Privacy

Privacy Policy

What we collect, how the AI is involved, and the promises we can actually keep.

Effective date: 17 September 2026 · Last updated: 14 October 2026

Who we are

MEe ("the app") is operated by UNCOVERED SIA (registration no. 40203748046), Bērzu iela 4-2, Kalnāji, Tīnūžu pagasts, Ogres novads, LV-5015, Latvia ("we"). We are the data controller for the personal data described here. Contact: privacy@mee.is.

MEe is a therapeutic self-help journal for adults (18+). It is not a medical device, does not provide medical care, and is not a substitute for professional help.

What we collect

  • Account data: your email address and password (your password is handled by our authentication provider; we never see it in plain text).
  • Content you create: diary messages, daily reflections, evening letters, courage-box notes, drawings and photos you add, your inner child's name, and your room-setup choices.
  • Program data: which program day you are on, task completion, morning and evening emotion check-ins, water tracking.
  • Derived data: short AI-generated summaries and themes of your diary conversations ("memories"), an evolving description of your inner child's persona, names your inner child gives to groups of memories, and emotional tags — used so the app can remember what matters to you.
  • Purchase data (from the day payments launch): whether your account holds a subscription or a one-time purchase, and the App Store / Google Play purchase receipt that proves it. This is handled by RevenueCat, our subscription-management provider, under an account identifier that is your MEe user id — never your email or anything you wrote in the app. We never see or store your card or bank details; Apple and Google keep those.
  • What we do NOT collect: no advertising identifiers, no analytics or tracking SDKs, no location, no contacts, no device fingerprinting. Reminders are generated on your device; we run no push-notification service.

How AI is involved

Please read this section.

The inner child's replies are generated live by Google Gemini (a Google LLC service). To do this, the app sends Google: the text you wrote, recent conversation context, relevant memory summaries, and your drawings or photos when you ask for them to be reflected on. Your identity is not attached — requests carry no user identifier of any kind: not your name, your email, or any account code.

Google processes this data as our service provider — a data processor under Google's Data Processing Addendum — and we use a paid service tier whose content Google does not use to train its models or improve its products. Google retains prompts and responses only briefly, to detect abuse of its service.

Crisis safety processing (special-category data)

Because this app invites emotionally heavy writing, it includes a safety feature:

  • Every free-text entry is first checked on your device against a list of crisis-related phrases. Nothing leaves your device for this step.
  • Only if that local check matches, the text is sent to Google Gemini once for a crisis assessment (is this an emergency, a disclosure of harm, distress, or a figure of speech?). Courage-box notes are excluded — they are never sent for assessment.
  • If the assessment indicates acute risk or abuse, the app skips AI generation, shows a pre-written supportive reply, and displays crisis resources (hotlines). The entry is marked with a safety flag in our database. Flagged days are excluded from AI memory processing — crisis content is never summarized, embedded, or resurfaced by the memory feature.
  • Your text is always saved for you; it is never rejected or blocked.

This processing infers information about your mental and physical health, which is special-category data under GDPR Article 9. We process it on the basis of your explicit consent (Art. 9(2)(a)), which you give in the app — during first onboarding, or later from Profile → AI & privacy consent — and can withdraw at any time from the same place. Withdrawing switches off the child's AI voice, memory constellations, and drawing reflections; your diary and everything you created stays saved, and consent can be given again at any time.

Where your data lives and how it is protected

Your data is stored with Supabase (managed Postgres, EU region), protected by: your account password (authentication), row-level security so only your account can read your rows, and AES-256 encryption of the database at rest. Drawings are stored in access-controlled storage buckets.

We are honest about what this means: we do not use end-to-end encryption. Our staff could technically access stored content under strict need (for example, debugging with your consent, or a legal obligation), and AI processing as described above requires readable text. We chose this design so that every promise in this document is one we can actually keep.

We never sell your data. We share it only with the processors named here — Supabase (storage and sign-in), Google (AI replies), and (from the day payments launch) RevenueCat (purchases) — and when legally compelled.

International transfers

Your stored data stays in the EU. Text sent to Google Gemini for AI replies and crisis assessment may be processed in the United States by Google LLC, which acts as our data processor under Google's Data Processing Addendum. For this transfer we rely on the European Commission's adequacy decision of 10 July 2023 for the EU–US Data Privacy Framework (Decision (EU) 2023/1795), under which Google LLC is a certified participant (you can check its status at dataprivacyframework.gov). As an additional contractual safeguard, the Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914) apply if the adequacy decision should ever cease to apply. As explained above, no account identifier is sent to Google — only the text and images needed for the reply.

(From the day payments launch:) Your purchase data is processed by RevenueCat, Inc. (Brandon, Florida, United States), which acts as our data processor and stores it on Amazon Web Services in the United States. RevenueCat receives only your MEe account id and the App Store / Google Play purchase confirmation — never your diary, drawings, or emotions. For this transfer we rely on the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914, Module Two — controller to processor), which are incorporated in our Data Processing Agreement with RevenueCat (revenuecat.com/dpa); RevenueCat's sub-processors, all in the United States, are listed in Annex 3 of that agreement.

Retention and deleting your account

Your content is kept for as long as your account exists, so your inner child can remember your journey. Deleting your account (Profile → Delete account) permanently removes your profile, diary, memories, drawings, check-ins, and safety flags from our systems. (From the day payments launch:) deleting your account also asks RevenueCat to delete your purchase record. Apple and Google keep their own purchase records under their policies.

If you cannot access the app, you can also request deletion by writing to privacy@mee.is from the email address of your account.

The mee.is website and waitlist

The mee.is website sets no cookies and runs no analytics or trackers. If you leave your email address there to hear when the app opens, we keep only that address and the date you left it. The name you may give your inner child on the page never leaves your browser, and we do not store your IP address. The 3D playground at mee.is/playground remembers the colours you pick for the child (pyjamas, hair and eyes) in your own browser, so they stay the same on your next visit; this never leaves your device, and clearing your browser's data for mee.is removes it.

We use the address for one thing: to write to you once when the app opens. We delete the whole list after that letter has been sent, and you can have your address removed sooner by writing to privacy@mee.is. Our legal basis is your consent (GDPR Art. 6(1)(a)), which you give by sending the form and can withdraw at any time.

The website and the list are hosted by Cloudflare, our data processor under Cloudflare's Data Processing Addendum, and the list is kept in a database held within the EU. To deliver the pages and to slow down automated abuse of the form, Cloudflare briefly processes your IP address, as any web host does; we do not keep it. Cloudflare, Inc. is a United States company certified under the EU–US Data Privacy Framework, and its Data Processing Addendum also incorporates the Standard Contractual Clauses (Module Two — controller to processor).

Your rights (GDPR)

You have the rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — write to privacy@mee.is; we respond within the time GDPR allows (normally one month). You may lodge a complaint with a supervisory authority — for our seat that is Latvia's Datu valsts inspekcija (Data State Inspectorate — Elijas iela 17, Rīga, LV-1050, Latvia; pasts@dvi.gov.lv; dvi.gov.lv). You may also complain to the supervisory authority of the country where you live or work, or where you believe the infringement took place.

Age

MEe is intended for adults 18+. We do not knowingly collect data from children. The app does not verify age at sign-up. If we become aware that an account belongs to someone under 18, we will delete it.

Emergency disclaimer

MEe cannot call emergency services and does not monitor entries in real time by humans. If you are in danger, contact your local emergency number. The app's "Get help now" screen lists crisis resources at any time.

Changes

We will notify you in-app of material changes before they take effect.

See also our Terms of Service. Questions: privacy@mee.is.