Effective Date: April 1, 2025

mE-Social Privacy Policy

Welcome to mE Social !

Your privacy is foundational to our platform and our promise to you. mE Social is built differently — your data stays on your device, and only you have the keys. This Privacy Policy explains the limited data we collect, how it’s used (if at all), and your rights in controlling every aspect of it.

This document is designed to:

• Clarify what little data we collect (e.g., device tokens, error logs),
• Explain how data stays in your hands, and
• Reaffirm our commitment to privacy-first design and transparent practices.

If you have any concerns or questions, we encourage you to reach out. We built mE Social to give you back control — and this Privacy Policy ensures you understand how.

1. Information Collection and Use

Registration and Account Management

• Minimal Required Information: When you register for an account on mE Social, we collect the bare minimum necessary to create and secure your account. This may include your first name, email address, device ID, and optionally your preferred time zone or social channel preferences. We do not store passwords or any sensitive personal content on our servers.
• Local First: All your personal data, including your content drafts, schedules, social API tokens, and preferences, are stored locally on your device unless explicitly routed through third-party APIs for posting.

How We Use Your Information

• Service Delivery: Your locally stored data enables you to use mE Social’s features — such as scheduling, cross-posting, and managing social media content — entirely from your device. We use any limited backend communication only for application updates, basic telemetry, and error logging (non-identifiable).
• Communication: Your email address may be used to send essential notices, such as feature rollouts, bug alerts, or terms updates. These communications are designed to improve your experience, and you may opt out of non-critical communications at any time.
• Service Improvement: To improve the user experience, mE Social may collect non-personal data such as app usage frequency, crash reports, or anonymous analytics. No personally identifiable user content is accessed.
• Security: We use local encryption and device-level protections to help ensure that only you can access your data. No content ever leaves your device unless it’s being published to your linked social account via API calls you initiate.

User-Generated Content

mE Social does not store, access, or monetize your user-generated content. You remain the sole owner of your drafts, scheduled posts, linked profiles, and publishing logic. All such data lives entirely on your device.

At mE Social, we respect and protect your right to control your user-generated content. Our platform is designed to ensure that you have full autonomy over the content you create, share, and manage. Here are the key principles and conditions related to your content:

• You’re in Control: You determine what content to publish, when, and to which platforms. We never access, view, or use your content unless it’s through a user-initiated action (e.g., sharing via API).
• No Cloud Storage: mE Social does not store your posts, messages, schedules, or social account credentials in any centralized database.
• Legal Disclosure: In extremely rare cases where legal obligations arise (e.g., platform abuse or legal compliance with third-party APIs), we may be required to facilitate disclosure. However, because we do not store your content, such disclosures are structurally limited.
• Consent and Deletion: You may revoke permissions or uninstall the app at any time. Doing so will wipe your locally stored content. We do not retain or archive anything after app deletion.

Third-Party Data Processing Agreements

When users connect their social accounts (e.g., Instagram, Facebook, X/Twitter) to mE Social, data routed through these integrations is governed by the respective platforms’ privacy policies and Data Processing Agreements (DPAs).

We encourage users to review the DPAs and terms of service of the third-party platforms they choose to connect, as mE Social does not control or influence how those platforms process user data.

Any data processed via third-party APIs (e.g., when publishing to Instagram) is subject to those third-party platforms' data policies and Data Processing Agreements (DPAs). We recommend users review these external DPAs — particularly those of Instagram Graph API, Meta, X/Twitter, LinkedIn, and TikTok — as mE Social neither controls nor assumes responsibility for their handling practices.

Any data processed via third-party APIs (e.g., when publishing to Instagram) is subject to those third-party platforms' data policies and Data Processing Agreements (DPAs). We recommend users review these external DPAs — particularly those of Instagram Graph API, Meta, X/Twitter, LinkedIn, and TikTok — as mE Social neither controls nor assumes responsibility for their handling practices.

By using mE Social, you acknowledge and agree to these principles. You are in charge of your content — we simply provide the tools to help you organize, publish, and thrive across your social channels.

2. Data Retention

• Local-Only by Design: mE Social does not store your personal data, content, or social media activity on any centralized servers. All your schedules, drafts, social tokens, media files, and history remain on your device only, giving you complete control.
• Retention is User-Controlled: Because mE Social operates on your device, you control how long your data stays. You can delete posts, schedules, connected accounts, or the entire app at any time — and with that, all your associated data is deleted instantly.
• No Remote Copies or Backups: We do not keep backups, cloud syncs, or mirror logs of your user-generated content. If the app is deleted or the device is reset, your data cannot be recovered from mE Social or its developers.
• Minimal Backend Metadata (If Any): In rare cases, non-identifiable technical metadata (e.g., crash reports, version numbers) may be retained for diagnostics or product improvement. Such data is anonymized and stored securely with strict expiration timelines.
• User Rights and Actions: At any point, you can clear your data using built-in “Reset” or “Clear All Content” options, or simply uninstall the app to erase everything. We never retain data after deletion.

By choosing mE Social, you are choosing a platform built with privacy, autonomy, and transparency at its core. Your data remains yours — and only yours — for as long as you choose to keep it.

3. User Rights and Data Control

At mE Social, you retain full sovereignty over your data — always stored locally on your device, never in the cloud. Our design philosophy ensures that you are the sole owner and operator of your personal content, schedules, connections, and preferences.

Here’s an overview of your key rights and how we handle consent:

• Full Access: You can view and export your scheduled posts, connected accounts, and app activity logs directly from your device. We do not maintain any remote copies or backups.
• Right to Modify: You can edit or update any of your content — including drafted posts, social account settings, and linked channels — without involving any external system or administrator.
• Right to Delete: You may delete individual items (e.g., scheduled posts, drafts) or wipe all data from the app using the “Clear All Data” function. Deleting the app also fully deletes your data. We do not retain any data after deletion.
• Right to Withdraw Consent: If you granted optional permissions (e.g., to post on your behalf to Twitter or Instagram), you can revoke those tokens directly within the app. Once revoked, we immediately stop any authorized interactions with those platforms.
• Right to Portability: Since mE Social stores all user data locally in readable formats (e.g., JSON or plain text), you can manually back up and transfer your data between devices without restrictions.

In cases where technical support is required or regulatory standards request machine-readable formats, users may contact our support team on how to export their data in standardized JSON or CSV formats.

Consent Handling

• No Hidden Processing: We do not process your data on our servers. Any processing (e.g., scheduling, automation) happens entirely on-device, with your active control.
• Parental Consent: If a minor uses mE Social in a region where digital consent requires parental approval, we ask that parents or guardians manage app permissions and device settings accordingly. We do not collect age-identifiable data.

Where required by law, we do not knowingly enable full-feature access for minors under the applicable digital consent age unless verified parental consent is provided and logged by the user’s device.

Children’s Privacy

mE Social is not intended for users under the age of 13, or under the minimum digital consent age in their respective jurisdiction (e.g., 16 in the EU), without verifiable parental consent in compliance with COPPA or GDPR-K.

We do not knowingly collect personal information from children without such consent. If we become aware that we have inadvertently collected data from a minor without proper authorization, we will take steps to delete that data promptly.

mE Social empowers you with complete transparency, access, and autonomy over your social activity and personal content — no hidden storage, no third-party access, no compromises.

4. Data Security

At mE Social, your data privacy and security are not just features — they are foundational principles. We’ve architected the platform from the ground up to give you full control over your data, stored exclusively on your own device. This design significantly minimizes external risk vectors and empowers you with maximum autonomy.

Below are the key Core Security Principles:

• Local-Only Data Storage: All content — including your post drafts, publishing schedules, connected account metadata, and analytics summaries — is stored exclusively on your device. We do not upload or mirror your data to any server or cloud infrastructure.
• No Access to Your Content: mE Social cannot view, process, or retrieve your user-generated content. You have complete control over the creation, modification, and deletion of your content, without any data leaving your phone.
• Encryption at Rest: All data stored locally by mE Social is encrypted using industry-standard mobile encryption mechanisms, including platform-level encryption provided by iOS and Android. This ensures your content remains secure even if your device is compromised.
• Minimal Permissions and Zero Retention: We only request permissions necessary for basic operation (e.g., social channel posting, notifications). We do not retain any personally identifiable information (PII), activity logs, or behavioral tracking data.
• Your Responsibility: Because data is not backed up to any server, you are responsible for backing up your device regularly. If your phone is lost, reset, or the app is deleted, your mE Social content will also be lost. We recommend syncing with your device’s native backup systems (e.g., iCloud or Google Backup).
• Reliance on Platform Security: We leverage the hardened security architectures of Apple’s iOS and Google’s Android platforms. This means that any system-wide vulnerabilities or breaches would be subject to the responsibility and action of the mobile OS provider.
• No MetaMask or Wallets Required: Unlike mEinstein, mE Social does not handle Web3 wallets like MetaMask. However, if future plugins support such integrations, users will be fully in control of setup, keys, and recovery phrases, with no data stored or processed by us.
• Incident Handling and Transparency: While mE Social's offline-first design significantly reduces risk, in the unlikely event of an app-level vulnerability, we will promptly publish updates, guidance, and patches, and notify users through in-app alerts or app store updates in accordance with privacy laws.

Future Web3 Capabilities

While MetaMask or similar Web3 wallets are not required to use mE Social, future features may enable blockchain-based plugins for identity verification, content signing, or marketplace access.

These integrations will always remain strictly opt-in, and mE Social will never store, transmit, or access private keys or wallet credentials. Users remain solely responsible for managing their wallet security.

Any such plugin will include in-app disclosures detailing its privacy boundaries and operational scope. mE Social will never have access to or custody of wallet seed phrases, private keys, or signing capabilities. Storage and recovery are solely the user’s responsibility, in accordance with Web3 best practices.

For more details, users will be able to consult our forthcoming Plugin Manifest and Integration Disclosure pages, which will outline each plugin’s access scope and privacy behavior (to be linked in-app under Settings > Legal > Plugin Details).

By keeping your data on-device and in your control, mE Social eliminates many common security risks — no central servers, no external backups, no hidden surveillance. We believe this is the only way to build a truly privacy-respecting social tool in today’s connected world.

5. Changes to This Privacy Policy

mE Social reserves the right to update or modify this Privacy Policy at any time to reflect changes in functionality, applicable laws, or user needs. We are committed to keeping you informed and ensuring that any updates are communicated clearly and promptly.

To ensure transparency, we will:

• Publish Updates In-App: Any material changes to this Privacy Policy will be communicated via in-app notifications. This ensures visibility even if you don’t check your email frequently.
• Email You for Significant Changes: If you have opted to receive communications from us, you will receive an email outlining any substantial changes, including what has changed and how it may impact your use of the app.
• Date-Stamp All Changes: The latest version of the Privacy Policy will always include a “Last Updated” date at the top. We encourage users to review the policy periodically to stay informed of any updates.
• • Link to the Policy Within the App: The most recent Privacy Policy will always be accessible within the app settings under “Legal” or “Privacy,” allowing for easy reference and review at any time.

Continued Use Constitutes Acceptance

By continuing to use mE Social after changes take effect, you agree to be bound by the updated Privacy Policy. If you do not agree with the updated terms, you should discontinue use of the app and may request deletion of your account and data.

We value your trust and are committed to maintaining full transparency about how your data is handled — even though mE Social stores no user data on our servers. If you have any questions or concerns, please contact us directly through our support channels.

6. International Data Transfer

mE Social is designed to operate as a device-native, privacy-first application. As such, we do not collect or store your personal or social media data on our servers. However, in certain cases—such as optional integrations or when using third-party services (e.g., for account registration or scheduling features)—minimal registration or meta-level information may be processed by external service providers who operate across borders.

We recognize the importance of protecting this information, no matter where it is processed, and we remain committed to ensuring its security and lawful treatment in line with global data protection regulations.

In Cases Where Data Is Transferred

For any limited user registration or integration metadata processed outside of your country:

• Compliance with International Frameworks: We ensure compliance with applicable international data protection laws such as the General Data Protection Regulation (GDPR) and similar frameworks. If data is transferred out of the European Union or jurisdictions with strict privacy laws, we implement at least one of the following safeguards:
  • o Standard Contractual Clauses (SCCs) approved by regulatory authorities.
  • o Transfers only to countries with recognized adequate data protection levels.
  • Additional contractual or technical protections to maintain equivalent data safeguards.

Security Measures: All registration or integration metadata is protected by strong encryption, access controls, and secure transmission protocols. We ensure the same level of protection across all geographies.

User Consent: Where required, we will obtain your explicit consent for any international transfer of registration metadata and will inform you of any associated risks and protective measures.

Our Philosophy: No Cloud, No Data Exploitation

Your social content and behavioral data remain on your device. We do not process, mine, or store your social data in our infrastructure, eliminating common vectors of risk in international transfers.

If you have questions about any data touched by integrations or service use, please reach out to us at support@meinstein.ai. We’re committed to transparency and to maintaining the highest privacy standards—globally.

Summary of Key Privacy Commitments

• We store no content in the cloud.
• All data is on-device only and encrypted.
• You own your content, schedules, and integrations.
• We do not sell, mine, or monetize any user data.
• Future features will remain opt-in and transparent.

By design, mE Social aligns with privacy expectations not just as a policy—but as a product principle.

7. Contact Us

If you have any questions about this Privacy Policy or our treatment of your personal information, please contact us at:

support@mEinstein.ai

By using mE Social, you consent to the practices described in this Privacy Policy.