Privacy Policy

Memorion is developed and operated by Zevora, Inc., a company incorporated in the United States. For privacy-related questions or requests, contact us at: [email protected]

We collect only what is necessary to operate the app:

We do not collect IP addresses, geolocation, device identifiers, biometric data, or behavioral tracking data of any kind.

• Create and authenticate your account
• Save and display your progress and scores
• Enforce the free-tier limit of 3 plays per game
• Manage your Premium subscription status
• Apply your language and in-app preferences

We do not use your data for advertising, we do not sell data to third parties, and we do not build behavioral profiles for commercial purposes beyond operating the app itself.

When you log in, we create a secure cookie called auth-token. It is:

• HTTP-only — inaccessible to JavaScript, protecting against XSS attacks
• Secure — sent only over HTTPS in production
• Expires in 30 days — or immediately on logout

We do not use advertising cookies, tracking pixels, or any third-party analytics SDK.

Premium subscriptions are processed by RevenueCat in partnership with the Apple App Store (iOS) or Google Play (Android). Zevora does not store or access credit card numbers or any payment instrument details.

We receive from RevenueCat only a confirmation of subscription status (active, expired, cancelled) and an anonymized customer ID linked to your profile. To cancel, visit your device's app store subscription settings.

Your data is shared only with the infrastructure providers strictly needed to run the app:

• Neon (database) — secure storage of account and progress data (PostgreSQL, serverless)
• RevenueCat — subscription management (native apps only)

No data is shared with advertisers, behavioral analytics networks, or any other third parties.

Regardless of where you live, you may:

• Access — request a copy of all data we hold about you
• Correct — update your name or email from your profile settings
• Delete progress — erase all game history from the Settings screen in the app
• Delete account — request complete account removal by emailing [email protected]
• Portability — receive your data in a machine-readable format
• Withdraw consent — stop using the app and request deletion at any time

We retain your account and progress data for as long as your account is active. If you request account deletion, all personal data is permanently removed within 30 days. Aggregated, anonymous usage statistics (with no link to your identity) may be retained for product improvement purposes.

We apply the following technical measures to protect your data:

• Passwords stored as bcrypt hashes (cost factor 10) — never in plain text
• All traffic encrypted via HTTPS/TLS
• JWT tokens with 30-day expiry stored in HTTP-only, secure cookies
• Database access restricted by credential isolation

In the event of a data breach that affects your personal data, we will notify affected users by email within the timeframes required by applicable law (72 hours for GDPR, as promptly as feasible for others).

Memorion is intended for users 13 years of age or older. We do not knowingly collect data from children under 13. If you believe a child has created an account without parental consent, please contact us at [email protected] and we will promptly delete the account.

Zevora is based in the United States. If you access Memorion from the EU, EEA, UK, or other regions with data protection laws, your data is transferred to and processed in the United States. We rely on standard contractual clauses and other lawful transfer mechanisms to protect data transferred internationally.

We may update this policy periodically. For material changes, we will notify you by email or via an in-app notice. The "Last updated" date at the top of this page always reflects the current version. Continued use of the app after changes constitutes acceptance of the updated policy.