Merie · Privacy policy

Your oasis is personal. This page describes what we collect, why, and how you can take it all back whenever you want. Last updated: April 24, 2026

Information We Collect

When you create an account, we collect:

Your first name — used only to greet you inside the app and on Echo reflections you choose to share publicly.
Your email address — used only to identify your account and, rarely, to notify you about a collection you've reserved.
Your password (email sign-up only) — stored as a cryptographic hash by our authentication provider. We never see it.

Once you use the app, we may also store:

Garment codes you enter — so your wardrobe persists across devices.
Still Room progress — which audio in the sequence you're on.
Reflections you post to The Echo — the text you write, plus a marker of whether you chose to post named or anonymous.
Upcoming collection reservations — which collections you've asked to be notified about.

What we don't collect

We don't track your location.

We don't use advertising identifiers.
We don't run third-party analytics.
We don't read your contacts, photos, calendar, or microphone.
We don't send push notifications — ever.

Who we share it with

We share minimal data with two infrastructure providers strictly so the app can work:

Clerk handles authentication (sign-in, password storage, Apple and Google sign-in). Clerk's own privacy policy is at clerk.com/legal/privacy.
Google Firebase hosts our database and file storage. Firebase's privacy terms are at firebase.google.com/support/privacy.

We do not sell, trade, or rent your data to any third party. Ever.

Reflections in The Echo

When you post a reflection, you choose whether it appears with your first name or as "Anonymous." Either way, the reflection itself becomes visible to other Merie members reading that weekly circle. You can only post one reflection per circle.

We retain a hidden link between your account and each reflection you post — not for display, but so we can moderate if content violates our community guidelines or if you ask us to delete a specific post.

How long we keep it

We keep your account data as long as your account exists. When you delete your account (Settings → Delete account), we remove your user document, wardrobe, reflections, and all associated data from our database within 30 days.

Your rights

At any time you can:

See or edit your name, email, or password in Settings.
Sign out, which clears your session and local data on the device.
Delete your account, which permanently removes your data from our systems.
Email us at support@shopmerie.com with any privacy question or request.

If you're in the EU, UK, or California, you have additional rights under GDPR and CCPA — including the right to request a copy of your data or to object to processing. Email us and we'll respond within 30 days.

Children

Merie is intended for adults. We do not knowingly collect information from anyone under the age of 16. If you believe a minor has created an account, email us and we'll remove it.

Security

Data in transit is encrypted via TLS. Passwords are hashed and stored by Clerk, never in plain text. Database access is restricted by authentication. No system is perfect — if we become aware of a breach affecting your data, we'll notify you by email within 72 hours.

Changes to this policy

If we update this policy, we'll change the "Last updated" date above. Significant changes will be announced inside the app. Continued use of the app after a change means you accept it.

Contact

Questions, concerns, or requests — email support@shopmerie.com. We read every message.

Updates

We may update this Privacy Policy from time to time. Any changes will be posted here with an updated “Effective Date.” We encourage you to review it periodically to stay informed.