Privacy Policy

Effective: May 23, 2026

This Privacy Policy explains how Meridian Learn Inc. ("Meridian," "we," "us") collects, uses, and shares information when you use meridianlearn.ai and our related services (the "Service"). By using the Service, you agree to this Policy.

1. Who we are

Meridian is operated by Meridian Learn Inc., a Delaware C corporation. You can reach us at support@meridianlearn.ai.

2. What this policy covers

This Policy covers information we collect through the meridianlearn.ai website, the Meridian web application, and any communications we have with you. It does not cover third-party websites or services we link to.

3. Information we collect

Account information

When you create an account, we collect your email address and a display name. If you sign in with Google, we receive your email and full name from Google as part of OAuth. If you sign in with an email magic link, we derive a display name from the local part of your email address until you change it.

Authentication and session data

We use Supabase Auth to manage sign-in. When you authenticate, we store a session token in HTTP-only cookies on your device. We also store a small amount of non-sensitive UI preference data (such as your light/dark theme choice) in your browser's local storage.

Learning content you create or generate

When you use the Service we store the learning data you generate, including:

Courses, modules, and lessons you create
Quiz attempts and answers, and the concepts the AI inferred from them
Chat history with the AI tutor
Highlights, saved notes, flashcards, and study materials
Lesson progress, mastery scores, daily streaks, and XP totals

When an account is used by a family, this content should not include personal identifiers about a child under 13. See “Children and family use” below.

Files you upload

On paid plans you can upload study materials. We accept PDF documents, common image formats (JPEG, PNG, GIF, WebP), and plain text or Markdown. Files are limited to 10 MB each, and text content is capped at 100,000 characters per upload. We extract the text from these files and store it as text in our database (PostgreSQL via Supabase) so the AI can use it to build your courses and answer your questions. We do not store the original file in cloud object storage. Do not upload files that contain personal information about a child under 13 (see “Children and family use” below).

Billing information

If you subscribe to a paid plan, we store your subscription tier, status, billing period, current period end date, your Stripe customer ID, and your Stripe subscription ID. We never see or store your full card number. Stripe collects payment card information directly through their secure checkout.

Product analytics

We use Vercel Web Analytics to understand aggregate traffic patterns (page views, referrers, country, device type, and browser). Vercel Analytics does not use cookies or any client-side persistent identifiers, does not track you across sites, and anonymizes visitor IP addresses before they are stored. See Vercel's Analytics privacy documentation for details.

Beyond Vercel Analytics, Meridian does not embed advertising trackers or third-party behavioral analytics tools such as Google Analytics, PostHog, Segment, Amplitude, Mixpanel, or Facebook Pixel. We do not sell or rent personal information.

4. How we use your information

To operate the Service: generate personalized courses, run mastery quizzes, and power the AI tutor.
To process payments and manage subscriptions through Stripe.
To send you transactional and account email (for example, course-ready notifications and billing receipts) through Resend.
To detect and prevent abuse, fraud, and security incidents.
To comply with legal obligations and enforce our Terms of Service.

5. AI processing and sub-processors

To provide the Service, Meridian shares the data necessary to perform a given task with the following sub-processors:

Anthropic— we send your chat messages, the extracted text of files you upload, lesson context, and quiz answers to Anthropic's Claude models (Sonnet, Haiku, and Opus) to generate responses, courses, and grading. In some deployments these requests are routed through Google Cloud Vertex AI. We do not authorize Anthropic to use your data to train their general-purpose models.
Supabase — managed PostgreSQL database and authentication service. All persistent user data is stored with Supabase.
Stripe — payment processing and subscription billing. Stripe collects and stores your payment card details directly under their own privacy policy.
Resend — transactional email delivery.
ElevenLabs — when the AI tutor voice mode is enabled, we send the text the tutor wants to speak to ElevenLabs to generate audio.
Vercel — application hosting, durable workflows for course generation, and privacy-friendly web analytics (no cookies, anonymized IPs).

We do not sell personal information, and we do not share it with advertisers or data brokers. We do not authorize any sub-processor to knowingly process personal information collected from a child under 13.

6. Data retention

We retain your information for as long as your account is active. When you delete your account, we delete the associated data, subject to a short retention window for backups and to the extent we are required to keep records for legal, tax, or fraud- prevention purposes.

7. Your rights and how to delete your account

You can permanently delete your Meridian account and your associated data from inside the app. This triggers a cascading delete of your profile, courses, lessons, chat history, quiz attempts, uploads, and other learning data.

Depending on where you live, you may have additional rights:

EEA, UK, and Switzerland (GDPR / UK GDPR): rights of access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with your local supervisory authority.
California (CCPA / CPRA):rights to know, delete, correct, and opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law.

To exercise any right you cannot exercise directly in the app, email us at support@meridianlearn.ai. We will verify the request against your account before acting on it.

8. International transfers

Meridian Learn Inc. is based in the United States, and your data is processed in the United States and other countries where our sub-processors operate. By using the Service, you understand that your information may be transferred to countries whose data-protection laws may differ from those of your country.

9. Security

We protect your data with TLS in transit, row-level security in our database, scoped service-role keys for server-side access, and least-privilege access controls for our team. No method of transmission or storage is perfectly secure. If we experience a security incident affecting your information, we will notify you as required by law.

10. Children and family use

Meridian is a general-audience educational service and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13.

Who can hold an account

Account holders must be 13 or older. Users between 13 and 17 may use the Service only if a parent or legal guardian has reviewed our Terms of Service and accepted them on their behalf. The account holder is the data subject under this Policy.

Family use under a parent's account

A parent or guardian who holds a Meridian account may permit their under-13 child to use the Service through the parent's account, under parental supervision. The parent remains the account holder and the responsible party for all activity on the account.

Parental responsibilities

If you allow a child under 13 to use Meridian through your account, you agree to:

Choose courses, topics, and lessons appropriate for your child.
Supervise the child's use, including AI tutor chat sessions and voice mode.
Instruct the child not to enter personal information about themselves or others — including real full name, address, phone number, school name, photographs of themselves, or government identifiers — into tutor chats, quizzes, notes, or uploads.

What we do on our side

Our AI tutor is instructed not to ask users for personal information and to redirect the conversation if such information is volunteered. The sub-processors named in §5 are not authorized to knowingly process personal information collected from a child under 13. We do not use account data for behavioral advertising, and we do not sell personal information.

Deletion of child-entered content

If a child has entered personal information into your account, email us at support@meridianlearn.aifrom the account's registered email address and identify the specific chat message(s), quiz answer(s), upload(s), or notes that contain the information. We will delete those items within 30 days of receiving a verified request. You may also delete the entire account at any time from inside the app, which cascades to all associated data as described in §7.

Accounts created by under-13s

If we learn that a child under 13 has created an account in their own name without a parent or guardian, we will terminate the account and delete the associated data. Contact us at support@meridianlearn.ai to report such an account.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective date above. If we make a material change, we will notify you by email or through the Service before the change takes effect.

12. Contact

Meridian Learn Inc.
support@meridianlearn.ai