Meridian Launcher — Privacy Policy

Last updated: 24 October 2026

What we collect

Nothing. Meridian contains no analytics or telemetry, no crash-reporting service, no advertising SDKs, and no third-party SDKs that phone home. There is no Meridian server. We cannot see how you use the app, and we do not want to.

This is worth stating precisely, because of the assistant: "we collect nothing" means we receive nothing. It does not mean the app never sends anything anywhere. When you enable an optional feature below, data goes from your device to the third party that feature talks to, and not to us.

Data stored on your device

Your home-screen layout, folders, settings, icon customisations, assistant conversations, and optional local backups are stored only on your device. If you choose a backup folder, backups are also written there. Crash logs are written only to the app's private storage and are never transmitted; they exist so the launcher can recover itself.

The assistant (optional, off by default)

Meridian includes an optional AI chat page. It is disabled until you enable it, and even then nothing is sent anywhere until you add a provider and your own API key. If you never do either, the app makes no assistant-related requests at all.

Who receives your data

You choose the provider. Meridian ships presets for OpenAI, Anthropic, DeepSeek, Groq, Mistral, Perplexity and OpenRouter, accepts any OpenAI-compatible endpoint, and supports a local server such as Ollama on your own network. Requests go directly from your device to the endpoint you configured, authenticated with your own API key. They do not pass through us.

Once your data reaches a provider, that provider's privacy policy and data-retention terms govern it, not this one. Some providers retain prompts, and some use them to improve their models unless you opt out in your account with them. Please read the policy of whichever provider you choose. If you would rather nothing left your network at all, configure a local endpoint.

What is sent

• The messages you type, and recent messages from the same conversation (a trailing window you can size in settings).
• Meridian's own instructions to the model, plus any custom system prompt you have written.
• When you ask the assistant about your launcher, the results of the tools it uses. These can include your launcher settings and their values, and the names of apps involved in what you asked for — for example, if you ask it to hide an app.
• If you turn on AI-generated conversation titles, the opening of a conversation is sent so a title can be produced.

Meridian does not send your app list, contacts, calendar, notifications, location, files or photos to any provider.

Web search inside the assistant (separate toggle)

If you enable it, the assistant can look things up through DuckDuckGo. Your search query is then sent to DuckDuckGo as well as to your model provider. It is off by default and labelled in settings.

Your API keys

Keys are encrypted on your device with a key held in the Android Keystore, so the key material never leaves the secure hardware. They are excluded from Android cloud backup and device-to-device transfer, and are never sent anywhere except, as authentication, to the provider endpoint you configured.

Conversations and deletion

Conversations are stored locally in the app's private database and can be deleted in the app at any time. Deleting a conversation removes it from your device; it cannot remove anything already delivered to your provider, which is governed by their retention policy.

Other optional network features (off by default)

• Web search suggestions: the characters you type into search are sent to DuckDuckGo to fetch suggestions. Clearly labelled, and off until you turn it on.

Permissions, and why each exists

• Internet: used only by the optional features named above — the assistant and search suggestions. With both off, the app makes no network requests.
• Notification access (optional): powers notification badges and the previews shown when you long-press an app. Notification content is read on-device only, never stored beyond the badge or preview, and never transmitted.
• Accessibility service (optional): performs only the system actions you assign to gestures — notifications, quick settings, recents, lock screen. It does not read screen content and collects nothing.
• Contacts (optional): lets search match your contacts, and lists your starred contacts in the Orbit editor so you can add a person in one tap — on-device only. When you add someone to an Orbit, their name, number and photo are kept on your phone as part of that Orbit. Adding a person through the contact picker works without this permission. Contacts are never sent to an AI provider.
• Modify system settings (optional): lets an Orbit brightness knob set your screen brightness. It is asked for only when you add that knob, and is used for nothing else.
• Usage access (optional): orders the drawer's most-used row and sort from Android's on-device usage statistics. Nothing read is stored or sent.
• Nearby devices / Bluetooth (optional): lets you pick a paired device by name when a Space should switch on as it connects. Matching works without it; only the names need it.
• Precise location (optional): only for a Space set to switch on when you join a particular Wi-Fi network. Android does not tell any app which network it is on without this permission, so it is asked for when you choose that trigger and at no other time. Meridian never requests your location or position, and the network name is compared on your device and never transmitted.

Declining any permission never blocks the rest of the app.

This website

The policy above is about the app. This section is about meridian-launcher.com, which has no analytics, no advertising and no third-party fonts, scripts or embeds loaded from anywhere else. Apart from the promo-code giveaway and the Setups gallery below, it collects nothing, and no page sets a cookie except the giveaway's. Nothing on this website is connected to the launcher on your phone, except setups you choose to publish from it.

The promo-code giveaway

The giveaway page, and its TikTok edition, hand out Google Play promo codes, one per Discord account across both. They only collect anything if you choose to sign in with Discord, and both work the same way:

• What Discord tells us: your account ID, username and display name (Discord's "identify" permission), and whether you're a member of the Meridian Launcher server ("guilds.members.read", which only covers that one server). Your account's creation date is part of its ID. We can't post, join servers, read your messages or see your other servers, and the sign-in token is revoked as soon as these are read.
• What we keep: the code you were given, stored against a one-way keyed hash of your Discord account ID (so a second sign-in shows the same code instead of a new one), plus a claim record with your username, display name, account age, the code and the time. The developer uses the record to keep an eye on the giveaway and spot abuse. Sign-ins that don't qualify are counted, not recorded.
• Cookies: two, both strictly for the giveaway. A short-lived one protects the sign-in from forgery and expires within ten minutes; the other remembers which code is yours, so the page can show it again.
• Where it's stored: with Upstash, the database provider behind the site's host, Vercel. It's never shared or sold, and it's deleted once the giveaway is over. To have yours removed sooner, email me with your Discord username.

The Setups gallery

The Setups gallery shows home-screen setups people chose to publish on this site, from a file saved in the app. The app itself never uploads a setup. Browsing it and downloading setups collect nothing and need no account. Making an account, publishing, upvoting or reporting does this:

• Gallery accounts: publishing and upvoting take an account. It holds only the username you pick, a scrambled (scrypt) copy of your password that can't be turned back into it, and the date you made it. There is no email address, real name or phone number. Signing in keeps a random session token in a cookie on this site; the gallery stores only a one-way hash of it, and it expires after 60 days or when you sign out. You can delete the account, with every setup it published and every upvote it gave, from your account page at any time.
• Publishing: the gallery keeps the setup file you published, its preview picture, the wallpaper if you included one, the name, description, icon pack and optional link you entered, shown under your username. Pictures you choose on this site are re-encoded in your browser before they're sent, which strips any camera data (such as location) inside them. Before anything is stored, the file is checked again and anything personal (contacts, numbers, messages, saved prompts, other apps' shortcuts) is removed. Setups appear as soon as they're published; ones that break the sharing rules are taken down.
• Upvotes are recorded against your account, so each account counts once and can take its upvote back.
• Downloads and reports are counted once per visitor using a one-way keyed hash of a random ID the app or this browser makes (or, without one, of your IP address). The hash can't be turned back into either. A report's reason and note are kept for the developer to review.
• Abuse limits: daily counters keyed by a hash of your IP address, your account or the username being signed in to, deleted automatically after a day.
• Where it's stored: setup files and pictures with Vercel Blob, and everything else with Upstash, the database provider behind the site's host, Vercel. A setup stays until you remove it from your account page, delete your account, or it's removed for breaking the sharing rules. To have something removed, email me with its link.

Data sharing and sale

We do not share, sell or transfer your data to anyone, because we never receive it. The only data that leaves your device is what the optional features above send, to the services you chose, at the moment you use them.

Children

Meridian collects no data from anyone, including children. The assistant sends text to a third-party AI provider and is intended to be configured by an adult account holder.

Changes to this policy

If this policy changes, the update is posted at this address with a new date. Material changes are noted in the app's changelog.

Contact

Questions: tonyjsouthern3@gmail.com