Privacy Policy
This policy explains what the Memodate iPhone app and the memodateapp.com website do with your personal data, why, who helps, how long it is kept and what you can ask for. It is written to meet the UK GDPR, the EU GDPR and Apple’s App Store rules.
Who we are
Memodate is made by Ian Magee, a sole trader based in London, United Kingdom. Ian is the data controller for the personal data described here and is registered with the UK Information Commissioner’s Office, registration number ZC258816. For anything about your data, email support@memodateapp.com.
The short version
- The app needs an account. Your email, your progress and what you add (your name, a username, a profile picture) are stored so you can restore them on any device.
- The app also sends us usage events (which screens and lessons you reach, how rounds go, whether sign-in worked) linked to your account, and crash reports, so we can fix problems and improve the lessons. Feedback you send by shaking the phone comes with a screenshot.
- Other players can see your username, your level and League place, your League gems and your best ranked scores. Nothing else about you is shown to them, and you can report or block any name.
- No advertising, no ad identifiers, no tracking across other apps or websites, no selling of data. The website sets no cookies of its own; its host counts visits in aggregate.
- You can delete your account and everything with it from Settings in the app, at any time.
What we collect and why
| What | Why | Lawful basis |
|---|---|---|
| Account: your email address, how you sign in (Apple, Google or email and password), and a name if the sign-up form, Apple or Google gives one. Passwords are stored only as a secure hash. | To run your account and restore your progress on any device. | Contract |
| Your save: the name you type when the app says hello, your answers to the short questions at the start, lessons and games done, times, scores, streaks, the pictures you have made for numbers, your reminder time and your settings. | To sync and restore your progress. It is kept on your phone and copied to your account. | Contract |
| Username: a random one unless you pick your own. | Your name in the League and on the ranked boards. Other players can see it. | Contract |
| Scores and League place: your best ranked score in each game, your level, your League tier and group, and your League gems. | To run the ranked boards and the League. Other players can see these beside your username. | Contract |
| Profile picture (optional): Memo, or a photo you choose or take. | Shown beside your name. The app only sees the one photo you pick; it never reads your photo library. The photo is sent to our moderation service (a function on Supabase) to check it is suitable, and is kept in your save. Nobody else can see it today. | Contract, and your consent when you choose a photo |
| Usage events: a random ID made by this installation of the app, your account ID once you are signed in, the app version, the time, and what happened: each onboarding page reached, each sign-in attempt and its outcome (with the technical error code and a short error message, cleaned of emails, if it failed), the paywall being shown, closed or used and the plan picked, lessons and rounds finished (game, level, medal, time, practice or ranked), levels and chapters reached, app opens (with your streak, level and chapter), taps on a notification, the reminder hour you choose, visits to the League tab, and whether feedback was sent. Never your email, name, username or anything you write. They start from the first screen, before you sign in. | To see where people get stuck, fix sign-in problems and improve the lessons and games. | Legitimate interests |
| Feedback you send (optional, by shaking the phone or from Settings): your note, a screenshot of the screen you were on, the screen’s name, the app version, the iOS version, a device model line, your username and your account ID. | To understand and fix what you are telling us about. | Legitimate interests |
| Purchases: Apple’s transaction identifiers, your subscription status and an app user ID. | To unlock Memodate Plus and restore it. Apple takes the payment; we never see card details. | Contract |
| Cancellation answers (optional): the reasons you tick and any note, if you answer the short question before cancelling. | To understand why people leave and improve the app. | Legitimate interests |
| Reports and blocks you make about other players, once players can see each other. | To keep the app safe and act on reports. | Legitimate interests |
| Crash reports: device model, iOS version, app version and a technical trace of the error, and a warning when a sign-in fails (the sign-in method and its error code). No name or email. | To find and fix bugs. | Legitimate interests |
| Reminders: the time you choose for a daily reminder. | Reminders are scheduled on your phone as local notifications. The time is kept in your save, and the hour is recorded in a usage event when you set it. | Contract (iOS asks your permission for notifications) |
| Early access list (website): your email, where you came from (for example a link you followed), your browser’s user agent and the date. Each new sign-up is also emailed to our support inbox. | To send a welcome email now and one email the day the app is on the App Store. | Consent |
| Website requests: your IP address and basic request details, handled by our host. | To serve the website, protect it from abuse, and count visits in aggregate (page views, countries, pages and referring sites), with no cookies. | Legitimate interests |
What the lawful bases mean
- Contract: needed to give you the service you asked for, such as your account, your synced progress or your subscription.
- Legitimate interests: keeping the app working, safe and improving, using as little data as possible. You can object at any time (see Your rights).
- Consent: you chose it, and you can withdraw it at any time. For the early access list, reply to any email or write to support and you are removed.
What we never collect
- No advertising, and no advertising identifier.
- No tracking of you across other companies’ apps or websites.
- No selling or renting of personal data.
- No contacts, location or microphone. No access to your photo library beyond the single photo you pick.
Cookies
The website sets no cookies of its own and runs no analytics script or tracking. We read our host’s own aggregate visit counts, which need no cookies. Our host, Cloudflare, may set a strictly necessary security cookie to tell people from bots. The website’s typefaces load from Google Fonts (see Who helps us). The app does not use cookies.
Who helps us
These companies process data for us under their own data processing agreements, and only to provide their service. Apple and Google act as separate controllers for their own sign-in and payment services.
| Company | What they do | Where |
|---|---|---|
| Supabase | Accounts, sign-in, the database that holds your save, usage events, feedback and the early access list, the storage that holds feedback screenshots, and the profile picture check | UK (London) |
| RevenueCat | Subscription status | United States |
| Apple | The App Store, payments, Sign in with Apple | Worldwide |
| Sign in with Google, if you use it | Worldwide | |
| Sentry | Crash and error reports | Germany (EU) |
| Google Fonts | Serving the website’s typefaces. Your browser fetches them from Google, which sees your IP address; Google says it does not use this to build profiles | Worldwide |
| Cloudflare | Hosting the website and its sign-up form | Worldwide network |
| Resend | Sending account emails (confirming your email, password resets) and the early access emails, and holding that mailing list | Ireland (EU) |
| Google Workspace | Our support email inbox, including the note of each early access sign-up | Worldwide |
International transfers
Some of these companies store or reach data outside the UK and EEA, mainly in the United States. When that happens the transfer is protected by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses in their agreements, or by the UK Extension to the EU-US Data Privacy Framework where the company is certified.
How long we keep it
- Account, save, username, picture, scores and League place: for as long as your account exists. Deleted when you delete the account; database backups roll off within 30 days.
- Usage events: for as long as your account exists, and deleted with it, including the events this phone sent before you signed in. Events from a phone that never signed in carry no account.
- Feedback and its screenshots: until we have dealt with it, and in any case deleted with your account.
- Purchase records: as long as needed for support, and up to six years for UK tax and accounting duties.
- Cancellation answers: up to two years, then deleted, and deleted with your account.
- Reports and blocks: deleted with your account, and in any case after two years.
- Crash reports: up to 90 days.
- Early access list: until you ask to be removed, and in any case deleted within 12 months of the app’s launch.
- Website request logs: kept by Cloudflare for a short period for security.
Your rights
You can ask to see the data we hold about you, correct it, delete it, restrict or object to a use of it, or get a copy in a portable form. Where we rely on consent, you can withdraw it at any time.
- Delete your account: in the app, open Settings and choose Delete account. Your account, save, username, picture, scores, League place, feedback and its screenshots, cancellation answers and usage events are removed straight away. This does not cancel an Apple subscription; do that in your Apple Account settings (the delete screen links to it).
- Object to usage events: email support and we will delete the events linked to your account.
- Everything else: email support@memodateapp.com. You will get an answer within one month.
- Leave the early access list: reply to any of its emails, or email support.
If you are unhappy with how your data is handled, you can complain to the UK Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live in the EU.
Children
Memodate is not directed at children under 13, and we do not knowingly create accounts for them. If you think a child under 13 has an account, email support and it will be deleted.
If players can see each other
Other players can see your username, level, League tier and gems, and your best ranked scores, on the League table and the ranked boards. They cannot see your email, the name you typed, your picture or anything else in your save.
You can tap any name on a board or in the League to report it or block it. Blocking hides that person from your boards, and you from theirs, and you can undo it in Settings. A name reported by several people is hidden while we review it. To reach us about a name, email support@memodateapp.com.
Today no other player can see your picture. A future update may show it to other players. The app tells you before you choose a photo, and you can remove it or choose Memo instead at any time. Reports of an inappropriate picture hide it straight away while they are reviewed.
Security
Data is encrypted in transit and at rest. The database only lets each account read its own rows, apart from the boards and League tables described above, and the keys that can read everything are never in the app or on the website.
Automated decisions
We make no decisions about you by automated means that have legal or similarly significant effects.
Changes to this policy
If this policy changes, the date at the top changes. The current version always lives at memodateapp.com/privacy.
Contact
Ian Magee, sole trader, London, United Kingdom
support@memodateapp.com