Medito is a free meditation and mindfulness app operated by Stichting Medito, a registered Dutch non-profit foundation (KvK 75284251, RSIN 860222627, founded 2020). No account is required to use the app, and the app's own source code is published under the AGPL-3.0 license by a GitHub organization (meditohq), with no published security advisory found at draft time. However, Medito's current Privacy Policy (effective 20 April 2026) discloses that the app automatically collects usage, device, and coarse location information that 'cannot be disabled while using the App,' and that it relies by default on four third-party SDKs — Google Firebase Analytics, Firebase Crashlytics, Superwall (donation-paywall display and measurement), and Meta/Facebook (advertising-campaign measurement using the device's advertising identifier) — all described as 'enabled by default' though deactivatable in the app's privacy settings. The policy states Medito does not sell personal information, but this is a materially more third-party-tracked posture than the local-first, zero-telemetry design typical of the nonprofit meditation apps this entity is anchored against.
TIMELINE
1 ENTRY
[2026-08-31] · NEW RECEIPTS
8 new sources on file for Medito.
Medito's file gained 8 new sourced claims since its last review.
Medito's About page states 'No account or sign-up required' as one of the foundation's stated commitments, confirming that the core meditation content is usable without creating a Medito account.
Medito's Privacy Policy (effective 20 April 2026) states that the app automatically collects usage, device, and location information as described elsewhere in the policy, that this first-party collection is required to operate the app, and that it cannot be disabled while using the app — though the third-party services that also process this data can be deactivated separately in the app's privacy settings.
GitHub's API record for the meditohq/medito-app repository confirms the code is owned by the meditohq GitHub Organization (not a single individual account), is licensed under AGPL-3.0, and is described by the maintainers as 'The Medito app is a 100% free meditation app built with flutter.'
Medito's About page discloses its full legal identity: Stichting Medito, a non-profit foundation registered in Amsterdam, Netherlands, with a Dutch Chamber of Commerce (KvK) number of 75284251, a Dutch tax registration (RSIN) number of 860222627, and a founding year of 2020.
Medito's License page states the Medito app itself is licensed under the GNU Affero General Public License (AGPL), that the app's source code is freely available to the public, and that any modifications distributed under the AGPL must also make their source code available, with a link to the public repository at github.com/meditohq/medito-app; original meditation content, by contrast, remains under a separate proprietary custom license to fund the foundation's operations.
Medito's Privacy Policy states it relies on vendors and service providers for analytics, crash-reporting, donation, and advertising-measurement services, naming Google Firebase Analytics, Firebase Crashlytics, Google Analytics, Superwall, and Meta by name as recipients of user data, while separately stating that Medito does not sell personal information to third parties.
GitHub's Security Advisories page for the meditohq/medito-app repository shows no published security advisories, indicating a clean disclosed-vulnerability record at draft time, though without a named third-party audit or bug-bounty program to independently verify the codebase's security posture.
Medito's Privacy Policy discloses that, by default, the app uses Firebase Analytics and Firebase Crashlytics for usage/crash telemetry, Superwall to display and measure in-app donation prompts, and the Meta (Facebook) SDK to measure advertising-campaign performance; the Meta integration specifically transmits the device's advertising identifier, app install and event data, and limited device information for that purpose.