Privacy policy

1. Who we are

Meritavi Family ("Meritavi", "the app") is made by MIDAX STUDIO SRL (IDNO 1026023043157), str. Albișoara 78/1, sect. Rîșcani, MD-2005 Chișinău, Republic of Moldova ("we", "us"). We are the controller of the little personal data described below. You can write to us at hello@midax.studio.

2. Who uses Meritavi

Meritavi is made for parents. A parent sets the app up, chooses a PIN, and decides what the children see and do. Children use it with their parent: they can say a chore is done, choose a savings goal and ask to turn points into pocket money; they cannot give themselves points, change settings or buy anything.

3. What stays on your phone

Everything you enter: your children's names, ages, colours and pictures (an animal or a photo you choose), the chores, points, history, goals, requests for pocket money and the settings. It is kept in the app's own storage on the phone. The PIN is stored only as a salted hash, in the phone's secure storage.

The app asks to use, only for the purpose given:

• the camera — to scan the code that adds a phone to your family, and, only when you ask, to take a photo for a child's picture;
• your photos — only through the phone's own picker, which hands the app the single photo you choose and nothing else;
• Face ID or your fingerprint — to open parent mode; the app never sees your face or fingerprint, only the phone's yes or no;
• notifications — to tell you when a chore is done, and a child when a chore is approved.

A photo chosen for a child's picture is made small (256 × 256 pixels) on the phone and stored without the place or time it was taken.

4. Meritavi Free

Free makes no network connection of any kind. We do not receive your data, and we cannot see that you use the app.

5. Meritavi Plus

Plus lets up to seven phones of one family stay up to date with each other. It works through a small server we run, the "postbox".

What the postbox stores

• Sealed letters. Each change made on one phone — a chore done, a chore approved, a child's picture — is encrypted on that phone (AES-256-GCM) and sent to the postbox, which keeps it until every phone of the family has collected it. The keys exist only on your family's phones; we do not have them and cannot open the letters. A child's phone holds only that child's key, so it cannot open a sibling's letters either.
• Random identifiers. A random identifier for the family and one for each phone. They are not linked to a name, an e-mail address, a phone number or any other identifier.
• On each letter, outside the encryption: which family it belongs to, which phone sent it, whether it is for the whole family or for one child (shown as a random identifier, never a name), its size and when it arrived.
• For each phone: whether it is a parent's or a child's phone, when it last collected letters, and — only if notifications are on for that phone — the push token Apple or Google gave it.
• For a subscription: a one-way fingerprint (hash) of the store's purchase identifier, and the date until which it is paid. Not your name, not your card, not your store account.

How long

• A letter is deleted once every phone of the family has collected it; a phone that has not been seen for 90 days no longer holds letters back.
• A push token is deleted when notifications are turned off on that phone or the phone is removed from the family.
• If the subscription ends, nothing new can be posted, and the letters still waiting are deleted by the same rules. The family's random identifiers remain until a parent deletes the family from the server in the app (below), or until you write to us and we delete them.

Deleting everything

A parent can delete everything the postbox holds for the family, at any time, from the app: Settings → Data → Delete from the server. It removes the family's phones, letters, push tokens and subscription record from the server; only the family's random identifier and the date it was emptied remain, so that an old phone cannot quietly start it again. The data on the family's phones stays until the app is deleted from them, or until Settings → Data → Reset this phone. More on our data deletion page.

Notifications

When a phone of the family sends a change, the postbox may ask Apple (Apple Push Notification service) or Google (Firebase Cloud Messaging) to wake the family's other phones. The message carries nothing — no name, no chore, no number. The phone that wakes collects its letters, opens them itself and writes the notification from its own data.

Who runs the postbox

The postbox runs on Cloudflare (Cloudflare, Inc. and its group), which acts as our processor under its data processing terms. The letters are stored in Cloudflare's European Union jurisdiction. A phone's connection reaches Cloudflare's nearest location, wherever the phone is, and Cloudflare processes the IP address of the phones that connect in order to carry the connection, as any web service does. Our server's code does not record IP addresses.

6. Purchases

Plus is bought through the App Store or Google Play. Apple or Google handle the payment; we receive only the proof that a subscription is paid, which the postbox checks with them.

7. Backups

Meritavi can save a backup file of your family's data, protected with a password you choose. The file goes wherever you put it (for example your cloud drive); we never receive it. Without the password it cannot be opened, and we cannot recover a lost password.

8. What we never do

• No accounts, no advertising, no analytics, no crash reporters, no tracking, and no third-party software development kits that collect data.
• We do not sell or share personal data, and we do not use it for marketing.

9. Legal basis

Where the law of the European Union or of the Republic of Moldova applies: we process the data described in section 5 to provide Plus, which you asked for (performance of a contract); push tokens only once you have allowed notifications on that phone; and the purchase proof to confirm a subscription (performance of a contract).

10. Your rights

You may ask us for access to your data, its correction or deletion, or object to its processing, and you may complain to a supervisory authority — in the Republic of Moldova the National Center for Personal Data Protection, or the authority of the EU country where you live. Most of what we store we cannot read, which limits what an access request can return; deletion is available in the app at any time, and by writing to us.

11. Children

The user of Meritavi is the parent; children use it under the parent's control, on phones the parent sets up. We do not knowingly collect personal information from children: what a child enters stays on the family's phones and, on Plus, travels encrypted so that we cannot read it.

12. Changes

If this policy changes, the new version is published here with a new date, and a significant change is shown in the app.

13. Contact

MIDAX STUDIO SRL · IDNO 1026023043157
str. Albișoara 78/1, sect. Rîșcani, MD-2005 Chișinău, Republic of Moldova
E-mail: hello@midax.studio
Support: midax.dev/meritavi/support