabase, our authentication and backend provider. This may include your email address and account identifiers.

When signed in, we sync certain account data to Supabase, including:

  • Profile information (such as display name and timezone, if provided)
  • Stardust balance, streak count, and transaction ledger (reason strings only — not journal text)
  • Subscription tier and status (free or Pro)
  • Daily AI usage counters (feature call counts, not entry content)

Product analytics

We collect first-party product analytics events in Supabase to understand how Meridian is used and to improve the app. These events may include event names (for example, “journal_entry_submitted”), app version, and non-content metadata such as session type or word count. We do not include journal entry text in analytics events.

On this website (waitlist)

If you join the waitlist, we collect first name, last name (optional), and email address so we can contact you about early access and product updates.

How We Use Information

  • Provide core app functionality (for example, saving journal entries on your device and displaying your Night Sky).
  • Operate your account (authentication, Stardust economy, subscription status, and feature limits).
  • Deliver optional AI features when you use them (reflection prompts, theme extraction, constellation creation).
  • Improve Meridian through first-party product analytics.
  • Operate the waitlist and send early access communications to people who opt in.
  • Support and security (for example, responding to user requests and preventing abuse).

Sharing and Third Parties

We do not sell your personal information. We share information only as needed to operate Meridian and deliver the services you request.

Backend and authentication (Supabase)

Meridian uses Supabase for authentication, account data, economy sync, product analytics, and the website waitlist. Supabase processes data according to its own privacy policy.

Optional AI features (OpenAI via Edge Functions)

If you use AI-powered features (for example, generating reflection prompts, extracting themes, or creating constellations), relevant entry text may be sent to an AI provider through our secure backend for processing. We do not intend to store your journal content on our servers; it is sent for processing and returned to your device. We track daily usage counts (not entry content) to enforce feature limits.

Note: AI providers may process data according to their terms and policies. We encourage you to review those policies before using AI features.

Apple services

Meridian uses Apple APIs (such as Screen Time / Family Controls) to help you lock selected apps based on your settings. If you purchase a Pro subscription, Apple processes payments through the App Store. Sign in with Apple is subject to Apple’s privacy policy.

Google Sign In

If you sign in with Google, Google processes your authentication according to Google’s privacy policy.

Tracking, Ads, and Analytics

Meridian does not run third-party advertising in the app and does not use ad networks. We do not sell your personal information.

We collect first-party product analytics through our own backend (Supabase) to understand feature usage and improve the app. These events do not include journal entry text. We do not use third-party advertising or cross-app tracking SDKs.

Data Retention

  • Journal entries: stored locally on your device until you delete them (or delete the app / device data).
  • Account and economy data: kept while your account is active, or until you request deletion.
  • Product analytics: retained as long as reasonably needed to operate and improve Meridian.
  • Waitlist information: kept as long as we reasonably need it to manage early access and communications, or until you request deletion.

Your Choices and Rights

Depending on where you live, you may have rights to access, correct, or delete your personal information.

  • Delete app data: you can delete journal entries within the app and/or delete the app to remove locally stored data.
  • Delete your account: use the account deletion option in app settings, or email us to request deletion of your account and associated cloud data.
  • Waitlist deletion request: email baeramaflreh@gmail.com and include the email address you used to sign up.

Children’s Privacy

Meridian is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, provide additional notice.