Mediteira.

YOUR ACCOUNT · YOUR CHOICES

Privacy Policy

What we collect, why we need it, and the choices you have.

Who is responsible

Mediteira is operated by Yevhenii Riechkov, publishing as eecorp.info, Ukraine (the data controller). Contact support@eecorp.info for privacy questions or requests.

Postal address: Vadyma Vysochyna Street, 12, Kropyvnytskyi, Kirovohrad Oblast, 25000, Ukraine.

This policy covers the Mediteira mobile app and mediteira.com. It describes the current MVP; new features may require an updated policy.

Information we process

  • Account information: your email address, user ID, sign-in provider, authentication and security records. Google sign-in may supply your name and profile image. Google sign-in services may also process phone number, coarse location, account and device identifiers, and technical usage information to provide and secure sign-in under Google’s policies. Sign in with Apple on iPhone and iPad supplies an Apple account identifier, your email address or a private relay address when you choose Hide My Email, and your name if you choose to share it at first sign-in. Password authentication is handled by Supabase; we do not receive your Google or Apple password or send passwords by email.
  • Account choices: favorite sessions and saved narrator choices, linked to your user ID. These choices can indicate wellbeing interests; we do not use them to diagnose a condition or target advertisements.
  • On your device: reminder time, sound and voice defaults, accessibility preferences, authentication state and cached content. Your time zone is used locally to schedule reminders.
  • Optional review reports: when you mark a problem in a meditation, the content and recording IDs, playback position, timestamp and your account identifier are sent to our administration system.
  • Purchases and subscriptions: Google Play processes Android subscription payments, and Apple processes App Store subscription payments on iPhone and iPad. RevenueCat receives your Mediteira user ID, purchase tokens or transaction identifiers and transaction history, product and offer identifiers, subscription and trial status, renewal and expiry information, and related app, device, locale and network information. This lets us validate and restore purchases, provide Premium status, prevent fraud and understand subscription performance. We do not receive your full payment-card details. We do not send RevenueCat your meditation history or your name or email address as customer attributes.
  • Support: your email address, message and any information you choose to send us. Please do not send passwords, recovery links, payment details or sensitive medical information.
  • Technical information: service providers receive network information such as IP address, request time, browser or device information, and security logs. Firebase Crashlytics may process installation identifiers, device and app information and crash diagnostics to help us fix faults.

The MVP does not request access to your contacts, camera, microphone, precise location, HealthKit or Health Connect. It does not ask for diagnoses or treatment records. Automated Google Analytics collection and advertising identifier collection are disabled in the current MVP build.

Why we use information

We use account data to provide sign-in, recovery, saved choices and account deletion; purchase information to validate subscriptions, restore access and analyze subscription performance; technical data to operate and secure the service and fix faults; and support messages to answer your requests. Optional reminders require your device’s notification permission.

Where GDPR or similar law applies, we rely on performance of our service contract for account functions, legitimate interests in service security and reliability where appropriate, consent when required for optional processing, and legal obligations where applicable. You can withdraw a permission in device settings or contact us about an objection.

Providers and sharing

We use Supabase for authentication, database and media storage, Resend for transactional authentication emails, Google Firebase for app infrastructure and crash diagnostics, RevenueCat for purchase validation, subscription management and subscription analytics, and OpenAI Sites / Cloudflare infrastructure to host this website. Google Play and Apple process purchases and payment information under their respective policies. Google processes Google sign-in when you select it. Apple processes Sign in with Apple when you select it on iPhone or iPad. Our email service processes messages you send to support.

These providers process information needed to deliver their services. Data may be processed outside your country, including in the European Union and the United States, under provider safeguards and applicable data protection rules. We may disclose information when legally required, to protect the service or users, or to a successor with appropriate safeguards if ownership changes.

We do not sell personal information or use your Mediteira activity for targeted advertising. The MVP does not display third-party advertisements.

Storage and retention

Account information, favorites and saved voice choices are kept while your account remains active, until you remove them or delete the account. Account-linked review reports are removed with account deletion. Shared app content remains available; references to a deleted content editor are anonymized.

Deletion removes these records from the live account system. Database backups rotate under Supabase’s configured retention (currently seven days on our Pro plan). Security, delivery and diagnostic logs are separate from live account records and may remain for their limited provider retention periods; Firebase documents a 90-day crash-data retention period before removal begins. Records required for a legal duty or an active dispute may be kept for that purpose and then removed.

Purchase and subscription records are held by the store used for the purchase (Google Play or Apple) and RevenueCat for subscription operation, restoration, fraud prevention, financial recordkeeping and applicable legal duties. Contact support to request deletion of your RevenueCat customer record; records required for an active subscription, a dispute or a legal duty may need to be retained. Deleting a Mediteira account does not cancel a store subscription. Cancel Android subscriptions separately in Google Play, and App Store subscriptions in Settings → your name → Subscriptions on iPhone or iPad.

Support correspondence is retained while needed to resolve and document your request and comply with applicable obligations. Ask us to erase correspondence that is no longer needed. Device preferences and caches can be removed by clearing app data or uninstalling the app. In-app deletion also clears account-related preferences and review marks on that device; on other devices, sign out and remove app data.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export or erase information, restrict or object to processing, withdraw consent, and complain to your local data protection authority. Contact support@eecorp.info using your account email. We may verify ownership before acting and will respond within applicable legal time limits.

You can remove favorites in the app, change preferences in Settings, turn off notification permission, and delete your account or request deletion without the app. Logging out or uninstalling alone does not delete your account. After deleting an account created with Apple, also remove Mediteira under Settings → your name → Sign in with Apple on your iPhone or iPad to revoke Apple’s separate sign-in permission. See the deletion page for steps.

Website and recovery links

This website has no advertising pixels or optional analytics cookies. Hosting providers may keep necessary security and delivery logs. The recovery page keeps authentication tokens in page memory only, removes recovery fragments from the address bar, and sends authentication requests only to our Supabase project. Do not share a recovery link. Leaving or refreshing a browser reset page may require requesting another link.

Children and changes

Mediteira is a general wellbeing service and is not specifically designed for children. Where a young person needs parental permission to use a service or provide personal information, that permission is required. If you believe a child supplied data without required permission, contact us so we can investigate and remove it where appropriate.

We may update this policy as the service changes. The updated date appears on this page; material changes will be communicated as required by law.