TL;DR
We collect the minimum needed to make Me VS Me work for you. We never sell your data, run third-party ad pixels, or use your content to train any model. You can export everything and delete your account from inside the app with one click. Hosting is in the EU.
Your habits, journal and mood entries belong to you. We're a tool that holds them, not a business that monetizes them.
Who we are
Me VS Me is operated by Me VS Me B.V. ("we", "us"), a Dutch company. Our contact details and registration number are at the bottom of this page.
What we collect
Account data
- Email address & password hash (we use bcrypt; we never see your plaintext password).
- Optional display name & avatar.
- Locale & theme preference, so the app loads the way you left it.
Content you create
- Habits, tasks, focus sessions, journal entries, mood logs, agenda events.
- Anything you type into a note, label, or reflection.
Technical data
- Approximate location derived from IP (country-level only) for analytics and regional compliance.
- Device type, OS version, app version, crash diagnostics (no identifiable content).
- Limited request logs (timestamp, route, status) — kept up to 30 days for abuse prevention.
Billing data
Handled by our payment processors (Stripe on web, RevenueCat / Apple / Google in apps). We see the last four digits of your card and your billing country; we never store full card numbers.
What we never collect
- Precise GPS coordinates.
- Contacts, calendars, photos, microphone or camera input.
- Browsing history outside Me VS Me.
- Third-party advertising or marketing identifiers.
How we use your data
We process the data above only to:
- Run the product you signed up for (sync streaks, deliver notifications, render your heatmap).
- Handle billing and prevent fraud.
- Improve reliability via aggregated, anonymized usage stats and crash diagnostics.
- Reply to your emails when you contact support.
That's the whole list. We do not profile you, sell to data brokers, or build an advertising graph.
Who we share with
We use a small set of trusted sub-processors who help us run the service. Each one is bound by a data-processing agreement and the EU Standard Contractual Clauses where applicable:
- Supabase — primary database & auth (EU region, Frankfurt).
- Cloudflare — CDN, edge protection, DNS.
- Stripe / RevenueCat — payments.
- Postmark — transactional email (password resets, receipts).
- Sentry — crash & error monitoring, with PII scrubbing on.
We don't share your data with anyone else. We will only disclose data if we are required to by a valid legal request — and we'll tell you about it unless legally prohibited.
Where we store it
Primary storage is in the EU (Frankfurt, Germany). Backups are encrypted and stored in the same region. The CDN may cache static assets globally — these never contain your private data.
How long we keep it
- Active accounts: for as long as your account exists.
- Deleted accounts: wiped from production within 24 hours, removed from encrypted backups within 30 days.
- Request logs & crash data: 30 days, then deleted.
- Billing records: 7 years (required by Dutch tax law).
Your rights
Under the GDPR (and similar laws), you have the right to:
- Access the data we hold about you (one-click export from Settings).
- Correct anything that's inaccurate.
- Delete your account and your data (one click in Settings).
- Port your data — JSON & CSV exports anytime.
- Object to processing or restrict it for legitimate reasons.
- Complain to your local data-protection authority. In the Netherlands that's the Autoriteit Persoonsgegevens.
Cookies & tracking
We don't use third-party tracking cookies. The cookies we set are:
sb-access-token,sb-refresh-token— keep you logged in. Strictly necessary.theme,accent,locale— remember your UI preference. Strictly necessary.
That's the whole list. No banner needed under EU rules because none of these require consent.
Children
Me VS Me is for ages 13 and up. We do not knowingly collect data from anyone under 13. If you believe a child has signed up, email us and we'll remove the account.
Changes to this policy
We may update this page when we add features or change processors. Material changes (new processors, new data types, retention changes) trigger an email to your registered address at least 14 days before they take effect. Older versions are kept in our public policy changelog.
Contact
Me VS Me B.V., Amsterdam, the Netherlands · KvK 00000000 (placeholder).
- General: [email protected]
- Privacy / data requests: [email protected]
- Security disclosures: [email protected]
By using Me VS Me, you agree to this Privacy policy and our Terms of service.