Privacy Policy

This Privacy Policy describes how Nap Coding ("we", "us", "our") collects, uses, and protects your personal data when you use Meowdex. We are committed to transparency and to your rights under applicable data protection law, including the EU General Data Protection Regulation (GDPR) and the UK GDPR.

Data controller: Nap Coding · [email protected]

1. Data we collect

1.1 Account data

Meowdex supports Sign in with Apple and Sign in with Google.

• When you sign in with Apple, Apple may share your name and email address with us (depending on your Apple privacy settings)
• When you sign in with Google, Google shares your name and email address with us
• We store only what is necessary to operate your account

1.2 Game data

• Cat cutouts — the isolated image of the cat after on-device background removal. The original photo is discarded on your device and never sent to our servers.
• Fuzzed GPS coordinates — your location with a randomised offset applied server-side before storage. Exact coordinates are never retained in our database.
• Catch metadata — rarity tier, detected breed, coat pattern, timestamp.
• Username and profile data — display name, avatar configuration, XP, level.
• Push notification token — only if you grant notification permission, used solely to deliver in-app alerts.

1.3 Analytics and marketing data

• Session and feature usage events (e.g. screens visited, catches made)
• Device type, operating system version, app version
• Crash reports and performance diagnostics
• Marketing attribution data (how you discovered the app)

1.4 Purchase data

In-app purchases are processed entirely by Apple or Google. We receive confirmation of purchase status (active/expired subscription, treat pack count) from RevenueCat, our subscription management provider. We do not receive or store payment card details.

2. Legal basis for processing (GDPR)

• Contract performance — processing necessary to provide the game features you use (account, catches, map, leaderboards).
• Legitimate interests — analytics to improve the app, security and fraud prevention.
• Consent — marketing tracking and push notifications, both of which you can withdraw at any time.
• Legal obligation — where we are required to retain data by law.

3. How we use your data

• To operate and deliver Meowdex features
• To manage your subscription and treat balances via RevenueCat
• To display your catches on the map and in leaderboards
• To send push notifications you have opted into
• To analyse usage and improve the app
• To detect and prevent abuse, cheating, or harassment
• To respond to support requests

We do not sell your personal data to third parties.

4. Data retention

• Account and game data — retained while your account is active. Deleted within 30 days of account deletion.
• Push tokens — deleted when you log out or revoke notification permission.
• Analytics data — subject to each third-party provider's retention policy (typically 12–26 months).
• Backup data — may persist in encrypted backups for up to 90 days after deletion.

5. Third-party processors

We share data with the following categories of processor:

• Supabase — database, authentication, and storage infrastructure.
• Cloudflare — edge network, R2 object storage for cat cutout images.
• RevenueCat — subscription and in-app purchase management.
• Apple / Google — app distribution, payment processing, and authentication.
• Analytics and marketing partners — usage analytics, crash reporting, and marketing attribution. Specific providers will be listed here as they are confirmed.
• Expo (Expo Push) — push notification delivery.

All processors are required by contract to protect your data in accordance with applicable law. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

6. Your rights (GDPR / UK GDPR)

If you are in the EEA, UK, or a jurisdiction with similar rights, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your account and associated data ("right to be forgotten")
• Restriction — ask us to pause processing in certain circumstances
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — for marketing tracking and notifications at any time via device settings

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Children's privacy

Meowdex is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with data, please contact us at [email protected] and we will delete it promptly.

8. Camera and location permissions

• Camera — used only to photograph cats. The original photo is processed on-device; only the isolated cat cutout is uploaded. We never access your camera roll.
• Location — used at the moment of a catch to log an approximate position on the map. Exact coordinates are fuzzed server-side before storage and are never retained.
• Notifications — optional. Used for Cat of the Day alerts and daily challenge reminders.

All permissions can be revoked at any time in your device settings.

9. Security

We use industry-standard measures to protect your data: TLS encryption in transit and access controls limiting who can view personal data. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take reasonable precautions.

10. Changes to this policy

We may update this Privacy Policy as the app evolves. The effective date at the top will always reflect the latest revision. We will notify you of material changes in-app where possible.

11. Contact

Privacy questions, data requests, or complaints: [email protected]

Data controller: Nap Coding