Meri Privacy Policy

This Privacy Policy explains how Meri (“Meri”, “we”, “us”) collects, uses, stores, and shares personal information when you use our mobile application and related services. By creating an account or using Meri, you acknowledge this Policy.

1. Who we are

Meri is operated by HIFUND INTERNATIONAL SPORTS CO., LTD.
Address: Phum Paprak Khang Tboung, Sangkat Kakab 1, Phnom Penh, Cambodia.
Privacy / contact email: hifundgroup@gmail.com

Primary market: Southeast Asia. Distribution: official mobile app stores. Meri and certain features (including wallet/payment) are available only in regions where we offer them; availability may vary by jurisdiction and feature.

2. Scope and eligibility

This Policy applies to the Meri app and related online services we control. You must be at least 18 years old to use Meri. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact us and we will delete it.

3. Information we collect

3.1 Information you provide

• Account data: phone number and/or email, password (hashed), nickname, avatar, profile details you choose to add.
• Sign-in with Google / Apple: identifiers and basic profile information provided by the identity provider via Firebase Authentication.
• Referral / invite codes (if you use them).
• User content: messages, posts, short videos, live-stream related content, comments, images, and other materials you upload or send.
• Support & moderation inputs: reports, “not interested”, block lists, and related reasons you submit.
• Wallet-related account data: in-app balance records, recharge/transfer order metadata, payment password verification status (we store a secure hash / verification state, not your plaintext payment password), and payment addresses / amounts / memo shown for orders you create. We do not ask for or store your third-party wallet private keys.

3.2 Information collected automatically

• Device & technical data: device model, OS version, app version, language, time zone, IP address, diagnostics needed for stability and security.
• Push tokens: Firebase Cloud Messaging (FCM) tokens to deliver notifications you enable.
• Usage data: feature interactions necessary to operate IM, social, live, and wallet services (for example, session status, order status polling).
• Permissions you grant: camera, microphone, photos/media, notifications, and similar OS permissions only when needed for corresponding features (chat media, live streaming, QR scan, etc.).

3.3 Platform-owned data only; no third-party data collection

Meri only processes platform-owned user data: information you submit to Meri and data generated by your use of Meri’s own services. We do not purchase, scrape, or otherwise collect personal information from third-party databases or data brokers. We do not sell personal information and do not operate third-party advertising networks to monetize your profile.

4. How we use information

• Create and authenticate accounts; provide IM, social (posts/reels), live streaming, and wallet features.
• Process recharge/transfer orders, show payment instructions, and reconcile payment status with our payment partners.
• Send service notifications (messages, security alerts, order status) via push or in-app channels.
• Handle reports, blocks, “not interested”, and enforce community / safety rules, including administrative account disablement.
• Maintain security, prevent fraud/abuse, debug, and improve reliability.
• Comply with applicable law and respond to lawful requests where required.
• Communicate service changes and important notices.

5. How we process platform data (service delivery)

We process only Meri’s own platform user data to provide the Services. We do not collect personal profiles from third-party sources. To run Meri we may use infrastructure and tools that process that same platform data on our behalf, for example:

• Cloud hosting: Amazon Web Services (AWS, Singapore region) for servers, files, and backups.
• Sign-in & push you enable: If you choose Google / Apple sign-in, we receive only the account identifiers needed to create/authenticate your Meri account. If you enable notifications, we use push delivery (e.g. FCM) with your device token.
• Messaging & media components we operate to deliver IM, social, and live features.
• Payment matching for recharge: order address / amount / memo / status needed to credit your Meri balance (not your external wallet private keys).
• SMS / email (when enabled) solely to deliver verification codes you request.
• Legal / safety: when required by law or to protect users and the service.

If you open an external wallet app or an Apple/Google account screen, that interaction is governed by that provider’s own terms; Meri does not pull unrelated third-party user directories into our platform.

6. Wallet and payment-related processing

• Meri’s in-app balance is a service ledger feature. We do not custody your external crypto wallet private keys or seed phrases.
• When you recharge, we process order identifiers, amounts, destination address, memo/tag (if any), network (e.g., USDT TRC20), and payment status.
• Blockchain transactions are public by nature. On-chain data is outside our control once broadcast.
• Wallet/payment features are intended for regions where we offer them (primarily Southeast Asia and other jurisdictions we enable). Availability may be limited or unavailable elsewhere.

7. Retention and account deletion

When you delete your account (or when we permanently close it after a valid deletion request), we do not retain your account for reactivation. Associated personal data and content will be deleted or irreversibly anonymized, except where a short technical delay is required to complete deletion pipelines, or where limited records must be kept solely for legal, security, fraud-prevention, or accounting obligations (for example, payment dispute / anti-abuse logs for a limited period required by law). Deleted accounts cannot be restored.

8. International transfers

We primarily process and store data on infrastructure in Singapore (AWS ap-southeast-1) and may process data in other locations where our processors operate. By using Meri, you understand your information may be transferred to countries that may have different data-protection laws than your home country. We take reasonable contractual and technical measures appropriate to the service.

9. Security

We use reasonable administrative, technical, and organizational measures (access control, encrypted transit where applicable, hashed credentials, monitoring). No method of transmission or storage is 100% secure. Please protect your devices, passwords, and payment password.

10. Your choices and rights

• Access or update certain profile information in the app.
• Control OS permissions and notification settings on your device.
• Block users, report content, or mark content as not interested.
• Delete your account in-app where available; after deletion, recovery is not possible.
• Contact us to exercise applicable privacy rights under the laws that apply to you (subject to verification and legal exceptions).

11. Push notifications and device data

If you enable notifications, we use device push tokens to deliver service messages. You can disable notifications in system settings. We do not sell device or push data.

12. Children’s privacy

Meri is not directed to children. Users must be 18+. We do not knowingly collect data from minors.

13. Changes

We may update this Policy. Material changes will be indicated by updating the effective date / version and, where appropriate, by in-app or other reasonable notice. Continued use after the effective date means you accept the updated Policy.

14. Contact

HIFUND INTERNATIONAL SPORTS CO., LTD.
Phum Paprak Khang Tboung, Sangkat Kakab 1, Phnom Penh, Cambodia
Email: hifundgroup@gmail.com