Privacy Policy

Controller and contact

The data controller for MassMem is ULTRA SAM SYSTEMS SRL, located at Bld. Alex. Obregia 7A, Sector 4, Bucharest, Romania.

For privacy questions, support requests, feedback, or data deletion requests, contact support@massmem.com.

Data we may process

MassMem may process account data such as email address, Firebase UID, authentication state, email verification status, optional display or game name, and account settings.

MassMem may process training data such as game progress, game/session results, points, Gems/energy usage, streaks, daily/weekly/monthly reward state, visitor demo usage, localStorage preferences, and internal app events generated by normal use.

MassMem may process subscription and support data such as subscription status, Stripe customer/subscription identifiers, billing-related support messages, contact messages, and feedback messages you choose to send.

For the private administrator metrics center, MassMem processes account activity dates, subscription validity, masked billing references, captured Stripe payment totals, and short-window server health measurements. Daily activity history is stored as aggregate counts without user identifiers.

If configured and accepted through preferences, MassMem may process optional analytics and technical diagnostics through tools such as GA4 or Sentry. Account signup records only the required confirmation that the beta age threshold is met, its policy version, and the confirmation timestamp; MassMem does not ask for a full birthdate.

Legal bases

MassMem processes data to provide the service, create and protect accounts, save progress, operate free and Pro access, manage subscriptions, send account emails, respond to requests, and keep the app secure.

Depending on the context, the legal basis may be contract performance, legitimate interests such as security and product reliability, consent for optional analytics, diagnostics, or marketing, or legal obligations related to billing, tax, consumer, security, or dispute handling.

Processors and infrastructure

MassMem currently relies on Firebase / Google Cloud for authentication, Firestore data storage, and related infrastructure; Stripe for checkout, subscription billing, invoices, and customer portal; Render for hosting; and Resend for transactional email when configured.

GA4 is used only if REACT_APP_GA_MEASUREMENT_ID is configured and the user accepts Analytics/diagnostics preferences. Sentry diagnostics are used only if REACT_APP_SENTRY_DSN is configured and the user accepts Analytics/diagnostics preferences.

Local storage and consent

MassMem uses localStorage for strictly necessary app behavior including language preference, visitor demo usage, app state, and the compliance preference choice.

The server-side daily active-user counter does not set an analytics cookie or create a client analytics identifier. It records one aggregate count per authenticated user per calendar day for service operation and business reporting.

Analytics/diagnostics and marketing categories are optional. Marketing or social tracking scripts are not loaded by the current MassMem implementation.

Retention and deletion

Account and training data is retained while the account is active or as needed for operational, legal, billing, security, or dispute-resolution purposes.

Daily operational activity totals are retained for up to 400 days. Short-window server request measurements stay in memory and reset when the service restarts. Stripe billing records follow the legal and contractual retention periods applicable to payments and accounting.

Users can request deletion through the Data Deletion page, through in-app profile controls where available, or by contacting support. Some limited records may be retained where required by law, billing systems, security, or dispute handling.

International transfers

Service providers may process data in countries other than your own. Transfer safeguards depend on the provider terms, hosting location, and the legal entity that operates MassMem.

Your GDPR rights

Where GDPR or similar laws apply, you may have rights to access, correct, delete, restrict, object to processing, request portability, and withdraw consent for optional processing.

To exercise these rights, contact support@massmem.com from the email address associated with the account when possible.

Children, minors, and non-clinical use

During the MassMem beta, people under 16 cannot independently create an account. They may use the games available without an account only with a parent or guardian supervising them.

The age-threshold checkbox is a self-declaration of beta account eligibility. It is not identity or age verification, does not create a child account, and is not a parental-consent mechanism.

If MassMem learns that a person under 16 independently created an account contrary to this beta rule, MassMem may restrict the account while reviewing the situation and will delete or otherwise handle the associated personal data as required by applicable law. Limited records may be retained only where required for legal, billing, security, fraud-prevention, or dispute-handling purposes.

MassMem provides memory games, attention games, logic exercises, and cognitive practice routines. It is not a medical device, diagnostic tool, treatment, clinical assessment, or substitute for professional medical advice.