Privacy Policy

Last Updated: November 21, 2025

At MeCaptcha (owned and operated by Canopy Ventures, LLC), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

1. Information We Collect

1.1 Account Information

When you create an account with MeCaptcha, we collect:

• Email address or phone number (for authentication)
• Authentication provider information (Google, Apple, or phone authentication)
• Profile information you choose to provide

1.2 TOTP Account Data

To provide authenticator functionality, we store:

• Encrypted TOTP secrets for your two-factor authentication accounts
• Account names and issuer information you provide
• Timestamps of account creation and usage

1.3 Humanity Credits

We track humanity credits and credit transactions to maintain your proof-of-humanity score. This includes:

• Credit balance and transaction history
• Usage patterns for credit accumulation

1.4 Usage Data

We automatically collect certain information when you use MeCaptcha:

• Device information (type, operating system, unique device identifiers)
• App usage statistics and analytics
• Error logs and diagnostic information

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our two-factor authentication services
• Generate time-based one-time passwords (TOTP) for your accounts
• Calculate and maintain your humanity credits
• Authenticate your identity and prevent unauthorized access
• Send you important notifications about your account
• Respond to your support requests and communications
• Improve app functionality and user experience
• Detect, prevent, and address technical issues or security threats

3. Data Security

We implement industry-standard security measures to protect your data:

• End-to-End Encryption: Your TOTP secrets are encrypted on your device before being stored
• Secure Storage: All data is stored using secure, encrypted databases
• Authentication: Multi-factor authentication options for account access
• Regular Security Audits: We conduct regular security assessments

While we strive to protect your personal information, no security system is impenetrable. We cannot guarantee the absolute security of your data.

4. Third-Party Services

MeCaptcha uses the following third-party services:

4.1 Authentication Providers

• Google Sign-In: For Google-based authentication
• Apple Sign-In: For Apple ID authentication

4.2 Backend Infrastructure

• Supabase: For database, authentication, and storage services

These third-party services have their own privacy policies. We encourage you to review them:

• Google Privacy Policy: https://policies.google.com/privacy
• Apple Privacy Policy: https://www.apple.com/privacy/
• Supabase Privacy Policy: https://supabase.com/privacy

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With trusted third-party service providers who assist in operating our app (under strict confidentiality agreements)
• Legal Requirements: When required by law, regulation, or legal process
• Safety and Rights: To protect the rights, property, or safety of Canopy Ventures, LLC, MeCaptcha, our users, or the public

6. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: Opt out of certain data collection or marketing communications

To exercise these rights, please contact us at privacy@mecaptcha.com.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

8. Children's Privacy

MeCaptcha is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information as soon as possible.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your country. We take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: