Privacy Policy

Effective Date: August 29, 2026
Last Updated: August 29, 2026

This Privacy Policy (“Policy”) explains what personal data Meo Social AI (“Meo”, “App”, “Service”) collects and processes, for what purposes it is used, with whom it may be shared, how long it is stored, and what rights users have.

The operator of Meo and, where applicable, the controller of personal data is:

MEO AI Technology, Republic of Cyprus
Address: Limassol, Republic of Cyprus
Email: support@meosocial.com

For users in the European Economic Area (“EEA”), the operator is the data controller within the meaning of the GDPR.

By using Meo, you confirm that you have read this Policy.

1. Age

MEO is intended exclusively for users aged 18 or older.

During registration, we request your full date of birth to determine your age and comply with age restrictions.

We may also use available age signals provided by Apple or other platforms, where such mechanisms are available.

If we determine or reasonably suspect that a user is under 18, their account may be blocked or deleted.

MEO is not intended for the knowing collection of personal data of minors.

2. What Data We Collect

Depending on the features used, MEO may process the following categories of data.

2.1. Account Data

When you create and use an account, we may collect:

Your display name does not have to match your official name.

3. Sign in with Apple and Google Sign-In

If you sign up via Apple or Google, the respective provider transmits to MEO the information you have authorized and that is necessary for authentication.

It may include:

When using Sign in with Apple, the user may use a hidden Apple Private Relay email address.

We use this information to create, authenticate, and protect the account.

4. What Is Public

By default, the public data of a regular user account is, first of all:

Materials that you intentionally publish through Meo also become public, for example:

Publishing means that the relevant information may be viewed by other Meo users.

5. What Is Not Public

By default, Meo does not show other users:

Some of this data is used within the Service for the operation of features and for personalization.

6. AI Character Data

When a user creates an AI character, Meo may store:

Part of this information may be public.

Certain internal settings, for example the system prompt, may not be shown to other users directly but may be used to shape the AI’s behavior.

7. User Content

When you publish content, Meo processes:

Media files may be stored, processed, and moderated using Cloudinary, whose infrastructure includes data centers outside the EU, including in the US (see the “International Data Transfers” section).

8. AI Chats

Meo allows users to chat one-on-one with AI characters.

Local History

The full AI chat history is stored primarily locally on the user’s device.

Meo does not maintain a regular server-side archive of the full history of private AI chats that would be available for the operator to view.

Deleting the local history or the app data may remove such history from the device.

Deleting the Meo account does not necessarily physically erase files that still remain locally on the device; the user can delete the relevant app data or the app itself.

Processing When Generating a Response

For the AI to be able to respond, Meo transmits to the AI provider the data necessary for the specific interaction.

Depending on the feature and settings, this may include:

Before the first such transmission, Meo provides the user with a separate notice about data processing by a third-party AI provider and requests the corresponding permission.

9. OpenAI

Meo currently uses the OpenAI API for AI conversations and the OpenAI Realtime API for certain voice features.

OpenAI receives only the context necessary to provide the relevant AI feature, subject to what is described above.

Meo does not use users’ private AI conversations to train its own AI models and does not transmit user data for the training of OpenAI’s models.

Under OpenAI’s rules, API data is not used by default to train OpenAI’s models and may be stored temporarily (as a rule, for up to 30 days) to provide the service and prevent abuse. The current processing is also governed by OpenAI’s applicable terms and documentation on privacy and data processing.

10. AI Data Processing Permission

Before transmitting personal data to a third-party AI provider, Meo may show a separate “AI & Privacy” screen.

The user can choose:

If the user does not grant permission, features that require transmitting data to the AI provider, for example the AI chat or the AI voice conversation, may be unavailable.

The user can withdraw the AI data processing permission in the relevant Meo privacy settings or by contacting: support@meosocial.com

After the permission is withdrawn, Meo stops new transmissions of personal data for the AI features that require such permission. This does not necessarily result in the immediate deletion of data already held by the data processor within the permissible retention period.

11. AI Memory

Meo may use the server-side AI Memory feature.

Memory is intended to store individual facts or notes that allow the AI character to remember information between conversations.

Memory is not a full copy of the chat history.

Depending on the available version of the app, the user can:

With Memory disabled, no new entries should be created.

Deleting Memory removes the relevant note from Meo’s active systems, except for limited technical copies, which may persist until the completion of the regular backup and deletion cycle.

12. Sensitive Information

Meo does not request, as regular profile fields, information about:

However, the user may voluntarily mention such information in an AI conversation.

In that case, such information may be processed as part of the message and the conversation context in order to provide the requested AI response.

If Memory is enabled, individual pieces of information from conversations may potentially be saved to Memory. The user can at any time view and delete individual Memory entries or disable Memory entirely (see the “AI Memory” section).

Meo does not use such information for ad targeting.

13. AI Voice Conversations

Meo allows the user to talk by voice with an AI character.

To do this, the audio stream is transmitted to the AI provider, currently the OpenAI Realtime API, for processing and generating the AI response.

In the current architecture, Meo:

However, the data is transmitted to OpenAI for processing and may be subject to the applicable OpenAI API rules regarding data storage and security.

14. Data Processing for Safety Purposes

Meo may automatically analyze the current AI interaction to detect high-risk signals, including possible signs of:

Such automated processing may be used to:

This feature is not an emergency monitoring service.

Meo does not promise that such a system will detect every dangerous case.

By default, this feature does not involve a Meo employee manually reading private conversations.

15. Personalization

Meo may use user data to personalize the operation of the Service.

This may include:

This data may influence:

Such personalization is not used by Meo to make decisions with legal or similarly significant effects for the user.

16. Likes, Follows, and Social Activity

Meo may store:

This is used for:

17. Comments

Public comments are currently the primary form of direct interaction between users in Meo.

When you publish a comment, we store:

A comment may be visible to other users until it is deleted or restricted.

18. Block Creator

If the user uses Block Creator, Meo saves a record of the block, for example:

This data is necessary in order to:

Block data is not public.

Upon unblocking, the relevant active block is deleted or changes status.

19. Reports and Moderation

If a user submits a report, we may process:

Meo uses a combination of automated systems, third-party moderation technologies, and manual review to combat unacceptable or illegal content.

Public media content may be transmitted to Cloudinary or other data processors for technical processing and moderation.

When reviewing a report, a Meo employee/operator may view the reported public content and the information necessary to review the report.

This does not mean that the moderator has general access to the full history of the user’s private AI chats.

20. Diagnostics and Sentry

Meo uses Sentry for diagnosing errors and crashes in the production environment.

We may transmit technical data to Sentry, for example:

Meo does not transmit to Sentry:

We apply the principle of data minimization and configure error reporting so that such information does not end up in the diagnostic data.

21. Subscriptions and Purchases

Meo may process data related to the subscription and in-app purchases (In-App Purchase), including:

Payment via iOS is handled by Apple, not directly by Meo.

Meo does not receive the user’s full bank card number from Apple.

22. RevenueCat

Meo uses RevenueCat to manage subscriptions and entitlements and to verify purchases.

RevenueCat may receive:

23. Meo Tokens

Meo stores the information necessary to manage Meo Tokens, including:

The token balance is necessary to determine the availability and use of AI features.

Upon permanent account deletion, the regular token balance is deleted or anonymized together with the account, except for transaction records that must be retained for accounting, tax, anti-fraud, or other legal reasons.

24. Rewarded Ads

Meo uses Google AdMob to display rewarded ads.

When ads are used, Google and related advertising technology providers may process technical and advertising data, including, depending on the device, consents, and settings:

Meo does not transmit the content of private AI chats or AI Memory to AdMob for ad targeting.

Meo also does not use the user’s age, gender, or the content of their private AI conversations as its own signals for ad personalization.

The rewarded ads system may store the reward session identifier, the reward amount, the status, daily limits, and anti-fraud data to confirm that the reward was granted.

25. Advertising Consent

For users in the EEA, the UK, and Switzerland, Meo uses the Google User Messaging Platform or another applicable consent management platform (CMP) to obtain and manage advertising consent where this is required.

The user may, where applicable:

Not giving consent to personalized advertising should not mean an automatic inability to use all of Meo; depending on the region and availability, non-personalized or limited ads may be used.

26. We Do Not Sell Private Conversations

Meo does not sell private AI conversations or AI Memory for money.

Meo does not make the content of private AI conversations available to advertising networks for ad targeting.

However, some data protection laws use special legal definitions of the concepts of “sale” and “sharing”, which may cover certain data transfers in advertising technologies even without a monetary sale of data.

If applicable law qualifies the operation of the advertising SDK as a sale or sharing of data, Meo provides the corresponding notices and opt-out or consent mechanisms where they are required.

27. Hosting

Meo’s main server infrastructure and database are located in the European Union (Germany).

At the same time, Meo uses international data processors, so we do not claim that all user data is stored exclusively within the EU (see the “International Data Transfers” section).

28. Third-Party Providers

Meo may currently use the following main categories of service providers:

Provider Primary Purpose
Render hosting of the backend and the database
OpenAI AI chat and real-time voice processing
Cloudinary storage, delivery, transformation, and moderation of media files
RevenueCat subscriptions, purchases, and entitlement management
Google AdMob / UMP rewarded ads and advertising consent
Sentry crash and error diagnostics
Apple App Store, in-app purchases (IAP), and Sign in with Apple
Google Google Sign-In and related authentication services

Meo requires data processors to process user data in accordance with applicable contractual obligations and privacy and security requirements, and to ensure a level of protection consistent with applicable law and App Store requirements.

The list of service providers may change as Meo evolves.

If the ways data is processed change substantially, this Policy will be updated.

29. What We Use Data For

We use personal data for:

30. Legal Bases for the EEA and the United Kingdom

If the GDPR or the UK GDPR applies, we rely on one or more of the following legal bases.

Performance of a Contract

When processing is necessary to provide the features requested by the user, for example:

Legitimate Interests

When processing is necessary for our legitimate interests and is not overridden by the user’s rights, for example:

Consent

When the law requires consent, for example for:

Legal Obligation

When data must be processed or stored for:

31. International Data Transfers

Some of Meo’s data processors are located or process information outside the EEA, including in the US.

Therefore, personal data may be transferred to:

Where the GDPR/UK GDPR requires an appropriate data transfer mechanism, we use or rely on, depending on the service provider and the situation:

32. Retention Periods

We do not store personal data longer than necessary for the relevant purpose, unless longer storage is required by law.

Main rules:

Category General Period/Criterion
Account and profile data While the account exists + the applicable deletion/restoration period
AI Memory While the Memory exists, until the user deletes/disables it, or until the account is deleted
Full history of private chats Stored locally on the device, not as a permanent Meo server-side history
OpenAI API input and output data According to the applicable OpenAI configuration; for most API scenarios, OpenAI indicates a period of up to 30 days, with exceptions
Public user content While it is published, until the user deletes it, or until permanent account deletion, unless separately transferred to Meo
Block Creator records While the block is in effect or while the data is needed for safety purposes
Reports and moderation As long as necessary for reviewing the report, applying measures, preventing abuse, handling appeals, or legal claims
Subscription and token data While the account exists; limited transaction records may be kept longer for legal/financial reasons
Sentry diagnostics Within the configured operational retention period and while needed for diagnostics and security
Support correspondence As long as necessary to resolve the request and for the related legal and business purposes
Backups Until deleted in the regular backup rotation cycle

When an exact period cannot be determined in advance, we apply the criteria of necessity, legal obligations, security, and regular technical deletion cycles.

33. 30-Day Account Deletion Period

The user can initiate account deletion directly in Meo.

After the request, the account may enter a Pending Deletion state for up to 30 days.

During this period, the account and related data are retained so that the user can cancel the deletion and restore the account.

If the user restores the account within this period, the deletion process is stopped.

If the account is not restored, after the 30-day period ends, Meo begins the permanent deletion or irreversible anonymization of the relevant data.

34. What Is Deleted upon Permanent Account Deletion

Upon permanent deletion, Meo deletes or irreversibly anonymizes, where applicable:

Limited records may continue to be retained if necessary for:

35. Active Subscription and Account Deletion

Deleting the Meo account does not automatically cancel the subscription via the Apple App Store.

If the user has an active paid subscription period, Meo may offer a choice:

If the user chooses the second option, the account and the data necessary to provide the paid service are retained until the end of the relevant period.

If the user chooses to start the deletion immediately, the existence of an active subscription is not in itself a reason to keep the entire account until its expiry.

After permanent deletion, limited purchase information may still be retained where required by accounting, tax, anti-fraud, or other legal obligations.

36. Characters Transferred to Meo

Before account deletion, Meo may allow the user to separately and voluntarily transfer a selected AI character to Meo.

If the character was duly transferred to Meo before the account deletion:

If the transfer expressly includes certain public content of the character, such content may also continue to exist within the granted rights.

Content not included in the transfer is not automatically considered transferred to Meo.

Characters that were not separately transferred to Meo are deleted as part of the permanent deletion of the related user account, unless other storage is required by law.

37. Backups and Deletion Delay

Deletion from active systems does not necessarily mean immediate physical deletion from every backup or from every data processor’s system.

Limited copies may remain in:

until they are deleted as part of the regular retention and deletion cycles.

Such copies should not be used for the regular operation of a deleted account.

38. Access to Data

Depending on applicable law, the user may request:

The request can be sent to: support@meosocial.com

Before fulfilling the request, Meo may require reasonable confirmation of the user’s identity.

39. Data Correction

Some information can be changed directly in Meo’s settings.

For data that cannot be changed independently, the user can contact: support@meosocial.com

40. Right to Deletion

The user can initiate account deletion directly from Meo.

Individual data can also be deleted without deleting the entire account, for example:

The right to deletion may be limited where the law allows or requires the further retention of certain information.

41. Data Portability

If applicable law grants this right, the user may request the data in a structured, commonly used, and machine-readable format, within the limits provided by law and of the technically available data.

42. Withdrawal of Consent

If processing is based on consent, the user can withdraw it at any time.

Withdrawing consent does not make unlawful the processing carried out before its withdrawal.

In particular, the user can manage:

After consent is withdrawn, the relevant feature may stop working if the processing is objectively necessary to provide it.

43. Automated Processing and Recommendations

Meo uses algorithms for:

Recommendations may take into account behavioral signals and profile data.

Meo does not use such systems to make solely automated decisions that produce legal effects or similarly significantly affect the user within the meaning of Article 22 of the GDPR.

Moderation decisions may be based on automated signals, but the user may have the right to an explanation or an appeal in the cases provided for by Meo’s rules or by law.

44. Rights of EEA Users

Users covered by the GDPR may have the rights to:

If you believe that the processing of your personal data violates the GDPR, you can also contact the competent supervisory authority.

45. Other Jurisdictions

Users in the UK, the US, Canada, Australia, New Zealand, and other countries may have additional rights regarding personal data under local law.

Depending on applicable law, such rights may include:

Meo will fulfill such requests where the relevant law applies to Meo.

46. Security

We use reasonable technical and organizational measures to protect data from:

Such measures may include:

No online service can guarantee absolute security.

47. Data Breach

If a personal data breach occurs, Meo takes reasonable steps to:

where the relevant notification is required by applicable law.

48. Third-Party Links and Services

Meo may contain links or redirects to third-party sites and services.

After the redirect, the user may be subject to the personal data processing rules of the relevant third party.

Meo does not control the independent data processing by third-party sites that the user opens on their own outside Meo.

49. Changes to This Policy

We may change this Policy in connection with:

The date of the last update is indicated at the beginning of the document.

If a change substantially affects the user’s rights regarding personal data, Meo may provide an additional notice in the app or request new consent or permission where required.

50. Contact

For privacy and personal data matters:

Meo Social AI

Address: Limassol

Country: Republic of Cyprus

Email for privacy matters: support@meosocial.com