Trust & Data Protection
ICO Registration
Meterbolic is registered with the UK Information Commissioner's Office under registration number ZC039400 (registered 11 November 2025, expires 10 November 2026).
View the ICO registration certificate, or verify it on the ICO register.
What we collect
Lipid panel readings, insulin and glucose values, food photographs (optional), your conversation history with Meo, and account/order details (name, email, delivery address, purchase history). Payment cards are processed by our payment provider and are never stored by Meterbolic.
Where your data lives
Primary database hosted in the Amazon Web Services London region (eu-west-2) on managed PostgreSQL. All traffic is encrypted (HTTPS for the site and app, TLS for internal services). Food photos are stored privately with time-limited URLs that expire within minutes.
Health data and AI
Health data is "special category data" under UK GDPR Article 9 and is only processed with your explicit, freely given, specific consent. It is never used to train public AI models, never used for advertising, and never sold or shared with ad networks.
How long we keep it
We keep your metabolic history while your account is active. If you close your account, your readings and conversations are deleted; invoice and tax records are kept only as long as legally required.
Your rights under UK GDPR
- Access: get a complete copy of your data.
- Rectification: correct inaccurate information.
- Erasure: delete your data, except legally required records.
- Portability: receive a machine-readable export.
- Objection: challenge processing or withdraw consent.
- Complaint: escalate to the Information Commissioner's Office.
Contact privacy@meterbolic.com for any of these; we respond within 30 days.
Partners and affiliates
Meterbolic remains the data controller for platform data (readings, accounts, conversations). Partners retain control of their own client lists, notes and clinical records. Data is only shared with a partner once you explicitly engage their programme. Request our data-protection pack at partner@meterbolic.com.
What we will never do
- Sell your health data.
- Use it for ad targeting.
- Give third parties access to it to train AI models.
- Disclose your results to employers, insurers or your GP without your authorisation.
- Make a medical diagnosis.
- Materially widen how we use your data without asking you to re-consent.
What we are not
Meterbolic is not ISO 27001 or SOC 2 certified. HIPAA does not apply here; we are governed by UK GDPR and the Data Protection Act 2018. Meo is a wellness and monitoring tool, not a diagnostic medical device.