Privacy
Last updated: 28 August 2026
MeetIT is local-first by design: recordings, transcripts, summaries and notes are created and stored on your own device unless you deliberately enable or trigger a cloud feature. This policy explains what stays local, what each optional service transmits, and the limited account, purchase, support and analytics data we process.
MeetIT is operated by Merit Solutions AS (Norway), the data controller for the personal data described here. For any privacy question or request, contact support@meetit.app.
Merit Solutions AS is the controller for website, trial, licensing, purchase, support and service-usage data that we process for our own purposes. A purely local MeetIT workflow does not send meeting content to us. When an organisation chooses a cloud function for content and determines why that content is processed, the organisation will normally be the controller and Merit Solutions AS may act as its processor; the actual roles must be assessed and documented for the chosen setup before confidential or regulated content is used.
Depending on the processing, we rely on performance of a contract (providing requested trials, licences and cloud functions), consent (optional website analytics), legitimate interests (security, abuse prevention, reliability and limited pseudonymous service measurement), and legal obligations (such as accounting and tax records).
The meetit.app website is a static site and sets no cookies. We ask before loading PostHog analytics. If you accept, PostHog’s EU service receives pageviews, interactions and technical browser information under an anonymous session identifier stored in sessionStorage; it clears when the tab is closed. Session recording, advertising and person profiles are disabled. If you decline, PostHog is not loaded. Your choice is stored locally so we can remember it, and you can reopen “Analytics settings” in the footer at any time.
Like any website, it is served through our hosting and CDN provider (Cloudflare), which processes standard technical request data — your IP address, browser user-agent, timestamp and the page requested — to deliver the site and protect it against abuse and attacks. We do not use this data to identify or profile you.
To start a free trial or activate a license you verify an email address. Our trial service then stores your email address, an anonymous device identifier (a one-way hash — not your hardware IDs), a count of meetings used, and timestamps. Verification codes are sent by email through our email provider (Resend).
We use this to send your verification code, to issue and validate your trial or license, to keep your entitlement tied to your email so it survives reinstalls and new computers, and to prevent trial abuse. The email is the identity; we do not store your name, address or any local app content.
Payments are processed by Lemon Squeezy, our payment provider and merchant of record. Lemon Squeezy collects the billing and payment details needed to complete your purchase and to handle tax/VAT and receipts. MeetIT never sees or stores your card details — we receive only the order and license information needed to grant your purchase.
MeetIT runs AI locally by default. If you choose to enable hosted “Cloud AI”, the requests you initiate are sent through our proxy to our AI inference provider (OpenRouter) to generate the response, and we record usage metrics (such as token counts) tied to your email to enforce quotas and billing. This is opt-in and entirely separate from normal use; if you never enable Cloud AI, none of your content leaves your device through us. When you do use it, we send a strict no-data-collection directive with every request, so it is routed only to inference providers whose policy is not to store or train on your content. We do not store the content of your Cloud AI requests on our servers — only the usage metrics above.
Device sync is off until you enable it or pair a phone. When enabled, selected folders, session metadata, transcripts, extracts, flashcards, review state and study progress are stored in our Cloudflare database so your devices can use them. Raw audio and video are not part of ordinary sync. A Media Pack is a separate, explicit upload of selected audio or video to private cloud storage.
When you share a StudyIT lesson, the package you choose, the sender identity and recipient email addresses are transmitted to deliver a secret-link download. Shared packages expire after 30 days by default (never more than 90) and are removed on revocation or expiry. If you choose “email summary to myself”, the full selected summary is sent through our service and Resend to your verified address. These functions do nothing until you initiate them.
The optional friends league stores your email as the account key, display name, league membership, weekly XP and streak. It does not receive recordings, transcripts or study decks.
Our trial and Cloud AI services send limited lifecycle events to EU-hosted PostHog for product reliability and funnel measurement. The identifier is a SHA-256 hash of your canonical email, not the address itself, and event properties contain no meeting, transcript, prompt or note content. This server-side measurement is separate from the website consent described above.
If you email support@meetit.app, we receive your email address and the contents of your message, and use them only to help you.
By default, meeting and lecture recordings, transcriptions, summaries, action items, notes and screenshots are processed and stored on your device. They leave the device only when you enable or trigger a cloud feature described above. MeetIT does not silently upload your local library.
We rely on a small set of processors, each only for the purpose listed:
We keep trial and license records for as long as your trial or license is active and as needed for support and legal or accounting obligations. Verification codes expire within minutes. Server and CDN logs are retained only briefly, for security and diagnostics.
Synced data remains until it is deleted through the service or you ask us to delete the account data. Uploaded media can be removed by the user and is also removed after the applicable trial or subscription grace period. Shared lesson packages and recipient rows are removed on revocation or expiry (30 days by default, 90 days maximum). Cloud AI prompt content is not retained by MeetIT; token usage totals are retained for quota and billing records.
Our providers operate global infrastructure, so data may be processed outside your country, including outside the EU/EEA. Where that happens, transfers rely on appropriate safeguards (such as the EU Standard Contractual Clauses) offered by those providers.
If you are in the EU/EEA, you have the right to access, correct, delete, restrict or port your personal data, and to object to processing. To exercise any of these, email support@meetit.app and we’ll respond. You also have the right to lodge a complaint with your data protection authority — in Norway, Datatilsynet (datatilsynet.no).
MeetIT is not directed to children under 16, and the core app requires no account. If you believe a child has provided us personal data (for example an email address), contact us and we will delete it.
We may update this policy as the product evolves. We’ll revise the “last updated” date above and, for material changes, do our best to flag them clearly.
Questions about your privacy or this policy? Email support@meetit.app — we read every message.