Meridian

Privacy Policy

Effective: May 8, 2026

This Privacy Policy explains how Meridian Learn Inc. ("Meridian," "we," "us") collects, uses, and shares information when you use meridianlearn.ai and our related services (the "Service"). By using the Service, you agree to this Policy.

1. Who we are

Meridian is operated by Meridian Learn Inc., a Delaware C corporation. You can reach us at support@meridianlearn.ai.

2. What this policy covers

This Policy covers information we collect through the meridianlearn.ai website, the Meridian web application, and any communications we have with you. It does not cover third-party websites or services we link to.

3. Information we collect

Account information

When you create an account, we collect your email address and a display name. If you sign in with Google, we receive your email and full name from Google as part of OAuth. If you sign in with an email magic link, we derive a display name from the local part of your email address until you change it.

Authentication and session data

We use Supabase Auth to manage sign-in. When you authenticate, we store a session token in HTTP-only cookies on your device. We also store a small amount of non-sensitive UI preference data (such as your light/dark theme choice) in your browser's local storage.

Learning content you create or generate

When you use the Service we store the learning data you generate, including:

  • Courses, modules, and lessons you create
  • Quiz attempts and answers, and the concepts the AI inferred from them
  • Chat history with the AI tutor
  • Highlights, saved notes, flashcards, and study materials
  • Lesson progress, mastery scores, daily streaks, and XP totals

Files you upload

On paid plans you can upload study materials. We accept PDF documents, common image formats (JPEG, PNG, GIF, WebP), and plain text or Markdown. Files are limited to 10 MB each, and text content is capped at 100,000 characters per upload. We extract the text from these files and store it as text in our database (PostgreSQL via Supabase) so the AI can use it to build your courses and answer your questions. We do not store the original file in cloud object storage.

Billing information

If you subscribe to a paid plan, we store your subscription tier, status, billing period, current period end date, your Stripe customer ID, and your Stripe subscription ID. We never see or store your full card number. Stripe collects payment card information directly through their secure checkout.

What we do not collect

Meridian does not run third-party analytics or advertising trackers. We do not embed PostHog, Google Analytics, Segment, Amplitude, Mixpanel, Facebook Pixel, or similar tools. We do not sell or rent personal information.

4. How we use your information

  • To operate the Service: generate personalized courses, run mastery quizzes, and power the AI tutor.
  • To process payments and manage subscriptions through Stripe.
  • To send you transactional and account email (for example, course-ready notifications and billing receipts) through Resend.
  • To detect and prevent abuse, fraud, and security incidents.
  • To comply with legal obligations and enforce our Terms of Service.

5. AI processing and sub-processors

To provide the Service, Meridian shares the data necessary to perform a given task with the following sub-processors:

  • Anthropic— we send your chat messages, the extracted text of files you upload, lesson context, and quiz answers to Anthropic's Claude models (Sonnet, Haiku, and Opus) to generate responses, courses, and grading. In some deployments these requests are routed through Google Cloud Vertex AI. We do not authorize Anthropic to use your data to train their general-purpose models.
  • Supabase — managed PostgreSQL database and authentication service. All persistent user data is stored with Supabase.
  • Stripe — payment processing and subscription billing. Stripe collects and stores your payment card details directly under their own privacy policy.
  • Resend — transactional email delivery.
  • ElevenLabs — when the AI tutor voice mode is enabled, we send the text the tutor wants to speak to ElevenLabs to generate audio.
  • Vercel — application hosting and durable workflows for course generation.

We do not sell personal information, and we do not share it with advertisers or data brokers.

6. Data retention

We retain your information for as long as your account is active. When you delete your account, we delete the associated data, subject to a short retention window for backups and to the extent we are required to keep records for legal, tax, or fraud- prevention purposes.

7. Your rights and how to delete your account

You can permanently delete your Meridian account and your associated data from inside the app. This triggers a cascading delete of your profile, courses, lessons, chat history, quiz attempts, uploads, and other learning data.

Depending on where you live, you may have additional rights:

  • EEA, UK, and Switzerland (GDPR / UK GDPR): rights of access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with your local supervisory authority.
  • California (CCPA / CPRA):rights to know, delete, correct, and opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law.

To exercise any right you cannot exercise directly in the app, email us at support@meridianlearn.ai. We will verify the request against your account before acting on it.

8. International transfers

Meridian Learn Inc. is based in the United States, and your data is processed in the United States and other countries where our sub-processors operate. By using the Service, you understand that your information may be transferred to countries whose data-protection laws may differ from those of your country.

9. Security

We protect your data with TLS in transit, row-level security in our database, scoped service-role keys for server-side access, and least-privilege access controls for our team. No method of transmission or storage is perfectly secure. If we experience a security incident affecting your information, we will notify you as required by law.

10. Children

Meridian is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users between 13 and 17 may use the Service only with the involvement and agreement of a parent or legal guardian. If you believe a child under 13 has created an account, contact us at support@meridianlearn.ai and we will delete the account.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective date above. If we make a material change, we will notify you by email or through the Service before the change takes effect.

12. Contact

Meridian Learn Inc.
support@meridianlearn.ai

See also our Terms of Service.