Privacy Policy
Last Updated: 11 July 2026
This Privacy Policy explains how Vastin Technologies ("Vastin", "we", "us", or "our"), the Data Fiduciary, collects, uses, stores, and protects your information when you use the Meridian mobile application ("App"). We are committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India and other applicable laws.
This Policy applies only to the Meridian App. Vastin's general privacy policy is available at https://vastin.in/privacy-policy; where this App-specific Policy and the general policy differ, this Policy governs for Meridian.
1. Who We Are
- Data Fiduciary: Vastin Technologies
- Location: Agartala, Tripura, India
- Contact: [email protected]
2. Our Privacy-First Design
Meridian performs its face reading and palm reading analysis using on-device artificial intelligence. The AI model runs entirely on your device.
- Your camera frames and captured face/hand images are processed locally on your device and are not transmitted to us or any third party during analysis.
- Your images leave your device only if you explicitly choose to save a reading while logged in. Absent that action, images remain solely on your device.
3. Information We Process
| Information | When | Purpose |
|---|---|---|
| Face / hand images and derived facial-geometry landmarks (468 face points, 21 hand points) and derived metrics | During analysis: on-device only. On explicit Save: uploaded and stored. | To generate your reading; to store and retrieve saved readings. |
| Reading result text, reading type (face/palm), locale, model used | On explicit Save | To store and display your saved readings and history. |
| Email address and display name | Only if you sign in with Google to save a reading | Account creation, authentication, and linking your saved readings. |
| Contact details you provide | When you contact us for support or to exercise your rights | To respond to and resolve your request. |
We do not collect advertising identifiers, and we do not display advertisements in the App at this time (see Section 9).
Sensitive personal data
Facial-geometry landmarks and hand/palm images may constitute sensitive personal data. We minimise our handling of such data by (a) processing it on-device by default, (b) uploading it only upon your explicit save action, and (c) obtaining your consent before any such processing that involves us.
4. Legal Basis and Consent
We process your personal data on the basis of the consent you provide under the DPDP Act, and to provide the services you request. Your consent is specific, informed, and freely given. You may withdraw your consent at any time (see Section 7); withdrawal does not affect processing carried out before withdrawal.
5. Third Parties and Processors
We do not sell, rent, or trade your personal data. We share data only with the following processors, strictly to operate the App:
| Processor | Role | Data involved |
|---|---|---|
| Google LLC | Google Sign-In (OAuth) authentication | Email address, display name |
| Supabase, Inc. | Cloud database and storage of your saved readings | Saved images, landmarks, reading results, account identifiers |
These processors may store or process data on servers located outside India. Where data is transferred internationally, we take reasonable steps to ensure it remains protected consistent with this Policy and applicable law. External services you separately access are governed by their own policies.
6. Data Retention
- Unsaved analyses: never uploaded; retained only transiently on your device during analysis.
- Saved readings: retained until you delete the reading or delete your account.
- Account data: retained while your account is active. On account deletion, your personal data is erased without undue delay, except where retention is required by law.
7. Your Rights as a Data Principal
Under the DPDP Act, you have the right to:
- Access a summary of the personal data we process about you.
- Correct, complete, or update your personal data.
- Erase your personal data.
- Grievance redressal (see Section 8).
- Nominate another individual to exercise your rights in the event of death or incapacity.
You may exercise these rights in-App (for example, "Delete Account" in Settings) or by contacting us at [email protected]. We will respond within the timelines required by law.
8. Grievance Officer
If you have any concern or complaint regarding the processing of your personal data, you may contact our Grievance Officer:
- Designation: Grievance Officer, Vastin Technologies
- Email: [email protected]
- Address: Agartala, Tripura, India
We will acknowledge and address your grievance within the period prescribed under the DPDP Act.
9. Advertising (Future)
The App does not currently display advertisements and does not collect data for advertising. If we introduce advertising in the future, it will be strictly opt-in — you would choose to view ads in exchange for additional features — and this Policy will be updated with prior notice before any such processing begins.
10. Children
The App is intended for users 18 years of age or older. We do not knowingly process the personal data of children without verifiable consent of a parent or lawful guardian as required by the DPDP Act. If you believe a child has provided us personal data, please contact us so we can delete it.
11. Security
We implement reasonable technical and organisational safeguards to protect your personal data, including on-device processing by default, authenticated access controls, and row-level security so that your saved readings are accessible only to you. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to This Policy
We may update this Policy to reflect changes in law or our services. Material changes will be notified through the App or by other reasonable means before they take effect. The "Last Updated" date above indicates the latest revision.
13. Governing Law and Jurisdiction
This Policy is governed by the laws of India. Any dispute shall be subject to the exclusive jurisdiction of the courts at Agartala, Tripura, India.
For any questions about this Privacy Policy, contact us at [email protected].