Last updated: 3 May 2025
This policy covers the Meridian app and the website at meridianapp.co.uk, operated by Novus Studio LTD, a company registered in England and Wales. Novus Studio LTD is the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Questions? Email contact@novusstudio.co.
Meridian needs your precise GPS location to navigate and to share your position with convoy members. We collect this only while the app is active — or, if you grant background permission, while a convoy is running. We don't store your location history on our servers after a convoy ends.
When you're in a convoy, we process your real-time latitude, longitude, bearing, speed, display name, and a timestamp. This data is shared live with other members of the same convoy and deleted from our servers within 24 hours of the convoy ending.
The AI Voice Co-pilot processes your speech on-device using your device's built-in speech recognition. We don't record, store, or send your voice to our servers.
The Now Playing feature reads your current track title, artist, and play/pause state from your device's local media session. It stays on your screen only — nothing is transmitted to us.
If you create a Meridian account, we store your chosen username, display name, and email address. Passwords are hashed using industry-standard algorithms and are never readable by us.
We may collect anonymised crash reports to fix bugs and improve stability. These contain no personal information and cannot be linked back to you.
Subscription payments are handled entirely by Apple (App Store) or Google (Google Play). We never see or store your card details.
Map tiles and route calculations go through HERE's servers. HERE processes this under their own privacy policy — see here.com/privacy.
Real-time convoy sync runs on cloud infrastructure. Providers operate under data processing agreements and have no rights to use your data for their own purposes.
In-app purchases are managed by Apple and Google per their platform policies.
We don't sell, rent, or trade your data. The only circumstances where we share it:
All data in transit is encrypted via TLS. We review our security practices regularly. No system is perfectly secure, but we take this seriously.
You have the right to access, correct, delete, restrict, or port your data — and to object to processing based on legitimate interests. To exercise any of these, email contact@novusstudio.co. We'll respond within 30 days.
You can also complain to the Information Commissioner's Office at ico.org.uk.
Meridian isn't directed at children under 13. If you think a child has given us their data, contact us and we'll delete it.
Most processing happens in the UK and EEA. Where data moves outside these regions (e.g. HERE's global infrastructure), we ensure appropriate safeguards — including standard contractual clauses approved by the UK ICO — are in place.
The Meridian website uses only strictly necessary cookies. No advertising cookies, no cross-site tracking. The mobile app uses no cookies at all.
We'll notify you of material changes via an in-app notice or email. The revision date is always at the top of this page.