Privacy notice
Most of what you put into Meraki never leaves your device. Here's exactly what does, and why.
Who is responsible
Meraki is the controller of the personal data described here. Contact us at the support email shown on your Stripe receipt.
Kept on your device only
Your search profile, letters, evidence bank, practice history, recordings and access codes are stored in your browser on your own device. We can't see them. You can wipe them at any time from Plans → Your data → Delete my data, or by clearing your browser data.
Sent for AI feedback
- When you ask for feedback, the text you submit (and, for video answers, up to four still frames from your recording) passes through our server to our AI provider, Anthropic, to generate a reply.
- We don't store that content. Anthropic processes it under its commercial terms, which say it isn't used to train its models and is kept only for a limited period for safety and abuse monitoring.
- While you record on a laptop, live captions use your browser's built-in speech recognition. Depending on your browser, its maker (for example Google in Chrome, Apple in Safari) may process the audio to produce the text. The transcript then stays on your device unless you ask for feedback.
- After a video take, the sound of your answer (not the picture) is sent to OpenAI to produce an accurate transcript. It is not stored by Meraki, and OpenAI does not use it to train its models under its API terms.
- The video file itself stays on your device.
Payments
When you buy, Stripe collects your email address, payment details and country to take payment, calculate tax and prevent fraud. We can see your email, the product bought and the last four digits of your card, which we use to recover a lost pass and handle refunds. Stripe keeps payment records as the law requires.
Fair-use counters
To prevent misuse we count AI requests per pass and per network. A network is recorded only as a scrambled code made from your IP address, never the address itself. Counters are stored with Upstash (servers in London) and delete themselves automatically within 30 days.
Hosting and analytics
Meraki is hosted on Vercel, which keeps short-lived technical logs (such as IP address and pages requested) to run and secure the service. We use Vercel Web Analytics, which counts visits without cookies and without identifying you. We don't use advertising or tracking cookies.
Why we can use your data
- To provide the service you asked for (contract): feedback, passes, recovery.
- Our legitimate interest in keeping the service secure and preventing misuse: fair-use counters and logs.
- Legal obligations: payment and tax records.
Who we share with
Only the providers above: Anthropic (AI), OpenAI (transcription), Stripe (payments), Vercel (hosting and analytics) and Upstash (counters). Some are in the US; transfers are covered by their standard data protection safeguards. We never sell your data or share it with schools or search firms.
Your rights
Under UK and EU data protection law you can ask to access, correct or delete personal data we hold, object to how we use it, or ask us to restrict it. Email us and we'll respond within a month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local regulator.
Age
Meraki is for working professionals and is not intended for anyone under 18.
Changes
If we change how we use data we'll update this page and the date at the top.