Last Updated: June 2025
This Privacy Policy ("Policy") explains how Meta Earth ("Meta Earth", "ME", "we", "us", or "our") collects, uses, discloses, and protects your personal information when you use our website and our digital identity platform, including ME Pass and related services built on the ME ID Protocol (collectively, the "Platform").
By accessing or using our Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with this Policy, please refrain from using the Platform.
1. Scope and Application
This Policy applies to all services provided by Meta Earth through our website and ME Pass platform, including:
· ME ID and ME Pass identity registration and management
· Decentralized Identifiers (DIDs), Verifiable Credentials (VCs), and Soulbound Tokens (SBTs)
· KYC verification processes
· Wallet connection and credential issuance
· Interaction with DApps requiring Proof of Personhood (PoP) or identity information
2. Information We Collect
We may collect the following categories of personal data:
2.1. Direct Information You Provide:
· Email address – when you subscribe to our newsletter or communicate with us.
· Wallet address (public key) – We collect only your wallet public key, which is publicly visible on the blockchain and does not contain sensitive personal data.
· KYC-related information – such as name, government-issued ID number, date of birth, nationality, gender, and facial recognition data (for verification purposes only).
· Geolocation information – only if you apply to become a Validator Node, and solely to verify authenticity.
2.2. Automatically Collected Data:
· Log files: error reports, feature usage, system activity
· Device information: OS, browser type, time zone, crash logs, app version
· IP address (we do not store this, but your ISP may track it)
· Operating system and browser type for application compatibility
· Anonymous analytics data to improve services
· Interaction data such as scroll depth, click patterns, screen size, resolution, inquiry history, download errors, and time spent in each section.
· Broad geolocation at city/country level.
· Behavioral data for performance optimization and bug detection.
· Public blockchain data such as wallet addresses, transaction hashes, token balances, or on-chain credentials which may be associated with your activity.
2.3. Sensitive Information:
· Wallet Public Key: Wallet addresses (wallet public keys) on blockchain networks are public. We do not collect them when providing wallet products and services. However, if you participate in activities like PoP staking or form submissions, your submitted wallet address will be collected for entitlement distribution.
· Wallet Private Key or Mnemonic Phrase: We will never request your private key or mnemonic phrase. You must ensure you do not disclose them to anyone. Your private key and mnemonic phrase are entirely your responsibility.
2.4. Anonymous Data:
· We may also collect, use, and share Anonymous Data for research, analytics, or service improvement. “Anonymous Data” refers to data that has been de-identified or aggregated so that it cannot reasonably be used to identify an individual. This includes usage metrics and statistical summaries not associated with any personal identifiers.
3. ME Pass & ME ID-Specific Processing
3.1. ME Pass is a digital identity wallet allowing users to manage their self-sovereign identity. ME ID Protocol supports issuance and verification of DIDs, VCs, and SBTs.
3.2. KYC & Biometric Data We may process your facial image and related identity data strictly for the purpose of real-time verification during KYC. All facial recognition data is processed locally on your device and deleted immediately after completion (within 12 hours). No biometric data is transmitted to our servers or stored on-chain.
4. How we handle your information and your responsibilities
4.1. Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
· Your explicit consent
· To perform our contractual obligations to you
· To comply with legal or regulatory obligations (e.g., AML/KYC)
· For our legitimate interests, provided these do not override your fundamental rights
4.2. Sensitive Information:
We do not collect or store your sensitive information unnecessarily. To protect your personal data, we employ multiple security measures, including:
· Hash cryptography to safeguard KYC information.
· Use of PIN codes or digital passwords to secure our applications.
· User authentication via passwords or biometric verification.
· Protection of all network communications using industry-standard Transport Layer Security (TLS) protocols.
Despite these strong protections, you are ultimately responsible for the security of your own device, wallet private keys, mnemonic phrases, passwords, seeds, and any other backup data. Please ensure that you keep these confidential and secure at all times, as we cannot recover or protect such data on your behalf.
You may grant the Platform permission to access device features such as your camera, storage, album, or notification system for specific features (e.g., QR code scanning, profile photo, ID capture). If access is denied, some features may not function, but you may still use other core services.
4.3. Name and Account Credentials:
Meta Earth does not currently require users to provide their legal name, nor does the Platform offer traditional membership registration functionality. In the event that such a feature is introduced in the future, Meta Earth will notify users in advance and provide updated Terms of Service and Privacy Policy, which users may review and accept or decline at their discretion.
If account registration becomes available, users will be permitted to select a username and will not be required to use their real name. Meta Earth will not publicly disclose usernames, nor will it have access to users’ account passwords. Passwords will be stored in encrypted form using industry-standard cryptographic practices and will not be accessible to Meta Earth personnel.
In the event of a lost or forgotten password, it is the sole responsibility of the user to initiate a reset process. Meta Earth will not have the ability to recover passwords on behalf of users.
4.4. Email Communications
When you subscribe to our newsletter or request updates, we collect and temporarily store your email address for the sole purpose of sending you information, updates, or promotional content related to Meta Earth services. We do not share, sell, or disclose your email address to any third parties without your consent.
For your privacy and security, we recommend using a general-purpose email address that is not directly linked to sensitive financial services (e.g., banking, securities, or payment platforms).
You may unsubscribe from marketing or informational communications at any time by following the opt-out instructions included in each message. Upon unsubscribing, your email address will be promptly removed from our mailing list and you will no longer receive further communications, except those required by law or essential service notifications (if applicable).
We may send you marketing communications if you have opted in to receive them, or where we have a legitimate interest in doing so and your rights do not override that interest. You may opt out at any time by following the unsubscribe instructions included in our emails or by contacting us at support@mec.me. We will not share your email address or other contact details with any third party for their own marketing purposes without your explicit consent.
4.5. Data Sharing
We do not sell, rent, or trade your personal data under any circumstances. We may share your personal data with third parties only where necessary and lawful, including:
· Regulatory Authorities – to comply with applicable laws, regulations, legal proceedings, or government requests (e.g., for KYC, AML, or law enforcement purposes).
· Affiliates and Subsidiaries – within the Meta Earth related companies, where required for internal administrative, operational, or compliance purposes.
· Authorized Issuers and Verifiers – within the ME Pass or ME ID ecosystem, solely to enable credential issuance or verification with your prior consent.
· Service Providers – such as cloud hosting, analytics, identity verification, and customer support providers, under strict contractual obligations to safeguard your data and use it only for the purposes specified by us.
· Corporate Transactions – in the event of a merger, acquisition, restructuring, or sale of assets, where personal data may be transferred as part of that transaction. Any such transfer will be subject to appropriate confidentiality, data protection applicable laws and security measures.
We take all reasonable steps to ensure that any third party with whom we share personal data upholds similar standards of privacy, confidentiality, and data protection as set out in this Privacy Policy.
4.6. Unique Device Identifier:
We do not store this type of information.
4.7. Log Data and Third-Party Information
Each time you access or use our services, certain technical information ("Log Data") may be automatically collected from your browser or mobile device. This Log Data may include, but is not limited to, diagnostic reports, application configurations, performance statistics, usage patterns, error logs, and other technical identifiers. Such data is collected strictly for the purposes of maintaining service integrity, debugging, analytics, and improving platform functionality. No sensitive or personally identifiable information is collected through Log Data.
We may also receive information about you from trusted third-party sources, such as analytics providers or service partners, to enhance our understanding of user needs and improve our offerings. Any such third-party data will be processed strictly in accordance with this Privacy Policy.
Please note that Meta Earth disclaims responsibility for the accuracy or completeness of any third-party information received and is not liable for the content, data handling practices, or privacy policies of such third-party providers. Users are encouraged to independently review third-party terms and policies prior to engaging with their services.
4.8. IP Address, Operating System, and Browser Information
Meta Earth does not collect or store your Internet Protocol (IP) address for tracking or profiling purposes. However, it is important to note that when you access our website or services, your Internet Service Provider (ISP) may collect and retain records of your online activities in accordance with its own policies and applicable law. Meta Earth bears no responsibility for such ISP data collection.
When you utilize our mobile applications, wallet interfaces, or browser extensions, we may collect technical data related to your device’s operating system and browser type. This information is processed solely to ensure compatibility, optimize performance, and deliver appropriate versions of our products and services. It is used exclusively for identification and diagnostic purposes, is not used for advertising or user profiling, and will not be disclosed to third parties without lawful basis or your prior consent.
5. Cookies and Similar Technologies
Meta Earth does not directly use cookies for tracking or advertising purposes. We do not deploy first-party cookies to collect or store personal data or user behavior.
However, the Platform may integrate third-party services (such as embedded analytics tools, videos, maps, or content delivery platforms) that may set cookies or similar tracking technologies automatically on your device when you access or interact with certain parts of our website. These cookies are controlled by the respective third parties and may collect, store, or track user information in accordance with their own privacy policies.
You may receive a cookie notification prompt depending on your browser or device settings. You can choose to disable cookies entirely or modify your cookie preferences through your browser settings. Please note that disabling cookies may affect the functionality or availability of certain services or content on the Platform.
We encourage users to review the privacy and cookie policies of any third-party service providers whose features may be embedded or linked within our Platform.
6. Advertising Services
We do not incorporate third-party advertising services on any pages of our website, including blog content. In the event that you observe unsolicited or suspicious advertisements while accessing the website, this may be indicative of malware, browser extensions, or other unauthorized third-party software on your device. We recommend that you inspect your browser or system for potential security breaches and notify us accordingly. If the issue persists, you may consider changing your browser or device, or discontinuing use of the website.
We may also collect your device’s advertising identifiers, such as the Google Android Advertising ID (AAID) or Apple’s Identifier for Advertisers (IDFA), when you use our mobile applications. These identifiers are used solely by us and our authorized analytics providers for internal analytics and service performance optimization. They are not linked to personally identifiable information, nor used for behavioural advertising.
You can reset or limit access to these identifiers through your mobile device settings. We comply with Google and Apple’s respective developer policies in our use of these technologies.
7. Security
We implement technical and organizational measures to secure your personal data, including:
· TLS encryption
· Encrypted password storage
· Role-based access control
You are responsible for securing your device, private keys, mnemonic phrases, and passwords. Do not share them with anyone.
8. Amendments to This Privacy Policy
We reserve the right to amend or update this Privacy Policy at our sole discretion and without prior notice, except where required by applicable data protection laws. Any revisions will be effective upon posting on the Platform. Users are encouraged to periodically review the Privacy Policy by accessing the link marked “Privacy” located at the footer of our website. In the event of material changes to this Policy, we will provide additional notification prominently on the website homepage and associated blog platforms.
9. Your Rights
As a user of our services, you may have certain rights in relation to your personal data, depending on the laws and regulations applicable in your jurisdiction. These may include, but are not limited to:
9.1. Right of Access - You may request access to the personal data we hold about you, including the purposes for which it is being processed and the categories of personal data concerned.
9.2. Right to Rectification- You may request correction or completion of any inaccurate or incomplete personal data concerning you.
9.3. Right to Withdraw Consent - Where we rely on your consent for the processing of personal data, you may withdraw that consent at any time. This withdrawal will not affect the lawfulness of any processing carried out before the withdrawal.
9.4. Right to Erasure (Right to Be Forgotten)- You may request the deletion of your personal data where there is no compelling reason for its continued processing, subject to legal and regulatory obligations.
9.5. Right to Restrict Processing - You may request that we restrict the processing of your personal data in certain situations (e.g., while a data accuracy dispute is being resolved).
9.6. Right to Data Portability - You may have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider, where technically feasible.
9.7. Right to Object - Where processing is based on legitimate interests or for direct marketing, you may have the right to object to such processing.
9.8. Right to Lodge a Complaint - You may have the right to lodge a complaint with the data protection authority in your jurisdiction if you believe that we have violated applicable data protection laws.
These rights are subject to limitations and conditions under the applicable data protection laws in your country or region. To exercise your rights, or if you have any questions regarding your personal data, you may contact us at support@mec.me.
10. Children’s Privacy:
Our Platform is not intended for children under the age of 13, and we do not knowingly collect personal data from individuals under this age. If we become aware that such data has been collected, we will delete it immediately. Users must be at least eighteen [18] years old to use our services in accordance with our Terms of Service.
