Privacy Policy

Last updated: June 14, 2026

1. Overview

MeCust (hereinafter referred to as "the App") is a cloud-based membership management application developed by MeCust. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our service.

2. Data We Collect

We collect the following categories of data to provide and improve our services:

Account Information

• Email address: Used for account registration, authentication, and communication
• Third-party login ID: If you sign in via Google Sign-In or Apple Sign-In, we receive the authentication token and email associated with your account
• Account preferences: Language, notification settings, and other preferences

Business Data

• Member Information: Names, phone numbers, gender, birthday, and custom fields you enter
• Transaction Data: Membership card purchases, consumption records, and recharge history
• Store Settings: Store name, business hours, card templates, and service product information
• Walk-in Records: Cash consumption records for non-member customers
• Notes: Any notes or memos you create within the App

Device and Usage Information

• Device information: Device model, operating system version, unique device identifiers
• Usage statistics: Feature usage frequency, crash reports, and performance data
• IP address: Used for regional data routing and security monitoring

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Consent: We process certain data based on your explicit consent, which you may withdraw at any time
• Contractual necessity: Processing is necessary to perform our service contract with you
• Legitimate interests: We process data for our legitimate business interests, such as improving the App and ensuring security, provided these interests do not override your fundamental rights
• Legal obligations: We may process data to comply with applicable legal requirements

4. Data Storage and Regional Routing

Your data is stored on cloud servers based on your geographic region to ensure optimal performance and legal compliance:

• EU Users: Data is stored on servers located in EU countries (Germany, France, etc.) in compliance with GDPR requirements
• Japan Users: Data is stored on servers located in Japan, in compliance with the Act on Protection of Personal Information
• Other Regions: Data is stored in a jurisdiction that provides adequate data protection, as determined by applicable legal requirements

5. Cross-Border Data Transfers

To provide our global service, your data may be transferred to and processed in a country different from your own. We ensure appropriate safeguards are in place for such transfers:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for countries deemed to have adequate data protection
• Binding corporate rules where applicable

6. Third-Party SDKs

We integrate the following third-party services to provide core functionality:

• Google Sign-In: For user authentication via Google accounts
• Apple Sign-In: For user authentication via Apple ID
• Google Mobile Ads: For displaying advertisements within the free tier of the App
• Google Play Billing / App Store In-App Purchase: For processing subscription payments

These third-party services may collect and process data according to their own privacy policies. We encourage you to review the privacy policies of these providers.

7. Permissions We Request

We request only the permissions necessary for the App's functionality:

• Storage Permission: Used for local caching and manual data export
• Network Permission: Required for cloud synchronization, authentication, and receiving updates

8. Data Security

We implement robust security measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Secure authentication via Google Sign-In and Apple Sign-In
• Regular security audits and vulnerability assessments
• Access controls and monitoring of our infrastructure

9. Your Rights

We respect your data privacy rights. Under applicable data protection laws (including GDPR), you have the following rights:

• Right of Access: Request access to the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing of your data for specific purposes
• Right to Restrict Processing: Request restriction of processing under certain circumstances
• Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at support@104j.com. We will respond to your request within 30 days.

10. Data Retention

We retain your personal data for as long as your account remains active. Upon deletion of your account, your data will be permanently removed from our servers within 30 days. We may retain anonymized aggregate data for analytical purposes after account deletion.

11. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any changes will be posted on this page with an updated revision date. We will notify you of material changes via email or through the App.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@104j.com