Privacy Policy

Who we are and what this covers

Meerlet is run by Meerlet’s two founders, based in Texas, United States (“Meerlet”, “we”, “us”). This policy covers the Meerlet app on iPhone and Android, the website at meerlet.com, our beta waitlist, and the emails we send. Questions about privacy go to [email protected].

What we collect, and why

Your account (the parent)

• Your email address, your name, and your password, which we store only as a secure hash. If you sign in with Google or Apple instead, we keep which Google or Apple account it is and its email address.
• For Sign in with Apple, a token Apple gives us, used only to tell Apple when you delete your account so Meerlet is removed from your Apple ID.
• Which version of these terms you accepted, and when.
• When you were last active in the app, recorded at most every 15 minutes, so we know how many families use Meerlet.
• A notification token for your phone, only if you choose to be told when your questions are ready.

Information about your children, which you provide

• A first name or nickname for each child.
• Their settings: whether app limits are on, how much time a passed round earns, and any free time you give.
• Their quiz answers (which choice, and whether it was right) and their progress, so we can grade and show you reports.
• When they earned time, and for how long. On Android, the name of the app they were opening at that moment (for example “YouTube”, as the phone shows it) is saved with the earned time so you can see it on their page. iPhones don’t share app names with us, so nothing like it is sent from an iPhone.

Your child’s phone

• A random installation ID created by the app, the app version, whether app limits and the needed permission are switched on, and how many apps and categories are limited. Not which ones.
• A notification token for the phone, used only to tell it to check in when you change something, so your change reaches it straight away. It never shows your child a notification.
• A camera image while you scan the setup code, which is read on the phone and never stored or sent.

Pages you turn into quizzes

• The photos, PDFs, Word documents or web page you choose, and anything you type about what to focus on. Photos have their location and camera details removed first.
• Pages are kept in private storage only while the questions are written (usually under a minute), are sent to OpenAI to write the questions, and are then deleted. Pages that never become a quiz are deleted within about an hour.
• The questions written from them are saved to your family’s account and are never shown to any other family. Please leave out pages with names, addresses, or photos of people.

The website and the waitlist

• When you join the beta waitlist, we store your email address, when you signed up and when you confirmed. We send one confirmation email through Resend, our email provider. If the link isn’t tapped within 48 hours, we delete your address. A confirmed address stays on the list until the waitlist ends or you ask us to remove it, and is used only to invite you to the beta and tell you about it.
• If you arrive through a tagged link (for example meerlet.com/?ref=reddit, the way we label links we post), your browser remembers that label during your visit, and we store it with your waitlist signup so we know which posts reach parents.
• We count visits with Cloudflare Web Analytics: which pages are viewed, the site that sent you, your country and your type of device. It sets no cookies and builds no profile of you. The website sets no cookies for visitors; the only ones belong to Meerlet staff signing in to our internal dashboard, whose sign-in page can load Google’s sign-in button.
• The website’s two-question demo runs in your browser. Its answers are not sent to us, and its reward is a demonstration that doesn’t control your device.

Codes we email you

• When you reset your password or delete your account from the website, we email a six-digit code. We keep only a scrambled form of it, and it stops working after 15 minutes.

When you contact us

• If you email us, we receive your address and what you write, and use it to help you. Please don’t send children’s personal information or sensitive documents.

What we don’t collect

• Your location, contacts, messages, photo library (only the pages you pick), browsing history, what’s on the screen, or an advertising ID.
• The list of apps you limit. It stays on your child’s phone, and so does the record of which app is open.
• There are no ads in Meerlet, and no advertising, analytics or crash-reporting tools in the app.

How app limits work on the phone

On Android, Meerlet uses an accessibility permission only to notice which app comes to the front, so it can ask for questions before a limited app opens. It doesn’t read what’s on the screen, doesn’t act for your child, and nothing it sees is stored or sent to us.

On iPhone, Meerlet uses Apple’s Screen Time. Apple gives the app sealed tokens for the apps you pick, not their names, and those tokens stay on the phone.

The time a child has earned is kept on the phone too, so limits keep working without an internet connection.

How we use it

• To run Meerlet: grade answers, unlock apps for the time earned, write your quizzes, and show your reports.
• To sign you in, send the codes and notifications you ask for, and answer your messages.
• To keep the service safe and working, for example limiting how many requests an account can make. The health numbers we watch are counts, like how many quizzes were written today, and never identify a person or child.

We don’t sell or rent personal information, we don’t use it for advertising, and we don’t use your pages, questions or your children’s answers to train AI models.

Who helps us run Meerlet

These service providers handle information only to provide their service to us:

• Render hosts our servers and database, in the United States.
• Cloudflare stores quiz pages privately for the few minutes it takes to write questions, and counts website visits.
• OpenAI writes the questions from your pages. Under OpenAI’s API terms, information sent this way isn’t used to train its models, and may be kept for up to 30 days to detect abuse before it is deleted.
• Resend delivers our emails.
• Expo delivers notifications to your phone through Apple and Google. A notification only says your questions are ready (or couldn’t be made), never a child’s name or what the quiz is about. The check-in message to your child’s phone carries nothing at all.
• Apple and Google provide sign-in if you choose it, deliver notifications, and run the app stores.
• Apple’s TestFlight delivers the iPhone beta. If you install it that way, Apple shares with us crash reports, how often the app is opened, when you installed it and which version you have, and any feedback you choose to send. Joining through our public link doesn’t give us your name or email address.

We may also share information if the law requires it, to protect someone’s safety, or with a new owner if Meerlet is ever transferred, who would have to keep this policy’s promises.

Children’s privacy

Meerlet is made for parents and guardians. Children use it on a phone a parent has linked, but they never create an account, give an email address, or type a password.

A parent creates the account, adds each child, and links the child’s phone. By doing so, the parent consents to us collecting and using the child’s information described above: a first name or nickname, their settings, their quiz answers and progress, when they earned time, and the child’s phone’s technical details. We use it only to run Meerlet for that family, and we ask for no more than that.

As a parent, you can at any time:

• see your child’s information on their page in the app;
• stop further collection by removing their phone from your family;
• delete it by removing the child, or by deleting your account.

You can also ask us by email at [email protected]. If we learn that we have a child’s information without a parent’s consent, we delete it.

How long we keep it

• Your account, your children’s information and your quizzes: until you delete them.
• Quiz pages: only while the questions are written, and never more than about an hour.
• Emailed codes: 15 minutes.
• Unconfirmed waitlist addresses: 48 hours.
• Notification tokens: until you sign out, turn notifications off, or delete your account. Your child’s phone’s token goes when you remove the phone or the child.
• Database backups can hold deleted information for up to 7 days, until they are replaced. They are never used to bring an account back.

Deleting your information, and your rights

You can delete your account and your family’s information in the app (Settings, then Delete my account), on our account deletion page without the app, or by emailing [email protected]. If you created the family, deleting your account deletes the family, your children’s information and your quizzes.

Wherever you live, you can ask us for a copy of your information, to correct it, or to delete it, and we’ll answer within 45 days. Residents of Texas and other states with privacy laws have these rights under those laws, including the Texas Data Privacy and Security Act, and you don’t need to tell us which law applies. We may need to confirm the request is yours. We don’t sell personal information or use it for targeted advertising.

Keeping it safe

Information travels over encrypted connections. Passwords and emailed codes are stored only as secure hashes, your sign-in is kept in your phone’s secure storage, and quiz pages sit in private storage that nothing is ever served from. No system is perfectly secure, so if something ever goes wrong, we’ll tell affected families as the law requires.

Changes and contact

We’ll update this policy when Meerlet changes what it collects or who helps us. For important changes, we’ll tell you in the app or by email before they take effect. The date at the top shows the current version.

Questions or requests: [email protected]. Our Terms of Service explain the rules for using Meerlet.