We protect your data
Welcome to meoo. This privacy policy explains how meoo collects, uses, processes and protects your personal data in accordance with GDPR.
Data Controller
About the data controller
The data controller for the processing of your personal data in connection with the use of meoo is Menii ApS. Menii ApS is a Danish company that develops and operates meoo, and is responsible for ensuring that your personal data is processed in accordance with applicable legislation, including GDPR and the Danish Data Protection Act.
Contact information
Contact information for Menii ApS:
- Company name: Menii ApS
- CVR number: 45342255
- Address: Lyshøj Allé 17, 2. tv, 2500 Valby, Denmark
- Email: hi@meoo.dk
- Website: www.meoo.dk
If you have questions about this privacy policy, wish to exercise your rights under GDPR, or have other inquiries regarding your personal data, you can contact us using the above information.
Personal data we process
meoo processes various types of personal data about you, depending on how you use our service. These include:
General personal data
Name, contact information (e.g. email address and phone number), login information (username/password, stored in encrypted form), any profile information you provide, and information about your customer relationship (e.g. subscription status).
Technical information
Information about your device and use of the service. This may include IP address, device ID or type, browser type, timestamps of your activity, language settings, location, and cookies or similar technologies. This data is collected to ensure service functionality, security, and to improve the user experience (e.g. error logs and performance data).
Payment information
If you make purchases or pay for a subscription in menii Aps, we process necessary payment information. This may include billing name, payment method, transaction ID, and amount. Payment card details (card number, CVV) are not handled directly by menii Aps, but by our certified payment provider. We only store information necessary to complete the payment (e.g. last digits of the card, expiry date, receipts) and to comply with accounting law requirements.
Communication data
Information you provide in correspondence with us or through the service. This includes e.g. emails to support, chat messages and feedback you submit. If you participate in conversations through meoo (e.g. use a feature to chat with our support, or if you share experiences through a built-in communication feature), this information will be processed in order to respond to you and improve our service.
meoo only processes personal data about you that you actively provide to us, or that is generated by your use of the service. We do not obtain personal data about you from third parties.
Purposes of data processing
We use your personal data for a range of purposes, all of which relate to providing and improving meoo's services. The primary purposes are:
Delivery of core functions
meoo processes personal data to deliver and operate the core functions necessary to support conversation-based services such as meeting minutes, health overviews, therapy documentation, and other AI-driven conversation features.
This includes processing information about users to the extent necessary to ensure that the platform functions correctly, can be adapted to your needs, and supports a good user experience.
The legal basis for the processing is our legitimate interest in delivering, developing, and improving the platform's core functions, cf. Article 6(1)(f) of the General Data Protection Regulation.
User management and communication
meoo processes your personal data to manage your user relationship. This means we use your contact information to create and maintain your account, ensure a secure login process, send you important messages about your account or changes to our services, respond to support inquiries, and deliver the notifications you have requested – e.g. reminders about appointments or tasks you are following up on.
For this purpose, general personal data is processed.
The legal basis for the processing is that it is necessary to fulfill the agreement we have with you as a user, cf. Article 6(1)(b) of the General Data Protection Regulation. Without this information, we cannot create or maintain your access to the platform.
Payment and subscription management
meoo processes your personal data to manage payments, subscriptions, and billing. This includes processing purchases, sending invoices and receipts, handling renewals or cancellations of subscriptions, and ensuring that the administrative aspects of your customer relationship run smoothly.
For this purpose, general personal data is processed.
The legal basis for the processing is that it is necessary to fulfill the agreement with you as a customer, cf. Article 6(1)(b) of the General Data Protection Regulation. The processing is necessary for us to offer access to the platform and ensure correct handling of your payments and subscriptions.
Personalization and improved guidance
meoo processes your personal data to customize your experience and guidance on the platform.
In addition, we collect information about how you use the platform – e.g. which features you use, how long you are active on certain parts of the platform, and how you navigate. These insights help us make the guidance more relevant and precise, and suggest features or content that suit your situation.
For this purpose, general personal data is processed.
The legal basis for the processing is meoo's legitimate interest in improving and targeting the user experience, cf. Article 6(1)(f) of the General Data Protection Regulation. You have the right to object to this processing at any time.
Security and abuse prevention
meoo processes your personal data to protect you, other users, and the integrity of the platform. We monitor technical logs and usage patterns to detect and prevent security breaches, unauthorized access, misuse of the service, or activities that violate our terms of use.
This may include processing IP addresses and information about user behavior – e.g. how and when the platform is used – to filter spam, detect attacks, and assess whether meoo is a target for malicious activity.
Since it is not possible to distinguish precisely in advance between legitimate use and abuse, this information is processed about all users, even if the suspicion only concerns a few individuals.
For this purpose, general personal data is processed.
The legal basis for the processing is that meoo has a legal obligation to ensure processing security and handle security breaches, cf. Article 6(1)(c) of the General Data Protection Regulation. This follows, among other things, from the data security requirements in Article 32 of the General Data Protection Regulation.
Compliance with legal obligations
meoo processes your personal data when we are legally required to do so. This may, for example, be necessary to retain transaction data in accordance with accounting laws or to disclose information to public authorities if we receive orders, court rulings, or must comply with legal requirements for supervision and reporting.
In most cases, general personal data is processed. In special cases – e.g. during regulatory supervision or legal proceedings – it may also be necessary to process sensitive personal data.
The legal basis for the processing is that meoo is legally obligated to do so, cf. Article 6(1)(c) of the General Data Protection Regulation, and that the processing in certain cases may be necessary to establish, exercise, or defend legal claims, cf. Article 9(2)(f).
Marketing (with consent)
meoo processes your personal data for marketing purposes, but only if you have given your explicit consent. This means we can use your contact information to send you newsletters, information about new features, and relevant offers from meoo.
You can unsubscribe from these communications at any time, and we will of course respect your choice.
If you are already a customer, we may in certain cases – within the framework of the Marketing Act – send you information about similar products or services. This is always done with the option to opt out of future communications.
For this purpose, general personal data is processed.
The legal basis for the processing is your consent, cf. Article 6(1)(a) of the General Data Protection Regulation. You can withdraw your consent at any time without affecting the lawfulness of the processing that has already taken place.
meoo ensures that your personal data is not processed in ways that are incompatible with the above purposes.
Legal basis for processing personal data
We only process your personal data when we have a lawful basis under GDPR. Depending on the situation, one or more of the following processing grounds will be met:
Performance of a contract (GDPR art. 6(1)(b))
meoo processes much of your general personal data to fulfill the agreement with you – i.e. to enable you to use the platform. This includes e.g. use of your information to log you in. The processing is necessary for us to fulfill our obligations to you under our terms of service. If you do not provide this information, we will not be able to deliver our platform.
Legitimate interests (GDPR art. 6(1)(f))
In some cases, we process your data based on a balance of our legitimate interests and your fundamental rights. This legal basis is only used for general personal data and where the processing is necessary and expected. Our legitimate interests include e.g.: improving and developing meoo's solutions, ensuring IT security and preventing abuse, and providing customer service and support more efficiently. When we rely on legitimate interest, we have assessed that our purposes and methods do not result in a disproportionate interference with your privacy rights. You have the right to object to processing based on legitimate interests (see the section on user rights).
Legal obligation (GDPR art. 6(1)(c))
Some processing is necessary to comply with our legal obligations. This may e.g. be retention of certain data for accounting and bookkeeping during the legally required period, logging of consents under the Data Protection Act, or disclosure of information if we receive a court order. In such cases, the legislation (e.g. the Accounting Act or an order from an authority) constitutes the processing basis.
Regardless of which basis is used, meoo always processes your data in accordance with GDPR principles of data minimization, confidentiality, and purpose limitation. If in the future we wish to process your personal data for new purposes that are not compatible with the original ones, we will either obtain new consent from you or ensure another valid processing basis before the processing begins.
Disclosure of personal data
meoo does not, as a rule, disclose your personal data to third parties without your consent. We never sell your data. In certain cases, however, it is necessary to share information with trusted third parties to operate our service or comply with the law.
IT and operational suppliers
meoo uses external suppliers to operate our IT systems and core services. This includes cloud infrastructure and hosting, AI-based processing services, and other software sub-suppliers. These suppliers only process your data on our behalf and according to our instructions and may not use your information for their own purposes. We enter into data processing agreements that ensure a level of protection equivalent to our own.
Payment processors
If you make payments through meoo, your payment information will be handled by our selected payment gateway/payment service partner. This third party receives the necessary transaction information to complete the payment.
Public authorities
meoo may disclose personal data to public bodies or supervisory authorities if we are legally required to do so. This may be the case if we receive an order, a court ruling, or if legislation requires us to report certain matters. In such cases, we only share the information that is necessary and required by law.
Partners
In certain cases, you may choose or ask us to share your information with third parties. In such situations, we will clearly inform you about which data is shared and with whom.
Transfer to third countries
meoo stores and processes your personal data exclusively within the EU/EEA. We have entered into a data processing agreement that ensures full compliance with the requirements of the General Data Protection Regulation.
meoo does not, as a rule, transfer personal data outside the EU/EEA, and we have implemented technical and organizational measures to prevent unauthorized access, regardless of where data may be located.
If you would like further information about our storage of data or any transfers, please contact us at hej@meoo.dk. In short, we store your information within the EU, and we only share your personal data with third parties when necessary, lawful, and under strict security measures.
Retention of personal data
meoo retains your personal data only as long as necessary to fulfill the purposes described in this policy – and no longer. We have internal guidelines that ensure data is either anonymized or deleted when no longer relevant.
User profile and account data
Information linked to your account (name, contact info, login, profile settings, etc.) is retained as long as you have an active account with us. If you choose to cancel your account or request deletion, we will delete them within 2 months of your request. In case of prolonged inactivity, we may contact you about the status of your account.
Content you store in meoo
Data you actively enter into the system is stored on your behalf, so you have ongoing access to it in meoo. We retain this data until you delete it in the platform yourself, request us to delete it, or you close your account.
Communication data
Correspondence between you and meoo (support emails, chats, etc.) is stored as long as necessary to follow up on your inquiry and ensure good service. Typically, we retain support cases for up to 1–2 years after the last interaction, so we have a history if you contact us again about a related matter, and so we can learn from previous feedback.
Payment and transaction information
Information about completed payments (invoices, receipts, transaction history) is retained in accordance with accounting law requirements. This generally means that we must retain this data for 5 years after the end of the financial year, in order to comply with accounting and tax obligations.
Logs and technical data
Technical log files (e.g. access logs, error logs) containing personal data such as IP addresses are typically retained only for shorter periods, e.g. a few months, for the purpose of ensuring security and troubleshooting. We delete or anonymize log data on an ongoing basis when it is no longer relevant for these purposes.
Backup copies
When we delete personal data from our active systems, data may still exist in backup copies for a limited period. These backups are automatically overwritten or deleted on an ongoing basis as part of our backup procedures.
Typically, backups are retained for up to 1 year, after which they are permanently deleted. During this period, your data in backups is protected with the same high security standards as other data in the system.
Special circumstances
If we are required for legal reasons or to protect our rights to retain certain information longer than normal (e.g. if there is an ongoing legal dispute or we have a requirement to preserve correspondence), we will retain the relevant data until the matter is resolved, after which it will be deleted. In such cases, the data will be stored securely and used only for the necessary purpose.
In short: We only store your personal data as long as it makes sense to help you as a user of meoo and fulfill our obligations. When there is no longer a purpose or legal requirement, we ensure that the information is deleted or anonymized in a responsible manner.
Your rights
As a user of meoo and a data subject, you have a number of rights under GDPR regarding the personal data we process about you. We respect your rights and have procedures to help you exercise them. Your most important rights are:
Right of access (GDPR art. 15):
You have the right to obtain access to the personal data we hold about you. This means you can request a copy of the data we process, as well as information about how we process it, for what purposes, which categories of data, any recipients, retention period, etc. We will provide this information in a clear and understandable form.
Right to rectification (GDPR art. 16):
If you discover that the personal data we hold about you is incorrect or incomplete, you have the right to have it corrected. You can correct many basic details yourself through your account, and for other information you can contact us and we will ensure it is updated.
Right to erasure (GDPR art. 17):
Also called the "right to be forgotten". You generally have the right to have personal data about you deleted before our standard deletion deadlines if you request it. For example, you can ask to have your user profile and all the data you have stored with us deleted. We will accommodate such a request as long as we are not required to retain the information.
Right to restriction of processing (GDPR art. 18):
You have the right to temporarily "freeze" the processing of certain of your personal data if you, for example, dispute the accuracy of data or have objected to our processing. Restriction means that we continue to store your data but temporarily do not process it in other ways until the matter is resolved.
Right to data portability (GDPR art. 20):
For information that you have provided to us yourself and which we process electronically based on your consent or to fulfill a contract, you have the right to receive it in a structured, commonly used, machine-readable format. This makes it easy for you to transfer it to another service.
Right to object (GDPR art. 21):
You have the right at any time to object to processing of your personal data that occurs with reference to legitimate interests. If you, for example, do not want us to use certain data for statistics or service improvement under this basis, you can object.
Right to withdraw consent (GDPR art. 7(3)):
In cases where we process your data based on your consent, you have the right to withdraw your consent at any time. This applies, for example, if you have given us permission to process your health information in meoo or to receive our newsletter. If you withdraw your consent, we will stop the prospective processing of the relevant data immediately.
Complaint to supervisory authority
If you believe that we have not complied with your data protection rights, you have the right to file a complaint. You can always contact us first so we can try to remedy any issues. But you also have the right to complain directly to the national data protection authority. In Denmark, this is Datatilsynet.
To exercise your rights, you can contact us using the provided contact information. We may ask for confirmation of your identity to ensure we provide or change information to the right person. We strive to respond to and accommodate your requests as quickly as possible and at latest within one month.
Security measures
meoo takes data security very seriously. We have implemented a range of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These security measures include:
Encryption
All communication between your device and meoo's servers is protected with encryption (HTTPS/SSL), so data sent over the internet cannot be intercepted by unauthorized parties.
Access control and confidentiality
Only authorized employees at meoo (and our carefully selected data processors) have access to personal data, and only to the extent necessary for their work tasks. All employees are subject to confidentiality obligations and are trained in handling personal data and GDPR rules.
Pseudonymization and minimization
Where possible, we pseudonymize data in our internal processes. For development and analysis purposes, we use anonymized or aggregated datasets so that individuals cannot be identified. We only collect and process data that is necessary for the purpose ("data minimization").
Secure software development
Our development process includes security as an integrated part. We test our systems and AI models to identify and fix vulnerabilities. We follow best practices for coding, including principles such as "privacy by design and by default".
Backup and recovery procedures
We take regular backups of important data to be able to restore them in case of system failure or accidental data loss. These backups are stored encrypted. Should disaster strike, we have contingency plans to quickly restore normal operations and the integrity of your data.
Monitoring and logging
We monitor our systems for unusual activities and possible security incidents. Log files are reviewed periodically to detect e.g. repeated failed login attempts or other signs of possible abuse. If we detect something suspicious, we act proactively.
Data processor management
As mentioned, we use some sub-suppliers for operations. We only choose suppliers that meet high security standards and enter into data processing agreements with all our partners as required by GDPR.
Continuous improvement
Security is not static. We stay updated on developments in IT security and data protection, and continuously adjust our security policies and measures. This includes e.g. adopting new technology for better protection.
Security breach handling
Should there – despite our efforts – be a security breach that compromises your personal data, we have procedures to immediately handle the incident. This includes limiting the scope, restoring security, and – where required – notifying Datatilsynet and the affected users without undue delay and within the deadline prescribed by law.
We do everything we can to take good care of your data. Remember that you also play a role in keeping your information safe: be careful to protect your password and do not log into meoo from unknown devices that you do not trust. Please contact us if you have questions about security or experience anything suspicious related to your account.
Contact information and complaint access
About inquiries
If you have questions, concerns, or requests about this privacy policy or meoo's processing of your personal data, you are always welcome to contact us. We take your inquiries seriously and respond as quickly as possible.
We ask you to clearly state what your inquiry is about (e.g. "access request" or "question about data security"), so we can help you in the best possible way.
Contact information
Contact information for meoo (data controller):
- Company name: menii ApS
- Attn: Data Controller/Privacy
- Address: Lyshøj Allé 17, 2. tv, 2500 Valby, Denmark
- Email: hej@meoo.dk
Complaint to Datatilsynet
If you are dissatisfied with how we process your personal data, or with our response to a request, you have the right to file a complaint with the Danish data protection authority:
- Name: Datatilsynet
- Address: Carl Jacobsens Vej 35, 2500 Valby, Denmark
- Phone: +45 33 19 32 00
- Email: dt@datatilsynet.dk
- Web: www.datatilsynet.dk
You can find guidance on Datatilsynet's website on how to file a complaint. However, we hope you will contact us first so we can try to accommodate your wishes and correct any errors.
Changes to the privacy policy
About policy updates
We continuously improve and develop meoo's services, which may also result in changes to how we process personal data. Legislation may also change. Therefore, it may become necessary to update this privacy policy from time to time.
When we update the privacy policy, we change the "last updated" date at the bottom of the document. If there are significant changes to the policy or how we process your data, we will provide clear notice. This may be via email (if you have provided an email address), via a notification in the platform, or by a highlighted message on our website. This way, you can consider the changes. In certain cases, we may ask for your renewed consent if the changes affect the conditions under which you originally provided us with the information.
We encourage you to regularly review the privacy policy to stay updated on how we protect your information. Continued use of meoo after an update to the policy will be considered acceptance of the revised privacy policy, unless otherwise stated. Should you disagree with the changed practices, you can always choose to stop using the service and/or contact us to have your data deleted.
Last updated
This privacy policy was last updated: Wednesday, August 13, 2025.
Our promise to you
We thank you for your trust in meoo. Your data protection and confidentiality are our highest priority. If you have questions or feedback about this policy, do not hesitate to reach out to us at hej@meoo.dk. We are here to help and create a safer experience for you.