Meazure Privacy Policy

Effective date: July 13, 2026
Last updated: July 13, 2026

1. Who we are

Meazure is a sole proprietorship established in the Netherlands.

Business name: Meazure
Chamber of Commerce number: [KVK NUMBER]
Business address: Planetenbaan 1T, 3606 AK Maarssen, the Netherlands
Website: https://meazurefit.com
Privacy contact: info@meazurefit.com

Meazure is the controller responsible for the processing of personal data described in this Privacy Policy.

This Privacy Policy applies to:

  • the Meazure website at meazurefit.com;
  • the Meazure mobile application;
  • the Meazure early-access waiting list;

associated communications, subscriptions and AI-powered features.

2. Scope and geographical availability

Meazure is intended for users aged 18 and over in:

  • the European Union and European Economic Area;
  • the United Kingdom;
  • the United States;
  • Canada;
  • Mexico.

The Meazure application is scheduled for launch on or around September 1, 2026.

The application and its AI-powered insights are designed for general fitness tracking and motivational purposes. Meazure is not a medical service or medical device.

3. Personal data we collect

The personal data we collect depends on how you use the website or application.

3.1 Early-access waiting list

When you join the Meazure waiting list, we may collect:

  • your email address;
  • the date and time of submission;
  • your IP address;
  • the page from which you submitted the form;
  • browser and device information;
  • records of your consent preferences.

We use your email address to notify you when Meazure becomes available.

If you separately consent to marketing, we may also send product news, updates and promotional communications.

3.2 Account information

When you create a Meazure account, we may collect:

  • your name;
  • email address;
  • internal user or account identifier;
  • Google account identifier when you use Google Sign-In;
  • country;
  • account creation and login information.

Google Sign-In does not provide Meazure with your Google password. Meazure does not collect your Google profile picture through this login process.

3.3 Optional profile and fitness information

You may choose to provide:

  • date of birth or age;
  • sex or gender information used for report calculations;
  • height;
  • weight;
  • waist circumference;
  • chest circumference;
  • arm circumference;
  • hip circumference;
  • neck circumference;
  • calf circumference;
  • progress history;
  • fitness goals and check-in information.

Date of birth, sex or gender, height and weight may be left blank. However, certain AI-powered reports may not function without the information required for their calculations.

Some of this information may reveal or allow inferences about your health, body composition or physical condition. Where required, we process this information only with your explicit consent.

3.4 Progress photographs

You may upload progress photographs through your camera or photo library.

These photographs may contain:

  • your face;
  • your body;
  • tattoos;
  • clothing;
  • surroundings;
  • other identifying characteristics.

Progress photographs are private by default. Meazure does not currently provide a feature for sharing photographs with coaches, other users or social-media platforms.

Meazure does not use photographs for facial recognition, identity verification or the creation of biometric identification templates.

3.5 Technical and usage information

When you use the website or application, we may collect:

  • IP address;
  • approximate country or region derived from your IP address;
  • device type and model;
  • operating system and version;
  • application version;
  • language and time zone;
  • network status;
  • unique application-installation identifier;
  • screens viewed and features used;
  • session duration;
  • usage events;
  • crash stack traces;
  • diagnostic information;
  • technical application status;
  • push notification token;
  • security and authentication events.

Meazure does not intend to collect advertising identifiers while it does not provide advertising or cross-context behavioral advertising.

3.6 Subscription and transaction information

Paid subscriptions are processed through the Apple App Store or Google Play.

Meazure may receive and retain:

  • subscription status;
  • selected plan or product;
  • purchase date;
  • renewal or expiration date;
  • transaction or receipt identifier;
  • cancellation status.

Meazure does not receive or store your complete payment-card number.

Apple and Google process payment information under their own privacy policies and terms

3.7 Support communications

When you contact us, we may collect:

  • your name and email address;
  • the contents of your request;
  • related correspondence;
  • diagnostic information you voluntarily provide;
  • photographs or other information you explicitly ask us to review.

We access individual progress photographs manually only when necessary to handle a support request or investigate a problem reported by you.

4. How we use personal data

We may process personal data to:

  • create and maintain user accounts;
  • authenticate users through Google Sign-In;
  • provide fitness tracking and progress features;
  • store measurements and progress photographs;
  • generate weekly and monthly reports;
  • generate motivational check-ins and AI-powered insights;
  • manage free and paid subscriptions;
  • send service-related push notifications;
  • notify waiting-list subscribers of the launch;
  • send marketing where separate consent has been provided;
  • provide customer support;
  • diagnose crashes and technical errors;
  • maintain the security and integrity of our services;
  • detect misuse, fraud and unauthorized access;
  • understand aggregated use of the website and application;
  • comply with accounting, tax and other legal obligations;
  • establish, exercise or defend legal claims.

We do not sell personal data.

We do not use personal data for targeted advertising or cross-context behavioral advertising.

5. AI-powered reports and image analysis

5.1 How the feature works

Paid users may choose to use Meazure’s AI-powered reporting feature.

When enabled, Meazure may send the following information to the OpenAI API:

  • progress photographs;
  • age or age category;
  • voluntarily provided sex or gender information;
  • height;
  • weight;
  • body measurements;
  • relevant progress history and check-in information.

Meazure does not send your name, email address or Google account identifier to OpenAI for report generation. Data is linked to a pseudonymous internal token where possible.

Removing direct identifiers does not make photographs and fitness information completely anonymous. They remain personal data and may include health-related information.

5.2 Purpose of the analysis

AI analysis is used to:

  • compare progress over time;
  • estimate visible changes;
  • provide motivational feedback;
  • indicate possible changes in weight, muscle development or body composition;
  • create weekly and monthly reports and check-ins.

These conclusions are estimates. They may be incomplete, inaccurate or inappropriate for an individual user.

AI-generated reports:

  • are not medical advice;
  • are not a medical diagnosis;
  • are not a substitute for professional medical, nutritional or fitness advice;
  • should not be used as the sole basis for health or treatment decisions.

An appropriate warning will be displayed in each AI-generated report.

5.3 Consent

AI analysis is optional and requires your explicit consent.

You can use the basic Meazure application without uploading progress photographs or using the AI-reporting feature. Users who do not provide the information needed for AI analysis will not receive personalized AI reports.

You may withdraw your consent for future AI processing. Withdrawing consent does not affect processing that lawfully occurred before withdrawal.

When consent is withdrawn, Meazure will remove the applicable photographs and derived information from its active systems, subject to limited backup retention and legal obligations.

5.4 Automated processing

Reports are generated automatically without routine human review.

The reports provide optional, informational and motivational insights only. They do not produce legal or similarly significant effects and do not automatically determine access to employment, insurance, healthcare, credit or other essential services.

5.5 Model training

OpenAI API inputs and outputs are not used by OpenAI to train its general models by default unless Meazure explicitly opts in. Meazure does not intend to opt in to such use.

Meazure does not currently use customer photographs or fitness information to train its own AI model.

Before any future Meazure model training begins, Meazure will:

  • conduct an appropriate data-protection impact assessment;
  • update this Privacy Policy;
  • provide clear information about the proposed processing;
  • request separate, optional consent;
  • provide a method for withdrawing consent for future use.

Refusing consent to future model training will not remove access to ordinary personal AI-reporting features.

6. Legal bases

Depending on the processing activity and applicable law, we rely on the following legal bases.

Performance of a contract

We process information necessary to:

  • create and maintain your account;
  • provide requested application functionality;
  • store your measurements and photographs;
  • manage subscriptions;
  • deliver purchased features;
  • provide exports and account-deletion functionality.

Consent

We rely on consent for:

  • non-essential analytics cookies;
  • marketing emails;
  • AI analysis of health-related information and progress photographs;
  • camera and photo-library access;
  • optional push notifications;
  • other optional processing where consent is required.

Where data may qualify as a special category of personal data under Article 9 GDPR, we rely on your explicit consent.

Legitimate interests

Where permitted, we process limited data for our legitimate interests in:

  • securing the website and application;
  • preventing fraud and misuse;
  • troubleshooting technical problems;
  • maintaining service reliability;
  • responding to support requests;
  • understanding non-sensitive, aggregated service performance.

We balance these interests against your rights and expectations.

Legal obligations

We process certain subscriptions, transaction and administrative information to comply with tax, accounting and other legal requirements.

7. Cookies and website analytics

The Meazure website uses or intends to use Cookiebot to manage cookie preferences.

Cookies may include:

  • strictly necessary cookies;
  • security cookies;
  • analytics cookies;
  • consent-preference cookies.

Google Analytics 4 is implemented through Google Site Kit. Where consent is legally required, Google Analytics will be activated only after analytics consent is given through the cookie banner and applicable consent controls.

Google Analytics may collect:

  • a cookie or client identifier;
  • approximate geographical location;
  • browser and device information;
  • session statistics;
  • pages visited;
  • interaction and event data.

Google Analytics user- and event-level data is configured for a retention period of up to 14 months. The user-data retention period should not reset automatically upon new activity.

You can reject or withdraw analytics consent through the cookie-preference tool.

Google Search Console provides Meazure with aggregated search-performance information and generally does not identify individual website visitors to Meazure.

8. Security and fraud prevention

Meazure uses Wordfence and Cloudflare Turnstile to protect the website and forms.

Security systems may process:

  • IP addresses;
  • browser and device information;
  • request details;
  • failed login activity;
  • suspected malicious behavior;
  • timestamps;
  • security events.

Wordfence security logs are generally retained for up to 90 days unless a longer period is needed to investigate an incident or establish or defend legal claims.

Cloudflare Turnstile may process technical information necessary to determine whether a form submission originates from a human or automated system.

9. Crash reporting

Meazure intends to use Firebase Crashlytics to identify and fix application errors.

Crashlytics data may include:

  • crash stack traces;
  • application version;
  • device model;
  • operating-system version;
  • installation identifier;
  • timestamp;
  • technical application state;
  • diagnostic logs.

Meazure will not intentionally place names, email addresses, progress photographs, body measurements, AI prompts or health-related information in Crashlytics logs.

10. Push notifications

Meazure may use Firebase Cloud Messaging to provide optional push notifications.

This may require processing:

  • a push notification token;
  • application-installation identifier;
  • device and operating-system information;
  • notification preferences.

You can disable push notifications through the Meazure application or your device settings.

11. Marketing communications

Submitting your email address for the waiting list allows Meazure to send the requested launch announcement.

General product updates and marketing require separate consent. The marketing checkbox will not be preselected and is not required to join the launch waiting list.

Brevo may process:

  • email address;
  • consent status;
  • subscription status;
  • delivery status;
  • email opens;
  • link clicks;
  • campaign interactions.

Where you consent, Meazure may use opens and clicks to understand your interests and personalize future marketing.

Every marketing email will provide an unsubscribe method. After unsubscribing, a minimal record may remain on a suppression list to prevent further marketing emails.

12. Retention periods

We retain personal data only for as long as reasonably necessary.

Data

General retention period

Launch-only waiting-list data

Up to three months after the launch notification

Marketing contact data

Until withdrawal, or up to 24 months without interaction

Marketing suppression record

As long as necessary to honor the opt-out

Active account data

For the lifetime of the active account

First inactivity notice

After approximately 6 months

Final inactivity notice

After approximately 12 months

Inactive account deletion

After approximately 18 months unless the user confirms continued use

Measurements, photos and reports

Until deleted by the user, consent is withdrawn, or the account is deleted

Active-system deletion after account deletion

Initiated immediately

Backup copies

Removed through backup rotation within a maximum of 90 days

Google Analytics user/event data

Up to 14 months

Wordfence security logs

Generally, up to 90 days

Support communications

As long as reasonably necessary to resolve the request and document its outcome

OpenAI API safety/abuse logs

Subject to OpenAI’s applicable API settings, generally up to 30 days unless otherwise required

Transaction and accounting records

Generally, 7 years, or longer where required by applicable tax law, including up to 10 years for certain VAT records

Consent records

As long as need to demonstrate compliance and address disputes

If a backup must be restored, Meazure will take reasonable steps to reapply valid deletion requests.

Meazure does not retain anonymous aggregate statistics if they are not necessary for operating or legally protecting the service.

13. Service providers and recipients

We may share personal data with service providers that process it on our behalf.

These may include:

  • Hostinger: website hosting, backups and server infrastructure;
  • Elementor: website forms and submission storage;
  • Wordfence: website security and threat detection;
  • Cloudflare: Turnstile bot and abuse prevention;
  • Cookiebot: cookie-consent management;
  • Google Site Kit, Analytics and Search Console: website measurement and search analytics;
  • Firebase and Google Cloud: Authentication, Firestore, Cloud Storage, Cloud Functions, Analytics, Crashlytics and Cloud Messaging;
  • Google Sign-In: account authentication;
  • OpenAI: AI-powered report and image analysis through the API;
  • Brevo: launch and marketing email delivery and engagement analytics;
  • Apple: App Store subscriptions and purchases;
  • Google: Google Play subscriptions and purchases.

We may also disclose information:

  • when required by law or a valid legal process;
  • to protect the rights, security or property of users, Meazure or others;
  • in connection with a merger, acquisition, financing or business transfer, subject to appropriate safeguards;
  • with professional advisers who are bound by confidentiality.

Meazure requires applicable processors to handle personal data under contractual data-protection obligations.

14. International data transfers

Meazure is established in the Netherlands, but some service providers process information in the United States or other countries.

In particular, Firebase and other Google services may process data in the United States, and OpenAI may process API data outside your country.

Where European or UK personal data is transferred internationally, Meazure relies on appropriate safeguards where required, which may include:

  • an applicable adequacy decision;
  • the EU-US Data Privacy Framework;
  • the UK Extension to the Data Privacy Framework;
  • European Commission Standard Contractual Clauses;
  • the UK International Data Transfer Addendum;
  • supplementary contractual and technical safeguards.

Because Meazure processes sensitive fitness information and progress photographs, international transfers will be assessed as part of its data-protection impact and transfer-risk assessments.

You may contact us for information about safeguards applicable to a particular transfer.

15. Local files and exports

Waiting-list or account information may temporarily be exported as CSV or Excel files to an authorized Meazure computer.

Meazure applies or intends to apply the following safeguards:

  • password-protected user access;
  • BitLocker or equivalent full-disk encryption;
  • access limited to the owner of Meazure;
  • deletion of temporary exports after they have been securely imported or are no longer needed.

16. Data security

Meazure uses reasonable technical and organizational measures, including:

  • encryption in transit;
  • encryption at rest where supported;
  • Firebase Authentication;
  • Firebase Security Rules;
  • access controls;
  • multifactor authentication for administrative accounts;
  • security and access logging;
  • limited manual access;
  • account and photograph deletion controls;
  • firewall and bot protection;
  • rotating backups;
  • software and security updates.

No system can be guaranteed completely secure. Users should use secure devices and protect access to their Google account.

Meazure will establish and maintain an incident-response procedure and record of processing activities before the application launches.

17. Your choices and rights

Depending on your location and applicable law, you may have the right to:

  • request access to your personal data;
  • receive a copy of your personal data;
  • correct inaccurate or incomplete data;
  • request deletion;
  • restrict processing;
  • object to certain processing;
  • receive data in a portable format;
  • withdraw consent;
  • opt out of marketing;
  • opt out of the sale or sharing of personal data, where applicable;
  • appeal certain privacy-request decisions, where applicable;
  • lodge a complaint with a data-protection authority.

The application is intended to allow users to:

  • view and correct account information;
  • export their information;
  • delete individual photographs;
  • delete their account;
  • withdraw relevant permissions or consent.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise a right, email info@meazurefit.com. We may request information needed to verify your identity. We generally respond within one month where the GDPR or UK GDPR applies, subject to lawful extensions.

You will not be discriminated against for exercising applicable privacy rights.

18. Additional information for EU and UK users

For EU/EEA and UK users:

  • Meazure is the controller of your personal data;
  • special-category data is processed on the basis of explicit consent where required;
  • international transfers are protected using applicable legal safeguards;
  • solely automated reports do not produce legal or similarly significant effects.

The primary supervisory authority for Meazure is expected to be:

Autoriteit Persoonsgegevens

https://autoriteitpersoonsgegevens.nl

UK residents may also complain to the UK Information Commissioner’s Office.

19. Additional information for United States residents

Depending on your state and whether its law applies to Meazure, you may have rights to:

  • know what categories of personal data are collected;
  • access specific personal data;
  • correct inaccurate data;
  • delete personal data;
  • obtain a portable copy;
  • opt out of sale, targeted advertising or certain profiling;
  • limit or withdraw consent to sensitive-data processing;
  • appeal a denied request.

Meazure does not sell personal data and does not use it for targeted advertising.

Fitness information, body measurements and progress photographs may qualify as sensitive data or consumer health data under certain US state laws. Meazure processes these categories for the purposes described in this Privacy Policy and with consent where required.

Meazure does not provide health data to data brokers, employers, insurers or advertising networks.

20. Additional information for Canadian users

Depending on applicable Canadian federal or provincial law, you may request:

  • access to personal information;
  • correction of inaccurate information;
  • information about how data is used and disclosed;
  • withdrawal of consent, subject to legal and contractual limitations;
  • deletion where applicable.

You may submit a complaint to the Office of the Privacy Commissioner of Canada or an applicable provincial regulator.

21. Additional information for Mexican users

Users in Mexico may exercise applicable ARCO rights:

  • access;
  • rectification;
  • cancellation;
  • opposition.

You may also withdraw consent or limit the use or disclosure of personal data where applicable.

Requests can be submitted to info@meazurefit.com. We may request information necessary to verify your identity and process the request under applicable Mexican law.

22. Children

Meazure is intended only for people aged 18 or older.

We do not knowingly collect personal data from children. Users must confirm that they are at least 18 when registering.

If you believe a person under 18 has provided personal data, contact us at info@meazurefit.com. We will investigate and delete the information where appropriate.

23. Camera and photo-library permissions

Camera and photo-library access is optional and used only when you choose to capture or upload a progress photograph.

You may disable these permissions through your device settings. Disabling access prevents new uploads but does not automatically delete photographs already stored in your account.

Existing photographs can be removed through the application or by contacting Meazure.

24. Changes to this Privacy Policy

We may update this Privacy Policy when:

  • the application or its features change;
  • new service providers are introduced;
  • processing purposes change;
  • AI functionality changes;
  • legal requirements change;
  • a future model-training programme is proposed.

The updated version will be published with a new “Last updated” date.

Material changes will be communicated by email and/or through an in-app notification where appropriate. We will request new consent when required.

25. Contact

For privacy questions, requests or complaints, contact:

Meazure
Planetenbaan 1T
3606 AK Maarssen
The Netherlands

Email: info@meazurefit.com
Website: https://meazurefit.com
Chamber of Commerce number: [KVK NUMBER]