The short version
MeterGO has no account and no ads, and it does not track you. Your properties, meters, readings, tariffs and meter photos stay on your iPhone and, if iCloud sync is on, in your own iCloud. We have no server that holds your records and we cannot see them. Reading numbers from a meter photo happens on your device. Anonymous usage analytics and crash reports are optional and off until you turn them on. We never sell data.
1. Who we are
MeterGO is made by an independent developer ("we", "us"); the developer's name is shown as the seller on MeterGO's App Store page. We are the controller for the limited data described in sections 4 and 5. Contact for anything about privacy: info@familygo.app. Website: https://familygo.app.
2. What stays on your device and in your iCloud
These never reach us, under any setting:
- Properties (name, optional address, optional photo), meters (type, meter number, location note), readings (value, date, optional photo, notes), tariffs (supplier name you type, prices, advance payment), reminder settings and your settings.
Where it is stored. In the app's database on your device. If you leave iCloud sync on, it is also stored in the CloudKit private database of your own Apple Account. Only you can access it; we cannot. Apple's iCloud backup may include it too. You can switch sync off in Settings > iCloud & backups; this takes effect the next time MeterGO opens. Some app settings (for example onboarding state and your analytics choices) are kept on the device only and are not synced. iCloud sync uses silent system notifications from Apple to tell your devices that data changed; they carry no content from us.
Exports and imports. If you export readings (for example as CSV or PDF) or share a reading as text, you choose where the file goes (Files, Mail, AirDrop and so on). Once you share it, the receiving app or person handles it under their own rules. CSV files you import are read on the device.
3. Permissions and Apple services
- Camera. To read the digits on your meter. Recognition runs on the device (Apple Vision and a Core ML model bundled in the app). The camera image is not sent to us or anyone else. If you save a reading, the cropped photo is stored with it (compressed, optional) and synced only through your iCloud.
- Photos. If you pick a picture for a property, the app uses the system photo picker and receives only the picture you choose, not access to your library.
- Notifications. If you allow them, MeterGO schedules local reminders on the device (reading day, billing-period end, moving or supplier-switch dates, and a reminder 48 hours before a free trial ends). We do not send them from a server.
- Widgets, Lock Screen and Siri/Shortcuts. If you use these, they show or act on a small summary kept on your device.
MeterGO does not ask for location, contacts, calendar or Face ID.
4. What reaches us, and only if you allow it
During onboarding, and later in Settings > Privacy, you can turn on two separate choices. Both are off until you turn them on.
- Anonymous usage analytics (Firebase Analytics, Google). If on, MeterGO sends short events such as country selected, meter types selected, reading captured (meter type, display type, photo or manual, how many digits you corrected as a bucket), photo read failed (reason), forecast viewed, meter replaced, tariff added, report exported, CSV imported, paywall shown, trial started, purchase completed or failed, and restore. Event values come from fixed lists, so free text cannot be sent. Never sent: readings, meter numbers, addresses, tariffs, amounts, photos.
- Crash reports (Firebase Crashlytics, Google). If on, a crash sends the technical crash log, device model, iOS version, app version and a random installation identifier. Never your records or anything you wrote.
- Identifiers. Firebase assigns a random app-instance identifier, not your name, e-mail or Apple ID. It is not linked to your identity, and we have no accounts to link it to. Google sees technical data such as your IP address on any request. The app does not use Apple's advertising identifier (IDFA) or ask for tracking permission, and Google ad storage and ad personalisation are off.
- Remote Config (only with usage analytics on). If you have turned on usage analytics, the app also fetches a few settings (paywall wording variant, which plan is preselected, how many days before a reading day a meter counts as due) from Google Firebase Remote Config. The request carries a random Firebase installation ID, the app version and the device language, and nothing about you or your entries. If usage analytics is off, the app does not make this request and uses the settings built into it. Turning analytics off stops the fetching. The request sends no readings or personal content.
Why and legal basis (GDPR / UK GDPR). To fix crashes and see which parts of the app are used. The basis is your consent (Art. 6(1)(a)), which you can withdraw at any time.
Who processes it for us: Google (Google Ireland Ltd and Google LLC), for Firebase Analytics, Crashlytics and Remote Config, under Google's data processing terms. It processes the data only on our instructions.
5. What reaches us without a choice
Purchases. Purchases are sold and billed by Apple. We never see your card or Apple Account details. Apple tells the app whether you have an active subscription. Apple's own privacy policy applies to your payment and Apple Account.
E-mails you send us. If you write to info@familygo.app, we use your message and address to answer you. Legal basis: our legitimate interest in answering (Art. 6(1)(f)).
6. How long we keep it
- Your app data: we hold none. It stays on your device and in your iCloud until you delete it.
- Firebase Analytics event data: 2 months, then deleted.
- Crashlytics crash reports: 90 days.
- Support e-mails: deleted 12 months after the conversation ends, unless the law requires longer.
- Deleted properties, meters and readings stay in "Recently deleted" on your device for 30 days, then are removed.
7. International transfers
Google may process data in the United States. Transfers are covered by the EU-US Data Privacy Framework (Google is certified) and the European Commission's Standard Contractual Clauses. Apple handles iCloud, App Store and Apple Maps data under its own policies.
8. Your choices and rights
- Change your consent at any time in Settings (Privacy). Turning a choice off stops sending at once.
- Export your readings in the app before you delete anything.
- Delete everything in Settings > iCloud & backups > Delete all data. It removes all records and reminders, and the deletions sync to your other devices through iCloud. It also resets the analytics identifiers, so nothing sent later can be joined to anything sent before. Deleting the app removes the data on the device; iCloud data can be removed in iOS Settings, your name, iCloud, Manage Storage.
- Your rights under GDPR and UK GDPR: access, rectification, erasure, restriction, objection, data portability, and withdrawing consent without affecting what was done before. Your records are on your device and in your iCloud, so you control them directly in the app. We hold no records linked to you, and analytics identifiers are random and not linked to your identity, so we usually can't find data about you. Turning analytics off and Delete all data reset them. You can write to info@familygo.app and we will help where we reasonably can, within one month.
- Complaints: you can complain to the data protection authority where you live or work.
- US residents (including California): we do not sell or share personal information and do not use it for targeted advertising. You can use the rights above in any US state.
- Legal bases for running the app: the app runs on your device, so we mostly don't process that data as a controller. Where we do, the basis is performing our contract with you and our legitimate interest in providing a working app.
9. Children
The app is not directed to children under 13 (under 16 in the EEA where that age applies). We do not knowingly collect data from children.
10. Changes
If we change this policy, we update the date at the top and, for changes that affect what is sent, ask again in the app before anything new is sent. The current version is at https://familygo.app/metergo/privacy/.
Changes: 9 November 2026: first version.