Legal
Last updated: 1 August 2026 Applies to: Meriidian (web app at meriidian.app, and the Meriidian iOS and Android apps)
Meriidian ("the App", "we", "us", "our") is operated by Max Alexander Ejogo, a sole trader based in the United Kingdom, who acts as the data controller for the personal information described in this policy. This Privacy Policy explains what information we collect when you use Meriidian, why we collect it, who we share it with, and the choices and rights you have.
Meriidian asks deeply personal questions about your relationships, wellbeing, ambitions, purpose, and financial situation in order to generate a personalised strategy report. We take the sensitivity of that information seriously, and this policy is written to be as clear as possible about exactly what happens to it.
By using the App, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the App.
Information you provide directly:
Information collected automatically:
Information we do not collect:
We use the information above to:
We do not sell your personal information, and we do not use your assessment answers to build advertising profiles or target you with ads.
If you are located in the UK or EU, data protection law requires us to have a lawful basis for each way we use your information. We rely on the following:
| Purpose | Legal basis |
|---|---|
| Generating your matrix and strategy report, saving your progress, processing payments and subscriptions | Performance of a contract — this is the service you've asked us to provide |
| Sensitive assessment content relating to your wellbeing (see Section 4) | Your explicit consent, given when you choose to answer these questions |
| Sending the one-time follow-up email and Investigation waitlist notifications | Consent — you can withdraw this at any time by unsubscribing |
| Product analytics (aggregate usage, drop-off points) | Legitimate interests — understanding and improving the App, balanced against your privacy; we do not use this for advertising |
| Retaining payment/transaction records | Legal obligation — UK tax and accounting law |
You can withdraw consent-based processing at any time (see Section 9 — Your Rights). This does not affect the lawfulness of processing carried out before you withdrew it.
Some of the assessment questions touch on your mental and emotional wellbeing — for example, questions about stress, self-care, or a general "mental health context" field. Under UK/EU data protection law, information concerning your health (including mental health) is treated as a "special category" of data requiring a higher standard of protection.
We only process this information because you choose to provide it as part of a voluntary self-reflection tool, and by submitting these answers you give us your explicit consent to process them for the purpose of generating your personalised report. We do not use this information for any other purpose, we do not share it other than as described in Section 6, and it is not used to make any medical or clinical determination about you (see Section 5). You may decline to answer any question you're not comfortable sharing, and you may withdraw your consent and request deletion of this data at any time (see Section 9).
When you complete the assessment (or an Investigation), your answers are sent to Anthropic, the maker of the Claude AI models, in order to generate your personalised written strategy. Anthropic processes this data as our service provider under its own data protection and API terms, and does not use data submitted via the API to train its models. We only send the information needed to generate your report — we do not share your name and answers with Anthropic for any purpose beyond producing that specific document for you.
Automated processing. Your strategy report is generated automatically by an AI system based on the answers you provide, without a human reviewing or editing the specific content of your report before you see it. This process only generates written content for your own personal reflection — it does not make any legal, medical, financial, or other decision about you or with any legal or similarly significant effect, and no automated eligibility, pricing, or access decision is made about you based on your answers. If you have concerns about this, you can contact us at hello@meriidian.app.
Meriidian is not a substitute for professional advice. Your report is generated by an AI system based on the patterns in your answers. It is intended for general self-reflection and planning purposes only, and is not medical, psychological, financial, or legal advice. If you are struggling with your mental health, in financial difficulty, or in crisis, please speak to a qualified professional or, if you are in immediate danger, contact your local emergency services.
We use a small number of trusted service providers to run Meriidian. Each only receives the information it needs to perform its function:
| Provider | Purpose | What it processes |
|---|---|---|
| Supabase (hosted on servers in the US East region) | Database and account storage | Name, email, assessment answers, purchase status |
| Anthropic (Claude API) | Generates your personalised strategy report | Your assessment answers, your first name |
| Stripe | Processes payments made directly through the Meriidian website | Payment details for web purchases — we do not see or store your full card number |
| RevenueCat | Manages purchases and subscriptions made via the iOS/Android apps, and via approved social media or partner channels | Purchase and subscription status (not your full card details) |
| Apple / Google (App Store & Play Store billing) | Processes in-app purchases on iOS/Android | Payment details, handled entirely by Apple/Google — we never see your card number |
| Resend | Sends the 24-hour follow-up email | Name, email, and content needed to personalise the email |
| PostHog | Product analytics | Anonymised usage and interaction data |
| Vercel | Hosts the web version of Meriidian | Standard web request data |
We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We may disclose information if required to do so by law, or to protect our rights, safety, or the safety of others.
We retain your account and assessment data for as long as your account is active, plus a reasonable period afterwards for backups and legal/accounting purposes. If you ask us to delete your account and data, we will do so within 30 days, except where we are required to retain certain records (e.g. payment records) for legal or tax purposes.
Depending on where you live, you may have the right to:
To exercise any of these rights, contact us at hello@meriidian.app. There is no charge for making these requests.
If you are in the UK and are unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO). If you are in the EU, you have the right to complain to the data protection supervisory authority in your own EU member state, in addition to or instead of the ICO.
If you are a California resident, you have similar rights under the CCPA/CPRA, including the right to know what personal information is collected and to request deletion. We do not sell personal information as defined under California law.
Meriidian is built to work with the minimum access necessary:
Meriidian does not request access to your camera, microphone, contacts, photo library, location, calendar, or health data.
Meriidian is intended for users aged 16 and over. We do not knowingly collect information from anyone under 16, and if we learn that we have, we will delete it promptly.
If you are 16 or 17, you may use Meriidian, but given the personal and financial nature of the assessment, we ask that you do so with the knowledge and permission of a parent or guardian. We do not independently verify age or parental consent, so we rely on the confirmation you give us when you use the App. A parent or guardian of a user aged 16 or 17 may contact us at hello@meriidian.app to ask questions about their child's data or to request that it be deleted.
If you believe a user under 16 has provided us with information, please contact us at hello@meriidian.app.
Our database (Supabase) is hosted on servers located in the United States (US East region). If you are located in the UK or EU, this means your personal information — including your assessment answers — is transferred to and stored in the US. We rely on appropriate safeguards required under UK and EU data protection law (such as Standard Contractual Clauses, as adopted by our provider) to ensure your data remains protected to the required standard wherever it is stored.
Other service providers (see Section 6) may also process and store data outside your home country, including in the United States and European Union. The same safeguards apply.
We use reasonable technical and organisational measures — including encrypted data transmission and access-controlled databases — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
The web version of Meriidian uses:
You can control cookies through your browser settings, though disabling localStorage will prevent the assessment from saving your progress between sessions.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are significant, we will make reasonable efforts to notify you (for example, via email or an in-app notice).
For any privacy questions, data requests, or concerns, please contact:
Max Alexander Ejogo
Sole Trader — Meriidian
Email: hello@meriidian.app
Hayloft Point, 4–6 Middlesex Street, London E1 7JH, United Kingdom