Privacy Policy

Effective date: May 27, 2026 Last updated: May 28, 2026

Overview

This Privacy Policy describes how Samwise & Co (“we,” “us,” or “our”) collects, uses, and shares information when you use the Memeboard mobile application, including the Memeboard keyboard (the “App”). It applies to all users of the App regardless of location.

By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

Contact for privacy questions: samwisestudios01@gmail.com

1. Who We Are

The data controller for the Memeboard App is:

Samwise & Co Dubai, United Arab Emirates Email: samwisestudios01@gmail.com

We operate Memeboard under the laws of the United Arab Emirates, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and respect privacy rights granted by laws of other jurisdictions including the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) for users in those regions.

2. Information We Collect

2.1 Information you provide directly

Account information when you sign in with Google: your email address, display name, profile photo URL, and Google account ID.

2.2 Information collected automatically when you use the App

Push notification device token: a per-device identifier from Firebase Cloud Messaging, used to deliver notifications.
Usage data: search queries you enter in the App, memes you favorite, memes you share, screens you visit, and aggregated interaction events sent to our analytics endpoints for product improvement.
Technical data: IP address (collected during HTTP requests by service providers), device operating system, and timestamps of requests.

2.3 Information collected through the Memeboard Keyboard

Search queries entered in the meme search field: only when you actively search for a meme.
GIF search queries sent to Klipy (our GIF content provider) when you browse or search GIFs.
We DO NOT log keystrokes typed in other apps. The Memeboard keyboard only processes text in its own search field.
We DO NOT capture passwords, credit card information, or other sensitive text from other apps.

2.4 What we do NOT collect

Precise location
Contacts, calendar, photos, or other on-device files
Phone numbers or SMS
Microphone, camera, or biometric data
Any AI processing of your input

3. How We Use Your Information

We use your information to:

Operate the App and provide the meme sharing service
Sign you in and maintain your account
Sync your favorites, recent memes, and preferences across devices
Deliver push notifications you have opted into
Improve the App through aggregated analytics
Respond to your support requests
Detect, prevent, and respond to fraud, security incidents, and abuse
Comply with legal obligations

We do not sell your personal data. We do not share your personal data for cross-context behavioral advertising.

We rely on the following legal bases for processing personal data:

Contract: to deliver the App and the services you sign up for
Consent: where you choose to sign in with Google or receive push notifications; you may withdraw consent at any time
Legitimate interest: for product improvement, security, and abuse prevention, balanced against your privacy rights
Legal obligation: where law requires us to process or retain data

5. Third-Party Services

Memeboard uses the following third-party services to operate. Each service has its own privacy policy that governs how it handles data we send to it.

Services we use

Firebase Authentication (Google LLC) — for sign-in. Receives your email, display name, profile photo URL, and Google account ID. Firebase privacy
Firebase Cloud Messaging / FCM (Google LLC) — for push notifications. Receives a per-device FCM token. Firebase privacy
Firebase Crashlytics (Google LLC) — for crash reporting and stability monitoring. When the App crashes or encounters an error, Crashlytics receives stack traces, breadcrumb logs (non-sensitive diagnostic context), device model, OS version, App version, and anonymous crash event identifiers. Does NOT include user content, search queries, message content, or personally identifiable information beyond the Firebase user ID. Includes native (NDK) crash support for native libraries used by the App. Firebase privacy
Firebase Analytics (Google LLC) — for usage analytics. Receives event names and parameters about your in-app actions (which screens you view, which categories you open, search performed events, meme played, meme shared, meme favorited, keyboard enabled, account deleted, notification received/opened). User properties (keyboard enabled status, App version, account age in days). Does NOT include actual content of searches, names of specific memes, or message content. Includes screen view events tracking your navigation between screens. Firebase privacy
Firebase Performance Monitoring (Google LLC) — for App performance metrics. Receives App startup times (cold, warm, hot start phases), network request latency by URL pattern for our backend APIs and content delivery requests, and screen render durations. Does NOT include request URLs in full detail, request bodies, or response payloads — only timing data. Firebase privacy
Google Sign-In and Credentials Manager (Google LLC) — when you sign in with Google, Google shares your name, email, profile photo URL, and account ID with us. Google privacy
Klipy (Klipy Inc.) — provides the GIF library inside the Memeboard keyboard. When you search or browse GIFs, your search query and IP address are sent to Klipy to fetch results. Klipy privacy
Cloudflare (Cloudflare Inc.) — content delivery network. Both memes and GIFs are delivered via Cloudflare’s CDN for fast, reliable streaming. Cloudflare caches public content assets close to your location. No personal data is stored in the CDN cache. Cloudflare privacy
Memeboard backend at onlymemes.cloud (Samwise & Co) — our own servers receive your authentication token, search queries, the memes you favorite or share, your recents list, FCM device tokens, keyboard enablement state, and aggregated analytics events. This is first-party processing governed by this Privacy Policy.

Services we DO NOT use

We do not use any advertising SDKs. There is no AdMob or third-party ad network in the App. (Note: Google AdMob is planned for v1.0.1+ production releases — not in closed testing. This Privacy Policy will be updated before AdMob is integrated.)
We do not use OneSignal, Mixpanel, Amplitude, Segment, or any other third-party analytics service beyond Firebase Analytics listed above.

We will update this list before adding new third-party services to the App.

6. International Data Transfers

Memeboard is operated by Samwise & Co (Dubai, UAE) but our servers are located in Bangalore, India, hosted on the DigitalOcean BLR1 data center. Our application servers, primary database, and core storage all run in the same region. Media content (memes, thumbnails) is served through Cloudflare’s global content delivery network, which caches content at the geographic edge closest to you for performance.

Other service providers we use may store data in different regions:

Firebase services (Google LLC): data may be stored in Google’s global infrastructure including United States, European Union, and other regions depending on Google’s routing
Cloudflare: operates a global edge network across many regions

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, your data is processed outside the EEA. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data receives an equivalent level of protection as it would within the EEA. By using our service, you consent to this international data transfer. Cloudflare’s data processing is governed by their Data Processing Addendum available at cloudflare.com/cloudflare-customer-dpa.

For users in the United Arab Emirates, transfers comply with the UAE PDPL by ensuring our service providers maintain adequate data protection standards.

For users in India, your data is processed within India by our primary infrastructure.

By using the App, you acknowledge that your data may be transferred to and stored in countries outside your country of residence.

7. How Long We Keep Your Data

We retain your data only as long as necessary to provide the service or meet legal obligations. Where deletion is supported, you can request it at any time as described in Section 8.

Data category	Retention period
Account information (email, name, Firebase UID)	Until you delete your account, then removed immediately
Favorites and recents	Until you delete your account, or you remove them individually in the App
Search analytics (logged-in users)	Until you delete your account, then anonymized (the search text is retained for service improvement but no longer linked to you)
Search analytics (anonymous users)	Retained while the service is operational; deletion available on request via support email
Meme sharing events (telemetry)	Anonymous by design — no user identifier stored; retained while the service is operational
FCM device tokens	Until you uninstall the App, deauthorize push notifications, or the token is refreshed
Account deletion compliance record	Retained indefinitely as a hashed identifier only (required by GDPR Article 30 and equivalent regulations); contains no recoverable personal data
Server-side operational logs	Cycled out by log rotation (typically within 30 days)

We do not currently run automated retention/cleanup jobs for search analytics. Search analytics for logged-in users are anonymized immediately when an account is deleted. For other deletion requests, contact us at samwisestudios01@gmail.com and we will action your request within 30 days.

When you delete your account, your account data is removed immediately. The deletion is atomic — there is no soft-delete or grace period. If you sign back in with the same Google account later, a fresh account is created with no connection to the deleted one.

8. Your Rights

You have the following rights regarding your personal data. To exercise any right, email us at samwisestudios01@gmail.com or use the in-app account features described below.

Right to access your personal data
Right to rectification if your data is inaccurate
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability: receive a copy of your data in a machine-readable format
Right to object to processing based on legitimate interest
Right to withdraw consent at any time without affecting prior lawful processing
Right to lodge a complaint with a supervisory authority in your country

8.2 CCPA rights (for California residents)

Right to know what personal information we collect, use, and share
Right to delete personal information we hold about you
Right to opt-out of sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising)
Right to non-discrimination for exercising your privacy rights
Right to limit use of sensitive personal information

8.3 UAE PDPL rights (for users in the UAE)

Right to know what categories of personal data we process
Right to request correction of inaccurate personal data
Right to request erasure of personal data
Right to restrict or object to processing
Right to data portability

8.4 In-app account deletion

You can delete your Memeboard account at any time from within the App:

Open the App
Go to the navigation drawer → Account
Select “Delete Account”
Confirm

Deleting your account removes your favorites, recents, and account record from our backend. The deletion is permanent and cannot be undone.

You may also delete your account by emailing samwisestudios01@gmail.com.

9. Children’s Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from anyone under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at samwisestudios01@gmail.com and we will delete the information promptly.

For users between 13 and 16 in the European Economic Area, where the GDPR sets a higher minimum age in your jurisdiction, parental consent may be required. We do not knowingly process data from users below the minimum age set in their jurisdiction.

10. Security

We use industry-standard security measures to protect your data, including:

HTTPS encryption for all network communication between the App and our servers
Firebase authentication tokens managed by Google’s secure infrastructure
Access controls limiting which employees can access your data
Regular review of our security practices

No method of internet transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security.

If we become aware of a data breach that affects you, we will notify you and the relevant authorities as required by applicable law.

11. Cookies and Tracking

The Memeboard mobile App does not use browser cookies. We do not use cross-site tracking or device fingerprinting.

If you visit our website (if any), please review the website’s separate cookie notice when available.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Update the “Effective date” at the top of this policy
Notify you in the App or by email if the change materially affects your rights
For changes affecting consent-based processing, request your consent again where required

Your continued use of the App after the changes take effect means you accept the revised Privacy Policy.

13. Governing Law and Disputes

This Privacy Policy is governed by the laws of the United Arab Emirates. Any disputes arising from this Privacy Policy or your use of the App will be resolved in the courts of Dubai, UAE, unless mandatory consumer protection laws in your country of residence require otherwise.

14. Contact Us

For any privacy-related questions, requests, or concerns: