Privacy Policy & Data Protection

At Mehzem, safeguarding your personal privacy and academic data security is our foundational priority. The application was designed and engineered from the ground up as a dedicated, standalone personal tool that empowers university students to master their time, courses, attendance, and academic records without ever compromising their personal data or digital identity.

This Privacy Policy applies to your use of the Mehzem mobile application available via the Apple App Store ↗ for iOS and iPadOS devices, as well as our official web portal at mehzem.com.

Mehzem does not collect any data linked to your identity, and does not sell or share your personal information, geographical location, or app usage telemetry, and we have no servers that store your inputs. There are only two cases where data leaves your device: the schedule photo you choose to scan is sent to Google Gemini via Firebase for analysis (section 5), and a technical device token is sent to Firebase to deliver notifications (section 6).

• No User Account Required: You never need to provide an email address, phone number, username, or password to use Mehzem.
• Zero Analytics or Tracking Frameworks (No Analytics SDKs): The app is 100% free of third-party telemetry, behavior-tracking, or diagnostic packages such as Google Analytics, Firebase Analytics, or similar trackers.
• Completely Ad-Free (No Advertising): Mehzem contains zero commercial advertising networks and does not query or collect Apple's Identifier for Advertisers (IDFA).

All your academic records are processed and stored locally within an isolated, hardware-protected storage environment on your personal device through the native iOS App Sandbox architecture, secured by Apple's cutting-edge mobile hardware encryption.

Mehzem operates with complete functionality in Offline Mode without requiring an internet connection. This guarantees uninterrupted access to your schedule, classroom locations, and lecture alerts even in underground university auditoriums or areas with zero cellular reception.

Delivering an intuitive, high-productivity academic experience requires requesting select iOS system permissions strictly on an on-demand basis. We uphold absolute transparency regarding the purpose and scope of each permission:

• Camera Access (NSCameraUsageDescription): Requested solely when you explicitly tap the AI Smart Scanner to capture an instant photo of your weekly timetable, exam schedule, or course syllabus from a printed handout or computer screen. The camera never activates in the background, and no photo is taken without your deliberate shutter tap.
• Photo Library Access (NSPhotoLibraryUsageDescription): Requested only when you choose to import an existing schedule screenshot from your camera roll (e.g., from university portals like Blackboard or SIS systems) to parse it into an organized timetable. Mehzem never browses, reads, or uploads any other photos in your album.
• Save Photos Permission (NSPhotoLibraryAddUsageDescription): Requested solely when you decide to export your formatted timetable design as a high-resolution image directly to your iOS Photos album.

Mehzem features advanced smart document scanning powered by Google Gemini models through Firebase to transform lecture tables, exam rosters, and coursework lists into structured academic entries. We strictly enforce the following privacy safeguards:

• Ephemeral Cloud Processing: When executing a scan, the selected image is transmitted over a secure, encrypted connection (HTTPS / TLS 1.3) to Google Gemini via Firebase, solely to extract textual data, course titles, timings, and classroom locations in real time.
• We Don't Keep Your Photos: Mehzem never stores the image on any server or database of our own, and never uploads it anywhere other than the analysis service. Google's processing of the image is governed by Google's terms for Gemini and Firebase services.
• We Don't Train Models on Your Data: We never use student schedules, uploaded images, or extracted course data to train or improve any artificial intelligence model.
• Service Protection with Firebase App Check: Mehzem uses Firebase App Check with Apple's App Attest (or DeviceCheck on older devices) to verify that requests come from a genuine copy of the app before it uses Firebase services, preventing abuse. This check relies on technical tokens from iOS and sends no academic or personal data.
• User Review & Confirmation Before Saving: All recognized courses and tasks are displayed in an interactive, editable preview screen. You can review, edit, or exclude any item before confirming. Only the data you approve is saved, strictly within your local device memory.

Mehzem requests notification authorization to provide timely reminders for lectures, impending assignments, and scheduled exams. These alerts are scheduled locally on your device. The app may also receive critical service announcements via Google Firebase Cloud Messaging using an encrypted, anonymous device token without collecting personal identity or tracking behavior:

• 100% Local Academic Notifications: Lecture alerts, schedule summaries, and coursework reminders are scheduled and fired natively through iOS (UNUserNotificationCenter) without requiring network connectivity.
• Reliable Service Announcements (Cloud Messaging): The app may receive occasional system announcements or service updates via Google Firebase using an encrypted, anonymous device token (Device Token) with zero behavioral tracking or personal identity linkage.
• Dynamic Island & Live Activities: Real-time lecture tracking on the Dynamic Island and Lock Screen is managed 100% on-device via Apple's ActivityKit framework to display elapsed and remaining lecture time, with zero external network transmission.
• Complete User Control: You can adjust alert lead times or revoke notification permissions at any time directly through Mehzem's in-app settings or your iOS system settings.

To provide a seamless academic workflow when using Mehzem across your personal Apple devices (such as your iPhone and iPad), the app supports private data synchronization using Apple's official native frameworks: Apple NSUbiquitousKeyValueStore and the Apple CloudKit Private Database container.

This synchronization runs only through your personal iCloud account, and your data is encrypted in transit and at rest under Apple's iCloud security standards. No data is ever routed through or stored on developer-owned servers, and the developer has no way to view your synchronized academic records.

Mehzem offers an optional premium subscription — Mehzem Plus — unlocking AI smart scans (30 a month) and comprehensive multi-device synchronization, with a 14-day free trial that starts at install and needs no card:

• Secured Exclusively by Apple StoreKit 2: All financial transactions, billing cycles, payments, and receipt validations are handled entirely by Apple In-App Purchases.
• Zero Access to Financial Data: The developer never receives, views, or stores your credit card numbers, bank account details, or payment credentials.
• Complete Subscription Sovereignty: You can manage, upgrade, or cancel your subscription at any time with total ease directly through your iOS Settings (Apple ID > Subscriptions).

In alignment with your fundamental right to absolute control over your academic information, Mehzem provides comprehensive, granular data management tools:

• Edit & Delete Any Record: You can edit or permanently delete any course, lecture, attendance log, coursework item, or exam at any time.
• Instant One-Tap Data Wipe: Inside the app's (Permissions & Security) settings screen, a dedicated button allows you to instantly purge all stored records and reset the app to its factory state with one tap.
• Local Backup & High-Resolution Export (JSON & PDF): The app enables you to generate a local JSON backup file to archive or restore your data, as well as export your formatted schedule as a high-resolution vector PDF ready for printing or sharing.
• App Uninstallation: Deleting Mehzem from your iOS device immediately and permanently purges all local sandbox data, caches, and preferences from your device.
• iOS Complete File Protection: Hardware-grade encryption (.completeFileProtection) is enforced across backup files and widget containers, ensuring data is inaccessible whenever your device is locked with a passcode or Face ID.

Mehzem complies 100% with the highest global privacy standards and official regulatory frameworks:

Compliance with Saudi Personal Data Protection Law (PDPL): Mehzem fully complies with all provisions of the Saudi Personal Data Protection Law enacted by Royal Decree, ensuring total transparency, processing data exclusively to deliver direct academic utility to the student, and never transferring data except in the cases the user requests and that this policy describes (Smart Scan and sync through their own iCloud account).

If you have questions, feedback, or inquiries regarding our privacy standards and data protection architecture, please contact us directly through our official channels:

Proudly designed and engineered to support students towards academic excellence • Copyright © 2026 Mehzem. All rights reserved.