The Mera Protocol

The Mera Protocol is one rule for building personal AI apps: a person's data lives on their own device, and the server stays stateless and keeps none of it.

Mera News follows it everywhere except account management.

The rule

• Personal data lives on the device. What you tell Mera, your places, your saved articles and your reading history are stored on your phone, not on Mera's servers.
• The server is stateless. It handles a request, returns the answer and keeps nothing about you from it.

So there's no profile on a server to sell, leak or hand over.

The exception: account management

An account needs a few records to work at all, and these are the only things Mera's servers keep linked to you:

• your account and sign-in record
• your plan and billing status
• your daily reading usage, used to apply your plan
• your device settings, such as the push token, app language and notification hours
• records needed to run the service, such as the log of push messages sent
• anything you choose to send, such as an answer to a feedback question or an appeal

None of these holds your profile, your facts or what you read. What's stored where lists each one and how long it's kept.

How Mera News follows it

Your phone holds your data and does the personal work, in one of two ways:

• On this phone. Mera AI runs on your iPhone. See On-device models.
• Private cloud. The work goes, encrypted, to a secure environment that handles it and discards it. Mera can't read it. See Private inference.

To find news, the phone asks a server for broad topics, and no record links those topics to you. The server returns articles, and your phone ranks them. See Topics and the anonymous cache.

If you turn on backup, an encrypted copy goes to your own iCloud or Google Drive, and only your recovery code opens it. See Backups.

How it works

Phone
  Your data (local database)
    |
    |  on the phone, or encrypted in Private cloud
    v
  Topic phrases ---------------------------> Mera's servers
                                             (keep nothing about you)
  Article identifiers and headlines <-------------+
    |
    |  on the phone, or encrypted in Private cloud
    v
  Ranked feed with notes (stored on the phone)

What to check

The app's code is published, so you can read what leaves your phone. The server code isn't published yet, so its side of the rule can't be checked from outside. Known gaps lists this and the other limits in one place.