Privacy Policy

Memory XYZ is a memory card game from Luis Suárez, who operates under the name Luewell (“Luewell,” “we,” “us”). You can play without an account, and your progress then stays on your device; if you choose to sign in, your progress is saved to your account on our server. This policy explains what limited information Memory XYZ processes and how it is handled.

1. Information we process

You can play Memory XYZ as a guest, without an account. As a guest, your game progress (such as your level, streak, best scores, missions, and achievements), your coins and unlocked themes, the nickname and avatar you choose, and your settings (such as language and theme) are stored only on your device, and we never receive them. Online duels share only a random name and your avatar, as described in section 2.

Signing in is optional: you can sign in with Apple on iPhone and iPad, or with Google on Android. Apple (Sign in with Apple) or Google (Google Sign-In) confirms who you are and gives us an account identifier for you. The app does not request your name or email address; Apple may include a private relay email address only if you choose to share one. We never receive your password.

While you are signed in, your progress (game records and streak, stats, achievements, daily missions, themes unlocked with coins, reward claims, and your nickname and avatar) is kept as a cloud save on Bedrock, our own server at bedrock.luewell.dev, hosted by Luewell, and your coin balance is kept there too, so your progress follows your account across devices.

For each account, the server stores an internal account ID, the account identifier received from Apple or Google, your session tokens, your cloud save, your coin history (coins earned and spent, and why), and the coin pack purchases RevenueCat reports, so the coins can be credited to your account.

2. While you play

Rounds and the practice ranking run on your device, and the other players in the practice ranking are AI players created by the app. Duels are played online against another player through our duel server. When you start a duel, the app sends the server a random name it picked for your device (an animal and a number, never your nickname) and the avatar you chose; the server gives you a random player ID, creates or finds the room, relays your moves (pairs found, moves made, and time) to your rival, and receives both scores to decide the winner. Your rival sees that random name, your avatar, and your progress. The server keeps this only temporarily — a duel session for up to 24 hours and a room for up to 2 hours after its last activity — and keeps no history of your duels. To prevent abuse, it counts requests per IP address in 60-second windows and does not keep the address afterwards; our hosting provider may keep technical access logs for a short time.

Memory XYZ does not ask for access to your location, contacts, camera, microphone, or photos.

3. Purchases

Memory XYZ offers optional in-app purchases: premium card themes, “Unlock all themes,” and coin packs. They are processed by Apple through the App Store; Luewell never receives your payment card or Apple ID. To manage purchases, we use the purchase management service RevenueCat.

RevenueCat acts on our behalf and receives a randomly generated, anonymous app user identifier (or, while you are signed in, your internal account ID), the App Store purchase information needed to deliver what you bought (the product, purchase date, status, and any refund), and your device model, operating system, app version, and diagnostic information about its software. It does not receive your name, processes this information in the United States, and uses it only to operate and validate your purchases.

No sign-in is needed to buy: unlocked themes can be restored on your other devices that use the same Apple ID with “Restore purchases” in Settings → Purchases. As a guest, coins from coin packs are added on the device where you buy them and are not restored; while you are signed in, they are credited to your account.

4. What we don’t do

• We do not track your activity across other apps or websites.
• We do not show ads.
• We do not use analytics, crash reporting, or push notifications.
• There is no chat; online duels show other players only a random name, an avatar, and game progress.
• We do not collect advertising identifiers.
• We do not sell your data to data brokers.

5. Data retention and deletion

As a guest, your progress, coins, and settings live on your device; uninstalling Memory XYZ removes them from that device. Unlocked themes stay with your Apple ID and can be restored at any time. Purchase information is retained while the RevenueCat record linked to your device remains active.

If you sign in, we keep your account and its data for as long as the account exists. Each session expires 90 days after it is created. You can sign out at any time, and you can delete your account from Settings: this deletes your account and everything our server keeps for it — your cloud save, coins, sessions, and linked sign-ins. If you no longer have the app, you can ask us to delete your account by writing to [email protected].

6. Children’s privacy

Memory XYZ is suitable for all ages and can be played without an account; signing in never asks for a name or email address, and we do not knowingly collect other personal information from anyone, including children. Online duels never show your nickname: the rival sees only a random name chosen by the app and an avatar, and duels have no chat. Purchases are made through Apple, where parents can use Family Sharing controls such as Ask to Buy.

7. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective” date above. Significant changes will be reflected on this page.

8. Contact us

If you have any questions about this Privacy Policy or how Memory XYZ handles your data, please contact us at [email protected].