Privacy Policy

Effective date: October 17, 2026

In short: as the developer of Memmoth, we do not collect any personal data from you. There is no account, no server of ours, no analytics and no ads. Everything you write stays on your iPhone. The one exception is purchase validation, handled by Apple and by RevenueCat with an anonymous ID.

Who we are

Memmoth (“the app”) is made and published by independent developer Baran Borak, the data controller under the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK). Contact: support@baranborak.com.

Data that stays on your iPhone

The people you add, your notes, conversation logs, detail cards (for example a child's name or an allergy), gift ideas, important dates, photos and settings are stored only on your device. So that widgets and the Shortcuts action can read them, they are kept in the app's App Group container (group.com.baranborak.Memmoth), which is also on your device.

Permissions and iPhone features

Contacts (optional)

We use Apple's contact picker, so no Contacts permission is requested and the app cannot see your address book. Only the people you pick are copied into Memmoth once: name, birthday and a small photo. There is no ongoing sync.

Calendar (optional, Premium)

If you turn on “Before you meet”, Memmoth asks for calendar access. Upcoming events are read only, matched to your people on the device, and used to show a prep card and schedule a local notification. Events are not stored, changed, created or sent anywhere. You can revoke access anytime in Settings > Privacy & Security > Calendars.

Photos

You add photos with Apple's photo picker, so the app never has access to your whole library. A resized copy of each chosen photo is stored only on your device, with location (GPS) and other metadata removed.

Notifications

Reminders are local notifications scheduled on your device. We have no push server. You can hide details in notifications in Settings.

Face ID / Touch ID

The optional app lock uses iOS authentication. Your face or fingerprint data stays in your iPhone's Secure Enclave; Memmoth only learns whether authentication succeeded.

Siri, Shortcuts and widgets

The “Log a conversation” action and the widgets read the same on-device data; nothing is sent to us.

Purchases

Payments are taken and processed by Apple; we never see your card details. To manage Premium status we use RevenueCat, Inc. (USA). RevenueCat processes an anonymous app user ID created by the app and the purchase receipt and history received from Apple (product, date, price, country and currency). Technical connection data such as your IP address may be processed under RevenueCat's own policy. Purposes: unlocking Premium, validating purchases, preventing fraud and giving us aggregated purchase statistics (for example, how many trials become subscriptions). This data is not linked to your name, email or any other identity and is not used for advertising or tracking. Details: RevenueCat Privacy Policy. Because RevenueCat processes purchase records in the USA, this limited data is transferred outside Türkiye and the EU; if you never buy anything, no purchase data reaches RevenueCat.

This is why the App Store label says “Data Not Linked to You: Purchases”. No other data type is collected.

Ads and tracking

Memmoth shows no ads, contains no analytics or crash-reporting SDK, and does not track you across other apps or websites. Apple's own optional, anonymous crash reports follow Apple's settings.

Children

Memmoth is rated 4+ but is not directed at children. We do not knowingly collect personal data from anyone; if you believe we have processed data of a child under 13, please contact us.

Deleting your data

Use Settings > Delete all data in the app, or delete the app, to remove everything on your device. RevenueCat records are anonymous, so we cannot identify you; your App Store purchase history stays with your Apple Account.

This website

memmoth.baranborak.com sets no cookies, runs no analytics or ad measurement and loads no third-party scripts. If Google Analytics or Google Ads measurement is added in the future, the site will ask for your consent first (Google Consent Mode v2): nothing is measured until you choose “Accept”, and you can change your choice with “Cookie settings” in the footer. If you email us, we use your address only to reply. Our hosting provider may keep standard server logs (IP, time, requested page) for a short time for security.

Your rights

Under the GDPR and Article 11 of KVKK you can ask what data we process about you, ask us to correct or delete it, and object to processing. Write to support@baranborak.com; we reply within 30 days. You may also complain to your local data protection authority or Türkiye's Personal Data Protection Authority.

Changes

If this policy changes, we will publish the new version on this page with a new effective date, and mention important changes in the app's release notes.