Trang này chỉ có bản tiếng Anh.
Sign-in and devices
Mera signs you in with your phone. It never asks for an email address or a phone number, and there are no passwords.
How it works
When you first open the app, your phone proves it's a real device running the genuine Mera app. The server then creates an account and binds it to a sign-in record for that phone. On later sign-ins, the same proof resumes the account.
| Step | iPhone | Android |
|---|---|---|
| Proof | Apple App Attest | Google Play Integrity |
| Stored by Mera | App Attest public key, key ID, usage counter | A keyed hash of the Android ID |
| Sent to Apple or Google | Mera's servers send nothing to Apple | The token goes to Google, which returns a result |
Each sign-in uses a one-time value from the server, so a recorded sign-in can't be replayed.
On Android, the app sends the Android ID to Mera's servers, which keep only a keyed hash of it. The hash is one-way, so it can't be turned back into the Android ID. It's pseudonymous rather than anonymous: given an Android ID, the hash can be recomputed and matched. Mera checks the Play Integrity result and doesn't keep it.
Mera uses the sign-in record only to sign you in, confirm the app is genuine, and limit how fast accounts can be created from one connection.
What your account holds
- A Support ID, shown at the bottom of Settings. It's how support and the deletion form identify you.
- An internal placeholder address on Mera's own domain. Nobody can receive mail there, and it's never shown or sent to any other service.
- Sign-in sessions, with no IP address or browser details. A session lasts at most one year.
- Your plan.
Mera holds an email address only if you write to it. Those messages are correspondence and aren't linked to sign-in.
What's stored where has the full list.
Which phones work
Phones that can't pass the check aren't supported. That includes Android phones without Google Play.
Moving between phones
An account lives on the phone it was created on.
| What happens | Result |
|---|---|
| You lose the phone or buy a new one | New account |
| You delete and reinstall the app on iPhone | New account |
| You reset an Android phone to factory settings | New account |
| You reinstall the app on Android | Same account |
A new account doesn't mean starting again. Restore your data from your own backup, and your paid plan follows your App Store or Google Play account.
App Store and Google Play purchase records can connect your accounts.
Locking the app
You can turn on a PIN in Settings. It locks the app on that phone. It's stored on the phone and plays no part in signing in. It's off by default.
Reset this phone
If signing in goes wrong, the app offers Reset this phone. It signs you out and clears Mera's data from the phone, including what you've told Mera. Your account isn't deleted, and you can sign in again from the same phone.
Deleting your account
- In the app: deletion starts a 30-day grace period. The sign-in record goes as soon as you ask, so the request can't be cancelled.
- On the website or by email: send your Support ID through the deletion form or to
privacy@mera.news. Mera handles it within one month.
An account with no sign-in and no use of the app for 12 months is deleted, unless it has an active paid plan.
Deleting an account doesn't cancel a store subscription. Cancel it in the App Store or Google Play.
How other services trust a session
The auth service issues a signed token. The inference gateway checks that token against the auth service's public keys. See Private inference.