Privacy Policy
Last Updated: December 2025
This Privacy Policy describes how Meedi8 ("we", "us", or "our") collects, uses, and shares your personal information when you use our service.
Information We Collect
Information You Provide
- Account Information: Name, email address (from OAuth providers)
- Session Content: Messages, uploaded files, voice recordings
- Payment Information: Processed securely by Stripe (we don't store card details)
- Communications: Support requests, feedback
Information Collected Automatically
- Usage Data: Pages visited, features used, session duration
- Device Information: Browser type, operating system, device type
- Log Data: IP address, timestamps, error logs
How We Use Your Information
To Provide the Service
- Facilitate mediation sessions
- Generate reports and summaries
- Process AI-powered coaching
To Improve the Service
- Analyze usage patterns
- Fix bugs and issues
- Develop new features
To Communicate
- Send session notifications
- Respond to support requests
- Share important updates
To Process Payments
- Handle subscriptions
- Send receipts
- Prevent fraud
AI and Your Data
How AI Uses Your Content
Our AI models (Anthropic Claude, OpenAI) process your messages to:
- Provide coaching and mediation
- Generate summaries and reports
- Transcribe voice messages
What AI Doesn't Do
- We do not use your data to train AI models
- Your conversations are not shared with AI providers for their training
- AI processing follows our data processing agreements
Data Sharing
We Do Not Sell Your Data
We never sell your personal information to third parties.
Service Providers
We share data with trusted providers who help operate our service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payments | Payment info |
| AWS | Hosting | Encrypted data |
| Anthropic | AI processing | Session content |
| OpenAI | Transcription | Audio files |
| SendGrid | Email address |
Legal Requirements
We may disclose information if required by law or to:
- Comply with legal processes
- Protect our rights or safety
- Prevent fraud or abuse
Data Security
We implement industry-standard security measures:
- Encryption in transit: TLS 1.3
- Encryption at rest: AES-256
- Access controls: Role-based permissions
- Regular audits: Security assessments
Data Retention
- Active accounts: Data retained while account is active
- Deleted sessions: Removed within 30 days
- Deleted accounts: All data removed within 30 days
- Backups: Purged within 90 days
Your Rights
You have the right to:
- Access: Request a copy of your data
- Correct: Update inaccurate information
- Delete: Request data deletion
- Export: Download your data
- Opt-out: Unsubscribe from marketing emails
To exercise these rights, contact privacy@meedi8.com.
Children's Privacy
Meedi8 is not intended for users under 18. We do not knowingly collect data from minors.
International Transfers
Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place.
Changes to This Policy
We may update this policy periodically. We'll notify you of significant changes via email or in-app notification.
Contact Us
Privacy Questions: privacy@meedi8.com
General Support: support@meedi8.com