Privacy Policy

Merdot Track · Last updated 27 June 2026

This Privacy Policy explains how Merdot ("Merdot", "we", "us") collects, uses, and protects information when you use the Merdot Track mobile application and related services (the "Service"). Merdot Track is a professional media-intelligence and social-listening tool intended for authorised organisational users. By using the Service you agree to this Policy.

Who we are. Merdot is the operator of the Merdot Track app and its backend services. For any privacy question or request, contact us at Contact@merdot.com.

1. Information we collect

Category	Examples	Why
Account & identity	Name, email address, phone number, organisation/role, login credentials, one-time passcodes	To create and secure your account and authenticate you
Device & technical	Device model, operating system, app version, language, IP address, time zone, crash and diagnostic logs	To run the app, keep it secure, and fix problems
Push notification token	Firebase Cloud Messaging registration token	To send you alerts and intelligence notifications
Usage analytics	Screens viewed, features used, in-app events, approximate session activity	To improve the Service and measure reliability
Content you provide	Search queries, saved items, notes, images you capture (for example a poster you photograph), voice input you record	To deliver the feature you requested
Intelligence data	Publicly available news articles, public social-media posts, and public account metrics that the Service aggregates and analyses	To provide media-monitoring and analysis; this is public information, not your personal data

We do not intentionally collect financial-account numbers, government IDs, or special-category personal data through the app.

2. Permissions we may request

Notifications · to deliver alerts and briefings.
Camera · only when you choose to photograph content (for example, the poster-analysis feature).
Microphone · only when you use voice input.
Photos/Storage · to attach or export files when you ask.

Permissions are requested in context and you can decline or revoke them in your device settings at any time.

3. How we use information

To provide, operate, secure, and maintain the Service.
To authenticate you and protect against fraud and unauthorised access.
To send alerts, briefings, and notifications you have enabled.
To analyse public media and social data and present intelligence to you.
To monitor performance, diagnose problems, and improve the Service.
To comply with legal obligations.

4. How we share information

We do not sell your personal information. We share data only with:

Service providers (processors) who host and operate the Service on our behalf, including cloud hosting (Amazon Web Services), database hosting, push-notification delivery (Google Firebase Cloud Messaging), and AI/analysis providers used to generate insights. These providers process data under contract and only on our instructions.
Your own organisation, where the Service is provided to you through an organisational account, the administrator of that account may access activity within it.
Legal and safety, where required by law or to protect rights, safety, and security.

5. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service, then delete or anonymise it within a reasonable period unless a longer retention is required by law. Aggregated public-intelligence data may be retained for historical analysis.

6. Security

We use technical and organisational measures to protect data, including encryption in transit (HTTPS/TLS), access controls, rate limiting, and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any right, email Contact@merdot.com and we will respond as required by applicable law. You may also delete your account from within the app or by contacting us.

8. Children

The Service is intended for professional use by adults and is not directed to children under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

9. International transfers

Your data may be processed on servers located in India and in other countries where our providers operate. Where required, we put appropriate safeguards in place for such transfers.

10. Changes to this Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Continued use of the Service after changes take effect means you accept the updated Policy.

11. Contact

Questions or requests about this Policy or your data:
Merdot
Email: Contact@merdot.com

This document is provided for transparency and Google Play compliance. It is not legal advice; please have it reviewed by qualified counsel for your jurisdiction before relying on it.