Privacy Policy

Last updated: September 23, 2026

This policy explains what data the Memory: Remember Names & Faces app (“Memory”, “the app”) handles, why, and what choices you have. It also covers this website.

The short version

There is no sign-up. You never give us your name, email or a password.
Your lessons, progress and the people you save in People I Met are stored on your device, not on our servers.
People I Met is text only. The app never asks for photos, never reads your contacts and never uses face recognition.
Our server keeps only a random anonymous ID, and a link between that ID and your purchases.
Ads are optional. Google’s ad services only get involved when you choose to watch a rewarded video.
You can delete your data inside the app at any time: Me › Settings › Delete my data.

1. Who is responsible

Memory is published by Ekin Uzunyayla, an individual developer based in Türkiye, who is the data controller for the data described here (“we”, “us”).

Contact: ekinnuzunyayla@gmail.com

2. Data that stays on your device

The following data is created and stored only in the app’s storage on your phone or tablet. We cannot see it.

Lesson progress, review schedule, streak, XP, achievements, hearts and gems.
People I Met entries: a name, where you met, a facial feature with a short description, and a hook you wrote. No photos.
Your settings, such as sound, reminders and language.

Because this data lives on your device, deleting the app deletes it. It may be included in your device’s own backup (Android backup or an iPhone backup), which is governed by Google’s or Apple’s terms. That backup is also how progress moves to a new device; we do not sync it.

Reminders are local notifications scheduled on your device. We do not use a push-notification service.

3. Data we process on our server

When you first open the app, it quietly creates an anonymous account so purchases and deletion can work without a sign-up. For this we store:

A random anonymous user ID and the time it was created or last used.
The link between that ID and your anonymous RevenueCat customer ID, used to connect purchases to you.

The first 8 characters of the anonymous ID are shown in Settings as your Support ID, so you can tell us which data is yours without sharing anything else.

The app keeps the key to this anonymous account in your device’s secure storage. On Android, a copy of that key may also be saved with Google’s Block Store, so a reinstalled app can find your purchases again. It contains no progress or personal content.

This data is hosted by Supabase, our database provider. Anonymous IDs still count as personal data under laws such as the GDPR and KVKK, and we treat them that way.

4. Purchases

Subscriptions and in-app purchases are processed by Apple (App Store) or Google (Google Play). We never see your card details. We use RevenueCat to check what you have bought. RevenueCat receives your anonymous RevenueCat ID, your purchase and subscription history from the store, and basic device and app information (such as platform, app version, country and language).

5. Rewarded ads

Memory shows no banners and no pop-up ads. If you run out of hearts, you can choose to watch a short video ad to get one back. Pro users never see ads.

Ads are provided by Google AdMob. The ad software starts only the first time you tap “Watch an ad”, not before. At that point:

If you are in a region that requires it (for example the EEA, the UK, Switzerland or certain US states), Google’s consent form asks for your choices first.
On iPhone and iPad, iOS asks whether the app may track you. If you say no, you still get your heart and you see non-personalized ads.
Google may collect your device’s advertising ID (when allowed), IP address, approximate location derived from it, device and app information, and how you interacted with the ad. Google uses this to serve, measure and, if you allowed it, personalize ads. See how Google uses information from apps that use its services.

You can change your choices at any time in the app: Me › Settings › Ad privacy choices. On iOS you can also turn tracking off in Settings › Privacy & Security › Tracking.

6. Usage analytics and crash reports

To understand which lessons work and to fix crashes, Memory can send pseudonymous usage events to PostHog (hosted in the EU) and crash reports to Sentry. These are switched off in the current version of the app. If we turn them on, they will receive:

Usage events: the anonymous user ID; events such as “lesson completed” or “review done”; app version, platform, language and region settings; whether you have Pro; days since install; and accessibility settings such as text size or a screen reader being on, so we can make the app work better with them.
Crash reports: technical details of the error, device model, OS version and app version. No screenshots or screen recordings.

Neither ever receives the names, notes or hooks you type, and we will update this policy before turning them on.

7. What we never collect

Your name, email address, phone number or password. The app never asks for them.
Photos, camera, microphone or contacts access.
Face geometry or any biometric data. There is no face recognition.
Real PINs or passwords. Number lessons only use practice codes.
Precise location.

8. Why we use data (legal bases)

Purpose	Data	Legal basis
Run the app, keep your purchases, let you delete your data	Anonymous ID, purchase link, purchase history	Performing our contract with you
Show a rewarded ad you asked for	Ad data described in section 5	Performing the contract; your consent for personalized ads where the law requires it
Fix crashes and improve lessons (if turned on)	Crash reports, usage events	Our legitimate interest in a working, useful app
Meet legal and tax obligations	Purchase records held by the stores and RevenueCat	Legal obligation

We do not sell your personal data for money. We share it only with the service providers named above, each for the purpose described:

Supabase (server database and anonymous accounts)
RevenueCat (purchase checks)
Apple and Google (app stores and payments)
Google AdMob (rewarded ads, only when you choose to watch one)
PostHog and Sentry (analytics and crash reports, if turned on)

We may also disclose data if the law requires it.

Under some US state laws, letting an ad network use data for personalized ads can count as “selling” or “sharing”. You can opt out of this in Ad privacy choices (section 5). We also honour the Global Privacy Control signal where it reaches us.

10. International transfers

Our service providers may process data in countries other than yours, including the United States and the European Union. Where the law requires it, these transfers rely on appropriate safeguards such as standard contractual clauses or an adequacy decision, or, under Turkish law, on your explicit consent where no other basis applies.

11. How long we keep data

On your device: until you delete the app or use Delete my data.
Anonymous account and purchase link: until you delete your data. We may also delete accounts that have been inactive for a long time, unless they hold a purchase you would lose.
Backups on our providers’ systems: deleted data can stay in encrypted backups for up to 30 days before it is overwritten.
Purchase records: the stores and RevenueCat keep transaction records as required by tax and accounting law.

12. Deleting your data

In the app, go to Me › Settings › Delete my data. This deletes your anonymous account and server data, your RevenueCat customer record and everything stored in the app on that device. It does not cancel a subscription; cancel that in your App Store or Google Play settings first.

If you no longer have the app, see how to request deletion by email.

13. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict its use, to withdraw consent at any time, and to complain to a data protection authority.

EEA, UK and Switzerland (GDPR): you can complain to your local supervisory authority.
Türkiye (KVKK, Law No. 6698): you have the rights listed in Article 11, including learning whether your data is processed, asking for correction or deletion, and learning which third parties receive it. You can apply to us by email and, if you are not satisfied, to the Personal Data Protection Authority (KVKK).
California and other US states: you have the right to know, delete and correct your data, to opt out of the sale or sharing of personal information, and not to be discriminated against for using these rights.

Because we don’t know who you are, include your Support ID (Me › Settings) when you write to us. We reply within 30 days.

14. Children

Memory is made for adults and is not directed at children under 13. We do not knowingly collect personal data from children under 13 (or the higher age of digital consent in your country). If you believe a child has used the app, contact us and we will delete the related data.

15. Security

Data sent between the app and our providers is encrypted in transit. The anonymous session is kept in your device’s secure storage (iOS Keychain or Android Keystore). No method is perfectly secure, but we keep what we hold to the minimum.

16. This website

This website is hosted on GitHub Pages. It uses no cookies, no analytics and no third-party fonts or scripts. GitHub may log technical data such as IP addresses for security; see GitHub’s privacy statement.

17. Changes

If we change this policy, we will update the date at the top. For significant changes we will also tell you in the app.

18. Contact

Ekin Uzunyayla · ekinnuzunyayla@gmail.com