Privacy notice
This page describes what Meaningful actually does with your data, in plain terms. It hasn’t had a legal review yet — treat it as an accurate description of practice, not a substitute for one. See also the Terms of service.
What we collect
Account & profile — email address, password (stored as a salted hash, never in plain text), display name, pronouns and bio if you add them, timezone, and your interests. Profiles here are deliberately thin: there’s no photo gallery and no free-text feed.
Activity — bookings, call attendance, reputation and streak counters, comfort settings (like camera preference), survey responses after calls, and any strengths or reflections exchanged with a call partner.
Calls — calls run over LiveKit for live video and audio between the two matched participants. Meaningful does not record calls; nothing from the audio or video itself is stored.
Contact exchange — after a call, either side can offer contact details (an email, a handle, whatever they choose to type). That text is only shown to the other person if they accept the exchange.
Safety reports — if you report someone, we keep the reason, any details you add, and which call it relates to, so it can be reviewed.
Organisations — if you join through a university or employer, that organisation’s admins can see your membership and attendance within their own cohort, not your activity elsewhere on the platform.
Security — if you enable two-factor authentication, the underlying secret is encrypted at rest (not just hashed, since checking a code requires it). Backup codes and password-reset links are stored only as one-way hashes. We keep a short-lived record of failed sign-in attempts to slow down password-guessing.
Who it’s shared with
Nothing here is sold, and nothing is used for advertising. Data is shared in exactly these cases:
- Your matched call partner sees your profile as normal, and anything you explicitly send them through contact exchange.
- If you belong to an organisation, its admins can see your standing within that organisation.
- A small set of infrastructure providers process data on our behalf to run the service: Supabase (database hosting), Vercel (application hosting), LiveKit (video/audio transport for calls), Resend (delivering emails like reminders and password resets), and Sentry (technical crash reports — stack traces and request metadata, not conversation content).
Cookies
Meaningful sets one cookie: a signed session cookie that keeps you signed in. There’s no advertising or analytics tracking on top of that.
Your choices
You can turn off reminder emails from your profile at any time — transactional mail like password resets still goes through, since that’s how account recovery works. Self-service export and deletion aren’t built yet; until they are, email privacy@getmeaningful.io and we’ll handle it by hand.
Questions
Reach us at privacy@getmeaningful.io for anything about this notice or your data.