Privacy Policy

This policy explains what MnemoTrail does with your information. It is written to be read, not to be survived: if a section is missing below, it is because that kind of data is not involved at all.

Who we are

MnemoTrail is developed and published by BEK Service Ltd, a private limited company registered in England and Wales. BEK Service Ltd is responsible for the app and is the controller of any personal data described in this policy.

What we collect

Your local profiles, practice history, preferences and personal recall cards stay on your device during ordinary play. An optional Firebase email/password account lets you explicitly upload one backup containing those profiles, settings, results, workouts and card text. Firebase Authentication processes your email, protected password credentials and account identifier; Cloud Firestore stores the backup under that identifier in a European database. We do not automatically sync your journal. Never put information in a card that you do not want included in a backup you choose to upload. If you contact support, we receive your email and the information you include.

Game Center and Google Play Games

If you connect Game Center or Google Play Games, the platform processes its player identity, eligible scores and achievement progress. You explicitly choose which local profile submits. Friends and leaderboard visibility follow the platform's settings. We do not upload your journal or local profile names to these networks, and Apple and Google identities are separate.

Analytics and crash reports

MnemoTrail includes optional Firebase Crashlytics diagnostics. Collection begins only when Share crash diagnostics is enabled in Settings; it is off by default. Reports may contain crash stacks, app and device versions and diagnostic identifiers. The app does not include Firebase Analytics and does not attach your journal, local profile name or email to crash reports. Google operates Firebase under its privacy terms.

Advertising

MnemoTrail shows advertisements supplied by Google AdMob. To serve and measure those ads, Google may process device information such as a device advertising identifier, general location inferred from an IP address, and basic interaction data. This processing is carried out by Google, not by us, under Google's own privacy policy.

Before ads initialise, Google's consent flow gathers applicable European and US privacy choices. On iOS, optional App Tracking Transparency permission controls access to the advertising identifier. You may decline and continue playing. Advertising providers may process device identifiers when permitted, IP address, approximate region inferred from the network, ad interactions and diagnostic information for ad delivery, measurement, fraud prevention and consent handling. Use Ad privacy choices in Settings to revisit available options. Plus and the ad-removal purchase suppress ads.

Purchases

Apple or Google handles payment details; BEK does not receive your card number. The app processes product identifiers, transaction or purchase identifiers and verified entitlement/expiry information to unlock purchases and restore them. Android purchase tokens are sent over HTTPS to BEK's dedicated verification service and checked with Google Play. The service does not log purchase tokens or provider response bodies. Local data backups cannot grant paid entitlements.

Deleting your account

In MnemoTrail, open Settings, sign in to your optional cloud account, enter its password and choose Delete account, then confirm. This deletes your current Firestore backup and Firebase Authentication identity; local profiles remain until you delete them or clear local data in Settings. To request account deletion outside the app, email [email protected] from the registered email address with the subject MnemoTrail account deletion; we may verify ownership before acting. Uploaded backup data remains until you replace it or delete the cloud account. Store purchase records and platform leaderboard data are managed separately by Apple or Google; contact the relevant platform about its records. Technical provider backups and security records follow the provider's applicable retention controls. Deleting an account does not cancel a store subscription; cancel it in your store's subscription settings.

Keeping your data safe

Network requests use HTTPS. Firebase controls storage encryption and access rules limit each backup to its authenticated owner, with verified email required for uploads. BEK and Google process backups to provide the service. On-device profiles use the app's operating-system sandbox; exports and operating-system device backups are under your control. Signing and server credentials are never distributed in the app. No system can guarantee absolute security.

Your rights

Depending on where you live, you may request access, correction, export or deletion of personal data, object to processing, withdraw optional consent or complain to a data-protection authority. Use the app's export and deletion controls or contact [email protected]. Ordinary gameplay requires no account. Cloud backup is optional and can be stopped by signing out. The app is intended for people aged 13 and over, subject to the local age required to consent to optional online services.

Changes to this policy

If this policy changes, the updated version appears on this page with a new effective date.

Contact

Questions about this policy or your data: [email protected]