Privacy Policy
This policy explains how Mefor ("we") handles personal information when you use the Mefor apps and sync service. Our principle: what can be done on your device is never uploaded; what must be uploaded is your choice, and we tell you who can see it. If the Chinese and English versions differ, the Chinese version prevails.
1. Three ways to use Mefor and what we can access
| Mode | Where data is stored | Can we read the content? |
|---|---|---|
| On this device (default) | Your device only | No — nothing of yours is on our servers |
| Sync without sign-up | Your devices + sync server (encrypted) | No — data is encrypted on your devices and we have no key |
| Account sync with upload on | Your devices + sync server (encrypted, key escrow) | Yes — the platform may lawfully review uploaded content; every access is logged |
2. Data processed on your device
Recordings, live captions, transcripts, speaker voiceprints, hotwords, notes and AI notes stay on your device by default. Transcription and speaker diarization run on on-device models.
Speaker voiceprints are biometric data. They stay on the device that made the recording, are never uploaded or synced, and are deleted together with the recording.
3. Data we process when you sync
- Device information: name, platform, app version, last sync time and sync counters (e.g. items waiting to upload), for device management and troubleshooting.
- Encrypted data: synced records are stored encrypted. With sync without sign-up we cannot decrypt them.
- Account data (account users only): e-mail, a backup of your key encrypted with your sync password (which we cannot open), and the version and time of the account terms you accepted.
- Purchases: a digest of the purchase receipt, to restore your purchase across devices.
- Security logs: rejected abusive requests, with IP addresses truncated to their network (e.g. 203.0.113.0/24), kept for 30 days.
- Transcription timing: aggregated speed figures (no content) sent with sync, to improve performance.
4. Account users' uploads and platform review
When you create an account and turn on "upload & sync", your sync key is additionally encrypted to the platform's review public key and stored with us (key escrow). This lets us lawfully access and review the transcripts, notes and AI notes you upload, and audio you choose to upload, to meet legal obligations, handle complaints and keep the service safe.
Review includes automated content screening, human review, quality sampling, and retrieval under legal process. Only authorised reviewers, compliance and QA staff have access; every access requires a stated reason and records who, when and what; data exports need approval by two compliance staff.
You can turn upload off at any time (nothing new syncs afterwards), or delete your account and optionally its cloud data. See the account terms.
5. AI notes
AI notes use the API key you enter: your device calls the AI provider you chose (e.g. Anthropic) directly with that recording's transcript and your hotwords. This does not pass through our servers and is handled under that provider's privacy policy. Your API key is kept in the device's secure storage.
6. What we don't do
- We don't sell personal information.
- No third-party advertising or tracking SDKs in the apps or on this website; this website sets no cookies.
- We don't train models on your recordings or transcripts.
7. Retention
- Data on your devices is under your control — delete it and it's gone.
- Synced cloud data is kept until you delete it, delete your account, or ask us to delete it after turning sync off.
- Security logs are kept for 30 days; content-access and audit records as required by law.
8. Your rights
You can access, export, correct and delete your data, turn upload off, withdraw consent and delete your account. Most of this is in the app under My Account and Settings; for anything else e-mail hello@mefor.life and we'll respond within 15 business days.
9. Children
Mefor is not directed at children under 14. Minors should use it with a guardian's consent and guidance.
10. Changes
For significant changes we'll notify you in the app and update the date above; new purposes of processing require your consent again.