MeforPrivacy Policy
This policy explains how Mefor ("we") handles personal information when you use the Mefor apps and sync service. Our principle: what can be done on your device is never uploaded; what must be uploaded is your choice, and we tell you who can see it. If the Chinese and English versions differ, the Chinese version prevails.
1. Three ways to use Mefor and what we can access
| Mode | Where data is stored | Can we read the content? |
|---|---|---|
| On this device (default) | Your device only | No — nothing of yours is on our servers |
| Sync without sign-up | Your devices + sync server (encrypted) | No — data is encrypted on your devices and we have no key |
| Account sync with upload on | Your devices + sync server (encrypted, key escrow) | Yes — the platform may lawfully review uploaded content; every access is logged |
2. Data processed on your device
Recordings, live captions, transcripts, speaker voiceprints, hotwords, notes and AI notes stay on your device by default. Transcription and speaker diarization run on on-device models.
Speaker voiceprints are biometric data. They stay on the device that made the recording, are never uploaded or synced, and are deleted together with the recording.
3. Data we process when you sync
- Device and configuration information: device name and model, OS version, app version, system and app language, time zone, last sync time, sync counters (e.g. items waiting to upload), and a summary of feature switches (e.g. transcription tier, auto notes, audio upload, chosen AI provider — never the API key). Used for device management, compatibility and sync troubleshooting; it contains no recording or text content.
- Encrypted data: synced records are stored encrypted. With sync without sign-up we cannot decrypt them.
- Cloud backup: turning on sync also turns on cloud backup — your synced data is your backup and can be restored on a new device.
- Account data (account users only): e-mail, a backup of your key encrypted with your sync password (which we cannot open), and the version and time of the account terms you accepted.
- Purchases: a digest of the purchase receipt, to restore your purchase across devices.
- Security logs: rejected abusive requests, with IP addresses truncated to their network (e.g. 203.0.113.0/24), kept for 30 days.
- Transcription timing: aggregated speed figures (no content) sent with sync, to improve performance.
4. Account users' uploads and platform review
When you create an account and turn on "upload & sync", your sync key is additionally encrypted to the platform's review public key and stored with us (key escrow). This lets us lawfully access and review the transcripts, notes and AI notes you upload, and audio you choose to upload, to meet legal obligations, handle complaints and keep the service safe.
Review includes automated content screening, human review, quality sampling, and retrieval under legal process. Only authorised reviewers, compliance and QA staff have access; every access requires a stated reason and records who, when and what; data exports need approval by two compliance staff.
You can turn upload off at any time (nothing new syncs afterwards), or delete your account and optionally its cloud data. See the account terms.
5. AI notes
AI notes use the API key you enter: your device calls the AI provider you chose (e.g. Anthropic) directly with that recording's transcript and your hotwords. This does not pass through our servers and is handled under that provider's privacy policy. Your API key is kept in the device's secure storage.
6. What we don't do
- We don't sell personal information.
- No third-party advertising or tracking SDKs in the apps or on the website.
- We don't train models on your recordings or transcripts.
7. Website visits and cookies
When you visit mefor.life we record the time, your full IP address and the country or region derived from it, the page visited, the referring page, browser and version, operating system, device type, your browser's language settings, and the language you choose on the site. We use this for website security, visit statistics and improving our content, and delete it automatically after one year.
We pick the website language from the region of your IP address; once you choose a language yourself we store it in a functional cookie named mefor_lang (valid for one year) and use your choice from then on. The website uses no advertising or third-party tracking cookies.
IP geolocation data is provided by DB-IP under the CC BY 4.0 licence.
8. Retention
- Data on your devices is under your control — delete it and it's gone.
- Synced cloud data is kept until you delete it, delete your account, or ask us to delete it after turning sync off.
- Security logs are kept for 30 days; content-access and audit records as required by law.
- Website visit records are kept for one year.
9. Your rights
You can access, export, correct and delete your data, turn upload off, withdraw consent and delete your account. Most of this is in the app under My Account and Settings; for anything else e-mail hello@mefor.life and we'll respond within 15 business days.
10. Children
Mefor is not directed at children under 14. Minors should use it with a guardian's consent and guidance.
11. Changes
For significant changes we'll notify you in the app and update the date above; new purposes of processing require your consent again.