MMEETT_Privacy_Policy_EN

MMEETT Privacy Policy

Meet Today Technology INC | Effective Date: September 1, 2026 | Last Updated: September 1, 2026

Important Notice. MMEETT processes recordings, voice data, transcripts, meeting notes, contacts, precise location information, and content you enter or upload. Some of this information may be sensitive. Before using recording, call captioning, cross-app translation, or contact features, please read this Policy carefully and use those features only after obtaining all notices, permissions, and consents required by applicable law. MMEETT does not sell personal information or use personal information for cross-context behavioral advertising.

Welcome to MMEETT. MMEETT is operated by Meet Today Technology INC ("MMEETT," "we," "us," or "our"). We are a company registered in the State of California, United States, with an address at 2108 N ST, STE N, Sacramento, CA 95816, United States.

This Policy explains how we collect, use, disclose, retain, and protect personal information when you use the MMEETT application, related services, and compatible hardware such as the AI Card and AI Ring (collectively, the "Services"), as well as the choices and rights available to you. The Services are primarily intended for individual users in the United States. This Policy does not apply to products or services independently provided by third parties and governed by their own privacy policies.

If you do not agree to this Policy, select "Disagree" and stop registering for or using the Services. When you first launch the app, we provide separate "Agree" and "Disagree" options; you cannot complete registration if you select "Disagree." System permissions are requested separately when you actually use the relevant feature.

1. Scope and Personal Information Controller

This Policy applies to the MMEETT mobile application, compatible hardware used with it, and related features provided directly by us. We do not operate an official website that shares accounts, cookies, or user data with the Services.

Personal Information Controller / Business: Meet Today Technology INC

Registered Address: 2108 N ST, STE N, Sacramento, CA 95816, United States

Privacy Contact Email: support@mmeett.com

2. Overview of Personal Information We Collect

Depending on the features you use, we may process the following categories of information:

• Account and identity information: Email address, verification information, password or authentication credentials, Apple or Google account identifiers, nickname, profile photo, unique user ID, login time, IP address, and device information.

• Business card and profile information you voluntarily provide: Name, gender, date of birth or age, company, title, industry, phone number, email address, address, social media accounts, personal photo, and biography. These fields are optional. We do not require real-name verification and do not collect identity documents, facial templates, or bank card information.

• User Content: Text, questions, prompts, recordings, audio files, meeting transcripts, meeting notes, translated content, images, photos, scans, business cards, contact information, files, AI conversations, and AI-generated content.

• Information about other people: Recording or contact features may include the voices, names, contact details, statements, and other information of meeting participants, customers, or other individuals who are not registered MMEETT users.

• Device, network, and log information: Device model, operating system and version, app version, language, time zone, network status, IP address, device identifiers, possible advertising identifiers, crash logs, activity logs, and security logs.

• Location and permission information: With your authorization, this may include precise location, contacts, microphone, camera, photo library, Bluetooth / nearby devices, NFC, notifications, files, local network, phone or call status, clipboard, and installed application list.

• Transaction information: Membership type, subscription status, order number, purchase time, price, currency, receipt, or payment result. Full payment credentials are generally processed by Apple or Google, and we do not directly receive full payment card numbers.

• Inferences and AI results: Summaries, tags, speaker separation, action items, translations, answers, and other analytical results generated from content you submit. We do not create voiceprint templates used to uniquely identify individuals.

3. How We Collect and Use Personal Information

3.1 Registration, Login, and Account Management

You may register and sign in using an email address and verification code / password, Sign in with Apple, or Sign in with Google. We use your email address, unique third-party account identifier, nickname or profile photo you authorize the third party to share, user ID, login time, IP address, and device information to create your account, verify your identity, keep you signed in, recover your account, prevent fraud, and protect security. Guest mode currently provides access only to the login flow, and almost all features require you to sign in.

3.2 AI Business Cards, NFC Exchange, and Sharing

You may create, edit, and share business cards. To generate and display a business card, we process the name, company, title, industry, phone number, email address, address, social account, photo, and biography you choose to provide. When you use NFC exchange or sharing, the information you actively select is sent to the recipient you designate. Do not include another person's information on your business card unless you are authorized to provide it. Recipients are independently responsible for information they receive.

3.3 Meeting Recordings, Muse Recordings, Transcription, and Meeting Notes

Recording begins only after you take an affirmative action. You may start recording manually in the app or, when the app is not open, by pressing a button on compatible hardware. While hardware recording is active, an indicator light remains on, and the device provides vibration and on-screen notices when recording begins, but it does not play an audible notice to people nearby. The MMEETT app does not begin recording on its own while running in the background or while the screen is locked. Compatible hardware may record independently, after which you must actively connect it to the app to sync the recording.

We may process original recordings, recording timestamps, associated device information, transcripts, speaker separation, summaries, meeting notes, action items, and AI analysis results to provide recording sync, speech-to-text, translation, organization, search, and export features. Original recordings may be uploaded to the cloud for processing. We do not use voice data to create voiceprint templates that uniquely identify individuals.

Responsibility for Recording Compliance. Laws governing concealed recording, telephone recording, and confidential communications vary by state and country. Some jurisdictions, including California, may require the consent of all participants to a communication. A continuously illuminated indicator light does not necessarily replace any notice or consent required by law. Before recording, you must determine which laws apply, clearly notify all relevant individuals, and obtain any required consent. You must not record where recording is prohibited by law, where there is a reasonable expectation of privacy, or where another person objects. You are responsible for responding to access or deletion requests from recorded individuals. We may assist where required by law, but we may need enough information to locate the relevant content and verify the request.

3.4 AI Chat, Intelligent Organization, and Content Generation

When you use AI chat, agents, summaries, meeting notes, conversation analysis, question-and-answer features, or similar functions, we process the prompts, text, recordings, transcripts, images, contacts or business card content you submit, as well as the generated results. We send only the content reasonably necessary to provide the feature you select to the applicable AI service provider, including OpenAI, Microsoft Azure Translator, and Anthropic.

MMEETT does not use your User Content to train, fine-tune, or improve general-purpose AI models, and we do not affirmatively opt in to allowing the API providers listed above to use your content to train their general-purpose models. We may use diagnostic information that does not include the content itself, or that has been aggregated or de-identified, for automated quality testing, troubleshooting, and security maintenance. We do not conduct routine human review of user recordings, transcripts, or AI conversations. However, service providers may process limited data under their policies for security, abuse prevention, or legal obligations.

AI outputs are generated by automated systems and may be inaccurate, incomplete, or unsuitable for a particular purpose. Do not rely on AI outputs as medical, legal, financial, or other professional advice, and independently verify important information before taking significant action.

3.5 Real-Time Translation, Cross-App Translation, and Call Captioning

We process audio, text, clipboard content, selected application information, and translation results that you actively submit or permit us to access in order to provide real-time translation, cross-app translation, and captioning. MMEETT software does not independently record telephone calls or audio from other apps. Compatible hardware may record only the ambient sound it actually receives and only after you actively start recording. Phone or call-status permissions are used only to identify relevant feature states under your control and are not used to read call content.

3.6 Contact Management

With your authorization, we may read the contact information you select, including names, phone numbers, email addresses, companies, titles, and notes, to help import, organize, search, or associate contacts and business cards. Please ensure that you are authorized to provide contact information to us. You can disable contact permission in your system settings and delete imported contacts in the app.

3.7 Camera, Photo Library, OCR, Images, and Files

When you capture, select, scan, recognize, import, or export content, we process camera images, photos, pictures, scanned content, and files to create business cards, perform OCR, analyze content, or export content. Images and scanned content are deleted after processing unless you expressly save them as other User Content.

3.8 Membership Subscriptions and Payments

Subscriptions and payments are processed by the Apple App Store or Google Play. We receive the order number, product, subscription status, purchase time, currency, price, and verification result to activate membership, restore purchases, handle refunds or disputes, and maintain accounting records. Apple and Google process payment accounts and payment methods under their own policies.

3.9 Push Messages and Service Notifications

After you authorize notifications, we process push tokens, user IDs, device information, and message status to send account, security, synchronization, meeting-processing results, product feature, and other notifications you choose to receive. You can disable notifications in your device system settings.

3.10 Devices, Logs, Security, and Service Improvement

We collect IP addresses, device models, system versions, app versions, language, time zone, network status, device identifiers, possible advertising identifiers, activity logs, crash logs, and security events to maintain compatibility, troubleshoot issues, analyze performance, prevent fraud, and protect account security. We do not use advertising identifiers for personalized advertising, cross-context behavioral advertising, or advertising attribution.

3.11 System Permissions

We request permissions when you use a specific feature. You may refuse a permission or later withdraw it in your system settings. The corresponding feature may become unavailable, but other features that do not require that permission will not be affected.

4. Data Processing and Retention by AI Service Providers

AI processing may occur on our servers in the United States and on service-provider servers. The specific API, processing region, Zero Data Retention setting, and other special configurations have not yet been finalized. Accordingly, provider retention is governed by the API actually used, account settings, contract terms, and the provider's then-current policies.

• By default, OpenAI API business data is not used to train OpenAI's general-purpose models. Default abuse-monitoring logs may include inputs, outputs, and related metadata and are generally retained for up to 30 days, subject to legal or security exceptions. See: https://developers.openai.com/api/docs/guides/your-data

• Azure Translator is used for translation. Microsoft states that standard text translation requests are not permanently or statically stored. Processing for document translation depends on the selected mode and storage configuration. See: https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/translator/data-privacy-security

• By default, commercial data submitted through the Anthropic Claude API is not used to train general-purpose models. Standard API inputs and outputs are generally deleted from backend systems within 30 days after receipt or generation, subject to exceptions for particular features, contracts, security, or legal requirements. See: https://privacy.anthropic.com/en/articles/7996866-how-long-do-you-store-personal-data

We select appropriate providers based on the feature and seek to minimize the data sent. You should not submit to AI features confidential information you are not authorized to process, information protected by professional confidentiality obligations, or unnecessary sensitive information.

5. Cookies and Similar Technologies

MMEETT currently does not operate a website that shares accounts or user data with the app. The app and embedded software development kits may use local storage, caches, authentication tokens, device identifiers, push tokens, and similar technologies to keep you signed in, remember settings, synchronize data, protect security, and analyze crashes. We do not use these technologies for personalized advertising or cross-service tracking. You can manage some local data through device settings, by clearing app data, or by uninstalling the app. Doing so may sign you out or erase settings.

6. How We Share, Transfer, and Publicly Disclose Information

We disclose personal information only in the following circumstances:

• Service Providers and Processors. We provide cloud hosting, AI, translation, identity authentication, payment, push notification, speech recognition, OCR, logging, and security providers with the minimum information necessary to provide the Services, and we restrict their use through contracts or other measures.

• Affiliates. We may provide information to affiliates under common control as necessary for operations, customer support, security, and internal administration. Affiliates must follow protections consistent with this Policy.

• At Your Direction. When you share a business card, export a file, send content to a contact, or select a third-party service, we disclose information to the recipient you designate.

• Legal, Security, and Rights Protection. We may disclose information to comply with applicable law, court orders, or lawful government requests; investigate fraud, abuse, or security incidents; and protect the rights and safety of users, the public, us, or others.

• Corporate Transactions. We may disclose information to relevant parties in connection with a merger, financing, acquisition, reorganization, bankruptcy, or asset transfer. We will require the recipient to continue protecting the information and will notify you where required by law.

We do not sell personal information, do not "share" personal information for cross-context behavioral advertising, do not upload email addresses, device identifiers, or conversion events to advertising platforms such as Meta, TikTok, or Google for advertising, and do not permit third parties to use data for their own marketing. Except when you actively share information or disclosure is required by law, we do not publicly disclose your personal information.

7. Third-Party Service Directory

The following table lists the principal third parties we have confirmed or plan to use. When a provider acts as an independent entity and processes information it collects directly from you, its own privacy policy applies.

We confirm that we do not use Firebase. If, before launch, we add, replace, or enable an SDK that processes personal information, we will update this directory and obtain separate consent where required.

8. Data Storage, Location, and Retention Periods

Our servers are located in the United States. AI and other service providers may process data in the United States or other locations where their infrastructure is located. If applicable law requires safeguards for cross-border transfers, we will implement appropriate contractual or other lawful measures.

We retain information for the shortest period necessary to fulfill the relevant purpose, subject to the rules below. Legal obligations, disputes, fraud prevention, and security investigations may require longer retention.

After account deletion, we delete User Content and retain only records required by law or necessary for orders, security, fraud prevention, or dispute resolution, with use restricted to those purposes. Because of backups, technical limitations, or legal exceptions, deletion may take a reasonable amount of time. During that period, we isolate or restrict use of the relevant data.

9. How We Protect Information

We use reasonable administrative, technical, and organizational measures appropriate to the nature and risk of the information, including, where applicable, access restrictions, authentication, log monitoring, transmission safeguards, backups, and incident response.

No system can guarantee absolute security. Use a strong password, protect your devices and authentication information, and contact us immediately at support@mmeett.com if you discover unauthorized access or a security issue. If a data incident may create a material risk to you, we will investigate, take remedial action, and provide notice as required by law.

10. Your Rights and Choices

Subject to applicable law, you may have rights to inquiry / notice, access, copy, correction, deletion, restriction of processing, withdrawal of consent, data portability, account deletion, and freedom from discrimination.

10.1 In-App Self-Service Management

You can modify or delete your profile, business cards, contacts, recordings, transcripts, meeting notes, AI conversations, images, and files in the app. Meeting notes and recordings can be exported. Some deleted content may remain in backups until the applicable backup rotation period ends, but it will not be used for ordinary business operations.

10.2 Withdrawing Permissions and Consent

You may disable microphone, camera, photo library, Bluetooth, NFC, notifications, location, contacts, files, local network, phone-status, or other permissions in your device system settings, and you may stop using the relevant feature. Withdrawal does not affect the lawfulness of processing before withdrawal. Some core features may be unavailable after a permission is disabled.

10.3 Account Deletion

Path: My > Settings > Account & Security > Delete Account. We verify your identity through an email verification code or Apple / Google sign-in. Account access ends immediately, and account deletion and deletion from the primary system are generally completed within 30 days, except for order, security, or dispute records that must be retained by law.

10.4 Privacy Requests

If the in-app tools do not satisfy your request, or if you wish to submit another request under applicable law, email support@mmeett.com. To prevent impersonation, we may require identity verification through your account, an email verification code, Apple / Google sign-in, or another reasonable method. We generally respond within 45 calendar days. Where permitted by law and the request is complex, we may extend the response period once and will notify you within the initial period. We may deny a request if we cannot verify identity, a legal exception applies, the request would affect the rights of another person, or the request is manifestly excessive, and we will explain the reason. If an authorized agent submits a request, we may require proof of authorization and verification of the consumer's identity.

11. U.S. State Privacy Rights and California-Specific Disclosures

This section applies when an applicable U.S. state privacy law, including the CCPA / CPRA, applies to us or the relevant processing activity. Even if we do not currently meet a particular statutory threshold, we seek to provide reasonable access, correction, and deletion mechanisms under this Policy.

11.1 Sources, Purposes, and Categories of Disclosure

We obtain information directly from you, your device and compatible hardware, Apple / Google accounts you choose to connect, app stores and payment platforms, contacts or recording participants whose information you provide, and our service providers. During the 12 months before public launch, the Services were not available to the general public. The CCPA categories we expect to process after public launch, and the corresponding business purposes, are listed below:

We do not "sell" the categories listed above and do not "share" them for cross-context behavioral advertising, and we have not done so during the preceding 12 months. We do not knowingly sell or share the personal information of consumers under 16 years of age. We do not offer a financial incentive program in exchange for personal information.

11.2 California Consumer Rights

When the CCPA applies, California residents may request: information about the categories, sources, purposes, categories of recipients, and specific pieces of personal information we collect, use, and disclose; deletion; correction; a portable copy; opt-out of sale or sharing; restriction of the use or disclosure of sensitive personal information beyond legally permitted necessary purposes; and freedom from discrimination for exercising their rights.

Because we do not sell personal information or share it for cross-context behavioral advertising, and because we do not use sensitive personal information for additional purposes that require a limitation right, we currently do not provide "Do Not Sell or Share" or "Limit the Use" links. If our practices change, we will update the interface and provide applicable choices before the new practices begin.

Submit requests as described in Section 10.4. We will acknowledge receipt of requests for which acknowledgment is required by law within 10 business days and generally complete requests to know, delete, or correct within 45 calendar days. If necessary, we may extend the period by an additional 45 days and notify you. You may designate an authorized agent. We will use reasonable verification measures based on the request and the sensitivity of the information.

California's "Shine the Light" law allows residents to ask about certain direct-marketing disclosures. We do not disclose personal information to third parties for their own direct marketing.

12. Children's Privacy

MMEETT is a general-audience service and is not directed to children under 13. We do not knowingly collect their personal information. We do not generally require age verification at registration. If we learn that we are processing personal information from a child under 13, we will stop the relevant processing and obtain verifiable parental consent or delete the information in accordance with COPPA and other applicable law. Parents or guardians may contact us at support@mmeett.com.

Users who have not reached the legal age of majority where they live should read this Policy and use the Services under the guidance of a parent or guardian. Recording and contact features may involve other minors. A user who initiates a recording or uploads information must obtain the consent of guardians and participants where required by applicable law.

13. Updates to This Policy

We may update this Policy because of changes to features, technology, service providers, or law. If we make a material change, we will notify you through an in-app pop-up, prominent notice, or renewed consent and will update the date at the top of the Policy. Unless otherwise required by law, the updated Policy becomes effective on the date shown in the notice. You should review the updated terms before continuing to use the Services.

14. Contact Us

If you have questions, complaints, security reports, or rights requests regarding this Policy, recordings, or data processing, contact:

Meet Today Technology INC

Attn: Privacy

2108 N ST, STE N

Sacramento, CA 95816

United States

Email: support@mmeett.com

We will review your inquiry and respond within the time required by applicable law.

15. Language

This Policy is provided in Chinese and English. If the two versions are inconsistent, the English version controls to the maximum extent permitted by applicable law, except where mandatory law provides otherwise.