Mepic App - Privacy Policy

Key Points Summary

This privacy policy applies to the Mepic app, developed by Totain Ltd.
We collect user-provided and automatically collected information.
We use your data to provide and improve our services.
Most data is stored in the EU, with some exceptions for Firebase services.
We implement security measures to protect your information.
You have rights regarding your personal data, including the right to access, correct, and delete it.
We do not knowingly collect data from children under 13.
This policy may be updated periodically.

Introduction
Information Collection and Use
Data Storage and Processing
Data Protection and Security
Third-Party Services
International Data Transfers
Your Rights and Choices
Children's Privacy
Changes to This Privacy Policy
Contact Us

1. Introduction

This privacy policy applies to the Mepic app (hereinafter referred to as "Application") for mobile devices and web browsers, which was developed by Totain Ltd (hereinafter referred to as "Service Provider", "we", "us", or "our") as a Free service.

We are committed to protecting your personal identifiable information (PII) and your right to privacy. If you have any questions or concerns about our policy or our practices with regards to your personal information, please contact us at mepic-support@totain.co.uk.

2. Information Collection and Use

2.1 User Provided Information

The Application acquires the information you supply when you download and register the Application. This may include:

Your name
Email address
Other information you choose to provide

Registration with us is optional. Providing PII is voluntary and no PII is collected automatically. However, please keep in mind that you may not be able to use some of the features offered by the Application unless you register with us.

2.2 Automatically Collected Information

In addition, the Application may collect certain information automatically, including, but not limited to:

The type of mobile device you use
Your mobile device's unique device ID
Your device's operating system and specifications
Your browser type and version
Coarse location information (e.g., country or city-level location based on IP address)
Information about the way you use the Application

This Application does not collect precise information about the location of your mobile device.

3. Data Storage and Processing

Most of your data is stored within the European Union (EU). However, there are some exceptions:

We use Firebase Analytics, which may process and store your data in any location where Google or its agents maintain facilities.
We also use Firebase Authentication, which processes data exclusively in data centers located in the United States.

As a result, some of your data, including PII, may be transferred to and processed in countries outside the EU, including the United States, for the purpose of providing Firebase services.

4. Data Protection and Security

We are committed to ensuring the security of your personal information. We use commercially reasonable physical, technical, and administrative safeguards to protect the information we process and maintain. However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure and we are unable to guarantee the absolute security of the personal information we have collected from you.

Our data protection measures include:

Encryption of data in transit using HTTPS
Secure storage of PII on Firebase with encryption at rest
Regular security audits and updates
Employee training on data protection and privacy practices

5. Third-Party Services

The Application utilizes third-party services that have their own Privacy Policies. Links to the Privacy Policies of third-party service providers used by the Application are provided below:

6. International Data Transfers

As mentioned earlier, your data, including PII, may be transferred to and processed in countries outside the EU, including the United States, for the purpose of providing Firebase services.

To ensure adequate protection for these international data transfers, we rely on Standard Contractual Clauses (SCCs) with Google. SCCs are legally binding agreements that ensure appropriate data protection measures are in place when transferring personal data from the EU to other countries.

We are committed to having a lawful basis for data transfers in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

7. Your Rights and Choices

Under the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and other applicable data protection laws, you have certain rights regarding your personal data:

Right to access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct any inaccurate or incomplete personal data.
Right to erasure: You can request that we delete your personal data under certain circumstances.
Right to restrict processing: You can ask us to restrict the processing of your personal data in certain cases.
Right to data portability: You can request a copy of your data in a machine-readable format.
Right to object: You can object to our processing of your personal data for direct marketing purposes.

To exercise any of these rights, please contact us at mepic-support@totain.co.uk. We will respond to your request within 30 days.

7.1 Data Retention

We retain User Provided data for the duration of your use of the Application and for 30 days after account deletion. Automatically Collected information is retained for 24 months, after which it may be stored in aggregate form.

You have the right to delete your account at any time through the User screen within the Application. Upon account deletion:

Your account is immediately deactivated, and all personally identifiable information (PII) is deleted from our active databases within 24 hours.
In compliance with GDPR and other applicable regulations, we permanently delete all your remaining personal data from our systems within 30 days.
Content you have created using the Application, as described in our Terms and Conditions, is owned by the Service Provider and is not deleted upon account deletion.
We retain non-personal data related to your actions within the Application, such as anonymized likes, dislikes, or comments on content.

8. Children's Privacy

The Service Provider does not knowingly collect or solicit personal information from anyone under the age of 13 or knowingly allow such persons to register with the Application. If you are under 13, please do not send any information about yourself to us, including your name, address, telephone number, or email address.

In the event that we learn that we have collected personal information from a child under age 13 without parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us at mepic-support@totain.co.uk.

9. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time for any reason. We will notify you of any changes to our Privacy Policy by posting the new Privacy Policy at this page and updating the "Last updated" date at the bottom of this page. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

10. Contact Us

If you have any questions regarding privacy while using the Application, or have questions about our practices, please contact us via email at mepic-support@totain.co.uk.

Last updated: 2024-08-16