Privacy policy

1. Who we are

Memet is made by Digispark S.r.l., Italy, the data controller. You can reach us at [email protected].

2. What stays on your phone

Your answers to the question of the day, the votes and compliments your friends give you, the friends you pick in compliment polls and your chats with your Memet stay in an encrypted database on your phone. We never receive them in readable form, with two exceptions: the anonymous answer counts described under "What reaches our servers" and what is described under "The Memet Plus AI features". Your test answers and scores stay there too, unless you share them as described under "Test answers you share". App versions before 1.1 also kept a diary there, with the moods and tags of each day.

3. Test answers you share

You can send us the answers of the tests you finish: each answer, the result and the day you finished. We use them to compare your results with real people instead of an estimate, to see which questions work and to improve the tests. Current versions of the app leave out the feeling you pick in a "how does this make you feel" question, which stays on your phone. Earlier versions sent it with the other answers.

In the European Economic Area, the United Kingdom, Switzerland, Brazil, South Korea, Japan and Canada we ask first and send nothing without your yes. Elsewhere sharing is on from the start and you can switch it off. After a no, nothing is sent. Wherever you are, you can change your answer any time in Settings > Privacy and data.

This one choice covers every test, including the ones about more personal things such as attraction, and it works the same way at every age.

The answers reach our server in Germany over an encrypted connection and are stored encrypted with keys kept apart from the database, with a separate key for the more personal tests. They are linked to your account id, your country and your age band, never to your name or email address, and they never go to analytics or advertising services. We keep them as long as your account exists. Switching sharing off stops new answers from being sent and keeps the ones already sent. To have those deleted, write to [email protected] or delete your account, which deletes everything.

4. What reaches our servers

A random account id created on first use, so your purchases, backup and links have an owner. To use Memet you then create an account, with Apple (on iPhone), with Google, or with an email address and a password.

With Apple, we keep the identifier Apple gives us for Memet. We ask Apple for no name and no email, and never see your Apple ID password. With Google, we keep the identifier of your Google account. Google's sign-in also carries your name, email address and profile photo: our server keeps none of them, and we never see your Google password.

With email, we keep your email address and your password, the password only as a salted hash. We use the address only for the 6-digit codes that confirm it and reset your password, sent through Resend, and never for newsletters or marketing.

Your encrypted backup, on for every account. It is sealed on your phone with a key kept in your iCloud Keychain and in a recovery code only you hold. We cannot open it. On Android, Google's Block Store keeps the key in place of iCloud Keychain. It copies the key to your Google account backup only when it can be encrypted end to end, which needs a screen lock on your phone. Without one, the key stays on your phone, and a new phone needs your recovery code.

Compare and vote links you create, and the answers friends send to them. They are sealed with a key that lives only in the link itself, after the # sign, which never reaches our servers. Links expire after 90 days.

Anonymous answer counts for the question of the day: the question, the answer and, one at a time, your four-letter type, age band or gender, with no account id. We show them only once enough people have answered.

Friends you compared with: your phones join a pair of two random account ids, and each keeps its latest profile there sealed with a key only the two phones know. For streaks, your phone tells us on which days you used the app, nothing more.

Compliments: friends send them to an inbox that belongs to your account, sealed with a key only your friends hold, and without any account id of their own. We know you received a compliment, never who sent it or for which question, and nobody can pay to find out.

Whether Memet Plus is active, as reported by our payment provider, so we can run the features that need the server.

5. The Memet Plus AI features

With Memet Plus, your morning reading is written by an AI model. Once a day the app sends our server your personality bands, your four-letter type and the strongest result of each test you took, never the attraction test. App versions before 1.1 also sent, for people who said they are 18 or older, the moods and tags of the last seven days of the diary.

When you talk to your Memet, each message you send goes to our server together with the recent messages of the chat, the topic you picked and the same profile data. App versions before 1.1 also sent the moods of the diary, only for people who said they are 18 or older. A message that may mean you are in danger is never sent: the app shows local helplines instead.

Our server passes these requests to OpenRouter, which routes them to the model. The models are Anthropic's Claude, run on Amazon Web Services (Amazon Bedrock), and, when Claude is not available, OpenAI models run on Microsoft Azure or the GLM model run by Together AI or Fireworks AI. Every request goes only to providers that keep nothing after answering (zero data retention) and never use it to train models, and it carries no account id. Our server keeps none of the content either: only the number of requests, their length and their cost, to cap spending. Readings and chats are stored only on your phone.

6. Analytics and crash reports

In the European Economic Area, the United Kingdom, Switzerland, Brazil, South Korea, Japan and Canada only if you say yes, and elsewhere unless you switch it off, Memet sends usage events to PostHog in the European Union: the screens you open, how long you stay and how far you scroll, taps on buttons, tests started and finished and how long each question took (never the answer), readings opened, shares and, on iPhone, the app you shared to, notifications delivered and opened, the offers shown and purchases. With them go your age band (13 to 15, 16 to 17, adult), language, country and time zone from the phone settings, gender, what you do (school, university or work), type, archetype, days with your Memet and whether you have Plus. PostHog also derives an approximate location (country and city) from the internet address. Moods, answers, tags, chats, who you pick in polls and the attraction result are never sent. We use all this to understand what works and to test different versions of the app. You can change your answer any time in Settings > Privacy and data.

While usage data is on, Memet also takes screen recordings and sends them to PostHog: a series of screenshots of the app with every text and image covered, your scores, charts, answers, chats and email address hidden, and where your finger touched. Recording stops while you answer a test or the question of the day, chat with the coach, type your details, or look at comparisons and what friends said. Without that yes nothing is recorded, even if usage events are on. Recordings carry your random account id, like the events, and can be stopped for everyone from our side.

Crash reports go to Sentry in the European Union, without personal data, so we can fix what breaks. Errors in the app also go to PostHog, under the same answer as usage events, with the error message, where in the code it happened and the screen.

7. Purchases

Payments are handled by Apple on iPhone and by Google Play on Android. RevenueCat, our subscription provider, receives your random account id and your purchase history to tell the app what you unlocked. We never see your card details. When you delete your account, RevenueCat deletes its record of you too.

8. Age

Memet is for people aged 13 and over. We ask for your birth date so your age stays right as the years go by. It stays on your phone and in your encrypted backup: our server and our analytics only ever get your age band (13 to 15, 16 to 17, adult) and whether you are under 18. If you are under 13, the app stops and keeps no date. Under 18 there are no reminders at night.

9. Where data is processed

Our servers run in the European Union (Hetzner, Germany). PostHog and Sentry process data in the EU. Resend sends the sign-in codes from the United States, so your email address and the code reach it. RevenueCat, Apple and Google may process purchase data, and OpenRouter and the AI providers above the morning reading, letter and coach requests, in the United States under the European Commission’s adequacy decision or standard contractual clauses.

10. How long we keep it

Account data stays until you delete your account. Links and their answers expire after 90 days, compliments are deleted 30 days after they arrive, and the days you were active are kept for about a year for streaks. Analytics events are kept for up to 7 years for product decisions. Screen recordings are kept for 30 days. If you delete your account, PostHog removes your profile at once and your events and session recordings within a few weeks.

11. Your rights

You can access, correct, export or delete your data, object to processing and withdraw consent at any time. Deleting your account in the app (Profile, Settings, Account, Delete account) removes everything on your phone, your account on our servers and what PostHog and RevenueCat hold about you. You can also write to [email protected] or complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali).

12. Changes

If this policy changes in a way that matters, we will tell you in the app before it applies.