Privacy policy

01About this policy

This policy applies to the Mezurio app for iPhone and Android and to the website mezurioapp.com. In it, “Mezurio”, “we” and “us” mean the publisher of the app and the website, based in the United Arab Emirates. We are the controller of the personal information described here.

If you have a question about this policy or about your information, write to support@mezurioapp.com. A person reads that mailbox.

“Personal information” means information about an identifiable person. In Mezurio that is mostly the people you add and their measurements, which you decide to enter, and, if you create an account, your email address.

02Information that stays on your phone

The app works fully with no account and no network connection. Used that way, everything you enter is stored on your phone only, and we never receive it:

• the people you add: a name, how they are related to you, a body model (male or female), a birth date, a colour, a photo if you choose one, a fit preference, notes and brand sizes;
• their measurements and the history of each, including weight and body composition if you enter them;
• groups, occasions, goals, reminders and your settings.

While you are signed out the app sends this information to no one. It leaves your phone only if you share it or export it yourself.

If you delete the app, this information is deleted with it. We hold no copy and cannot restore it.

03Information we receive if you create an account

An account is optional. It exists for two purposes: a backup of what is on your phone, and keeping two or more of your phones the same. If you create one, we receive and store:

• Account details. Your email address, a display name (what other people see if you share with them), and your passphrase. We never store the passphrase as you typed it: the server keeps only a salted, one-way hash.
• Device details. An identifier created for that installation of the app, whether the phone is an iPhone or an Android phone, the device’s name and the app’s version. You can see the phones that are signed in and sign any of them out.
• The content you sync. The people you added (name, relation, body model, birth date, colour, fit preference, notes, and whether you archived them); their measurements and history, including weight and body composition; your custom measurements, groups, brand sizes, occasions and goals; your sharing choices, your units and your display name.

Some things are never sent to us, with or without an account: profile photos, whether the app lock is on, whether weight is hidden, your theme and your reminders.

04Information handled automatically

• Server records. When a signed-in app talks to our server, the server notes that a request was made: which kind, when, and whether it succeeded. It does not record who made it or what it contained.
• Security records. For sign-ins and other sensitive actions we keep a record that includes an identifier of the phone and a scrambled (one-way hashed) form of the IP address. We use it to detect and stop misuse, such as repeated attempts to guess a passphrase.
• Hosting logs. Like any web host, our hosting provider may keep standard access logs, including IP addresses, for the server and for this website.

The app contains no analytics, advertising or tracking software, and it does not collect your location, contacts, or browsing activity.

05How we use information, and on what basis

We use the information described above only for these purposes:

• To provide the service you asked for: creating and securing your account, backing up and syncing your content, and showing it to the people you choose to share it with. Where the law asks for a legal basis, this is the performance of our agreement with you.
• To keep the service secure: preventing misuse, limiting repeated attempts, and investigating problems. This rests on our legitimate interest in running a safe service.
• To answer you when you write to us, and to send the few service messages an account can need, such as a code to confirm your email address or a notice that your passphrase was changed.
• To meet legal obligations that apply to us.

Measurements and health-related information. Body measurements, weight and body composition can count as sensitive or health-related information in some countries. We handle them only because you chose to enter them and, by creating an account, asked us to store and sync them. You can withdraw that choice at any time by deleting the information or the account.

We do not use your information for advertising, for profiling, or to make automated decisions about you, and we do not use it to train artificial-intelligence models.

06Sharing that you choose

There are two ways to share, and both start with you.

A link or a QR code. You pick the people and the measurements. The link then carries a copy of that data inside itself; no server is involved. It contains your name as the sender, the person’s name, relation, body model and birth date, and the measurements you ticked. It never contains photos, notes, fit preferences or brand sizes. Weight and body composition are left out unless you switch them on.

Please treat such a link like the information it holds. Anyone who has the link can read what is in it, and a copy that has been sent cannot be recalled. An expiry you set is honoured by the app that opens it.

Between accounts. If you both have accounts, you can give someone a one-use code to see, or to help edit, a person or a group. They see the name, relation, body model, birth date and fit preference, and the measurements you allow. Weight, body composition, custom measurements and notes are included only if you say so. You can change what they see, or stop sharing, at any time. Accounts cannot be searched for: nobody can find you unless you give them a code.

07When we disclose information

We do not sell personal information, and we do not share it with other companies for their own purposes. We disclose it only in these cases:

• Service providers. Our hosting provider runs the server and its database and delivers our service emails. It handles account information on our instructions and only to provide those services.
• Legal reasons. If the law requires it, or if it is needed to protect the rights, safety or property of our users, the public or ourselves, we may disclose the information that is required.
• A change of ownership. If Mezurio is transferred to another publisher, account information may be transferred with it, under terms no less protective than this policy. We will tell you before that happens.

08Where information is stored

Without an account, your information is on your phone. With an account, it is also stored on our server, which is located in the United States. If you live elsewhere, creating an account means your information is transferred to and stored in the United States, whose data-protection laws may differ from those of your country. Where the law requires safeguards for such a transfer, we rely on the safeguards it provides for.

09How we protect information

• A published app talks to the server only over an encrypted connection (HTTPS).
• Passphrases are stored only as salted, one-way hashes, and repeated wrong attempts lock the account for a time.
• The token that keeps you signed in is held in your phone’s secure storage, and you can sign any phone out.
• The server’s access to its database is limited to what it needs.
• You can lock the app itself with Face ID or your passcode, and hide weight from the screen.

What it is not. Information on the server is not end-to-end encrypted: the server can read it, because it has to in order to sync it and to show it to the people you share with. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. If you would rather nobody but you could ever read your information, use the app without an account.

10How long we keep information

On your phone. Until you delete it. Settings has “Delete everything”, and deleting the app does the same.

Your account. For as long as the account exists. You can delete it in the app at any time, after entering your passphrase. Deletion takes effect at once: the account, its sign-ins, every person you added and all their data, your groups, occasions and shares are removed from the server. What is on your phone stays there until you delete that too.

After an account is deleted, two things can remain for a limited time:

• security records, kept for up to 365 days. They no longer name your account, but they can include an identifier of the phone that was used and a scrambled form of its IP address;
• backup copies of the database, which we keep for up to 14 days. Our hosting provider may keep backups of its own for its own period.

One person. If you delete a single person while you are signed in, they disappear from all your phones at once. Their record is removed from the server for good when the account itself is deleted.

If you added measurements to a person someone else shared with you, those entries stay with that person; they are no longer marked as yours.

11Your rights and choices

Most of what the law gives you a right to, the app lets you do yourself:

• See your information and take a copy. Settings can export everything on your phone as a file. With an account you can also download the copy held on the server.
• Correct it. Everything you entered can be edited in the app.
• Delete it. One person, your whole account, or everything on the phone, as described above.
• Stop sharing it. You can change or end any sharing between accounts.

Depending on where you live, you may also have the right to ask us to confirm what we hold about you, to restrict or object to a use of it, to withdraw consent you have given, to receive your information in a portable form, and to complain to your data-protection authority. To use any of these rights, write to support@mezurioapp.com. We will answer within 30 days, and we may need to check that the request really comes from you. We will not treat you differently for using your rights.

If you live in the European Economic Area, the United Kingdom or Switzerland, these rights are set out in the General Data Protection Regulation and the laws that correspond to it, and you may complain to the supervisory authority where you live.

If you live in California, you have the right to know what personal information we collect and how we use it, to delete it and to correct it. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

If you live in the United Arab Emirates, you have the rights given by the Personal Data Protection Law, including the rights to access, correct and erase your personal data.

12Children

Mezurio is made for families, so many of the people in it are children. A child never has an account: a parent or guardian adds them, and decides what is saved and what is shared. If you add a child, you confirm that you are their parent or guardian, or that you have that person’s permission.

Accounts are for adults. You must be at least 18 years old to create one. We do not knowingly allow anyone younger to hold an account. If you believe someone under 18 has created an account, write to support@mezurioapp.com and we will delete it.

Goals are not offered for anyone under 18, and nothing the app shows about a child is medical advice.

13What the app asks your phone for

• Photos. Only a photo you pick: as someone’s profile picture, or so the app can read the numbers off a body-composition result. That reading happens on your phone, and the picture of the result is not kept.
• Saving to photos. When you choose to save a size card or a size table as an image.
• Face ID or your passcode. If you turn on the app lock. The check is done by your phone; the app only learns whether it passed.
• Notifications. For the reminders you set. They are scheduled on your phone.

The app does not use the camera, the microphone, your location or your contacts. You can change these permissions at any time in your phone’s settings.

14App stores and other services

You download Mezurio from the Apple App Store or Google Play. Those stores have their own privacy policies and may collect information about your download and your use of their services. We do not control them and are not responsible for what they do.

When you write to us for help, the app opens an email in your own mail app. It adds a few lines so we can help: the app’s version, your phone’s system and model, your language, and whether you are signed in. You can read them, and delete them, before you send. Nothing about the people in your app is added. We keep your message for as long as it takes to answer it and to keep a record of what was agreed.

15This website

mezurioapp.com sets no cookies, has no analytics and loads nothing from other companies: its fonts and its 3D figure come from this site. The people and numbers shown on it are invented.

Like any web server, the one that sends you these pages may keep a standard log of requests, including IP addresses, for a limited time.

16Changes to this policy

We may update this policy as the app changes or as the law requires. When we do, we will post the new version here and update the date at the top. If a change materially affects how we handle your information, we will give notice here in advance, and where the law requires it we will ask for your consent.

17Contact

For any question about this policy, or to use your rights, write to support@mezurioapp.com.