Meridian Privacy Policy

This Privacy Policy explains how Norium ("Norium", "we", "us", or "our") collects, uses, and shares information when you use Meridian, our intermittent fasting and wellness app for iPhone (the "App").

Much of what you track in Meridian is health-related. In addition to this policy, our Consumer Health Data Privacy Policy explains your rights under Washington's My Health My Data Act and similar state laws. Our website is covered by the Norium Privacy Policy.

• Progress photos stay on your iPhone. We never upload them to our servers and cannot see them.
• Fasting and weight data sync to your account so they are backed up and available on your devices.
• Apple Health is optional and only used to power features in the App.
• We don't sell your data or use your health data for advertising.
• You can delete your account and data from within the App at any time.

Meridian lets you capture progress photos to see changes over time. These photos are stored locally in the App on your iPhone. They are not uploaded to Norium's servers, and we cannot access, view, or recover them.

The App only accesses your camera or photo library when you choose to add a photo, and only after you grant permission through iOS. You can change these permissions at any time in iOS Settings → Privacy & Security → Camera or Photos.

If you back up your iPhone to iCloud or a computer, your progress photos may be included in that backup, which is handled by Apple under its own privacy policy. Deleting a photo in the App, or deleting the App, removes the photos stored by the App on your device.

Meridian can optionally connect to Apple Health (HealthKit). If you enable it and grant permission through iOS, the App may read data such as weight, and may write data you log in Meridian (such as weight) to Apple Health. You choose exactly which data types to share.

Data obtained from Apple Health is used only to provide features in the App (for example, showing your weight trend next to your fasting history). We do not use HealthKit data for advertising or marketing, and we do not share it with advertisers, data brokers, or analytics providers, consistent with Apple's HealthKit requirements. You can revoke access at any time in iOS Settings → Privacy & Security → Health.

Meridian offers auto-renewing subscriptions purchased through Apple's App Store. Apple handles payment, billing, renewals, cancellations, and refunds, and its privacy policy applies to that processing. We receive information from Apple (and, where used, a service provider that helps us verify purchases) about your subscription status, plan, and transaction identifiers so we can unlock the features you've paid for. We do not receive your name, billing address, or payment card details from Apple.

• Provide, operate, and sync the App across your devices
• Create and maintain your account and authenticate you
• Show your fasting history, streaks, and weight trends
• Verify subscriptions and unlock paid features
• Respond to support requests and feedback
• Monitor, diagnose, and fix bugs and crashes
• Understand aggregate usage to improve the App
• Detect, prevent, and address fraud, abuse, or security issues
• Comply with legal obligations

We do not sell your personal information, and we do not use your fasting, weight, or other health data for advertising.

If you are in the European Economic Area or the UK, we process your information on the basis of performance of a contract (to provide the App you sign up for), your explicit consent (for health data, including Apple Health data), and our legitimate interests (for example, keeping the App secure and working correctly). You can withdraw consent at any time, for example by revoking Apple Health permissions or deleting your account.

We share information only with:

• Service providers who host our infrastructure, provide authentication, verify subscriptions, or support crash reporting on our behalf, under contracts that limit their use of the data to providing services to us
• Apple, when you use Sign in with Apple, Apple Health, or App Store purchases, as directed by you
• Legal and safety recipients, if required to comply with law or valid legal process, or to protect the rights, property, or safety of Norium, our users, or others
• A successor entity in a merger, acquisition, or sale of assets, subject to this policy

We do not sell or rent your personal information.

Account, fasting, and weight data are stored on secure cloud infrastructure with encryption in transit and at rest. Access to production data is restricted to authorized personnel who need it to operate the App. Progress photos never leave your device. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We keep your account, fasting, and weight data while your account is active. You can delete your account at any time in the App (Settings → Account → Delete Account) or by emailing us. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep limited information for legal, security, or fraud-prevention purposes. Residual copies in backups are overwritten on our regular backup cycle.

Deleting your account does not cancel an App Store subscription. Manage or cancel subscriptions in iOS Settings → [your name] → Subscriptions.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent, including by revoking Apple Health, camera, or photo permissions

You can delete your account and data in the App, and make any other request by emailing support@norium.io. We will respond within the time required by applicable law, and we will not discriminate against you for exercising your rights.

Norium is based in the United States, and we and our service providers may process information in the United States and other countries. Where required, we use safeguards such as standard contractual clauses for international transfers.

Meridian is intended for adults aged 18 and over and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

We may update this policy to reflect changes to the App or for legal, operational, or regulatory reasons. We will update the "Last updated" date above and, for material changes, notify you in the App before they take effect.

Questions about this policy or your data? Email support@norium.io.