Memory Match privacy policy

What the app stores on your device

Everything below lives in the app's own storage on the device it was made on. There is no Zencora server behind it.

• Players. The names you type (up to 20 characters) and which two players are chosen. A fresh install starts with "Player 1" and "Player 2".
• Results. Each finished game: who played, the date, the game and board size, moves, time, scores, your answer in Match + count, and rotations, incorrect checks and reference looks in Spatial Memory.
• Creativity tests. The words you typed, the seven that were scored, the score, whether it was before or after a session, which session type, and the seconds used. They are filed with your games under the player holding the phone.
• Bests and leaderboards. Your best solo result for each game and board size, and on Vision Pro the ten best boards per size with the name typed in the lobby.
• Board history. On iPhone and iPad, up to 500 recent solo boards (date, size, moves, time) so the result screen can compare a board with your earlier ones. On Vision Pro the entry instead holds the date, board size, how many second cards you remembered, missed or searched for, your median time to the second card, how often you searched a neighbouring card, and the room and playing hand chosen in Labs.
• Notes. Anything you save under Game Feedback in Players & Results.
• Preferences. Your last challenge and linked-play rules, the name typed in the Vision Pro lobby, the watch Labs switch, and whether the opening has played. Other settings kept the same way: card size, the Result screen's notes toggle, Creativity's last phase and session type, the count of large boards cleared, Vision Pro's board height, position in the room, playing hand, study-look and card-intro-seen choices, the watch's Breathe-first switch, the watch's own best times, and the Soundscape volume, last preset, timer length and per-preset layer levels (see Soundscape). The watch also keeps the player name and id your phone sent it.
• A nearby-play name. Four random characters, drawn once, added to your device's model name so two iPhones can be told apart in the nearby list. It is not Apple's vendor identifier and is erased with the app.
• Watch results. Games finished on your Apple Watch arrive on your phone over Apple's watch link and are kept there (game, size, time, moves, date, player, player id, median time between taps). If the watch has not yet been told your player name, it sends the watch's own device name (for example "Justin's Apple Watch") as the player instead. Heart rate is not among them; see Apple Watch.
• A diagnostic log on Vision Pro. The headset app writes what it is doing (screens, moves, build number, device name and OS version) to a file in its own container, keeps the twenty most recent, and never sends it anywhere. When a ranked board finishes, the line it writes includes the name typed in the lobby and the name on the headset's own fastest board for that size. It can only be read by connecting the headset to a Mac.

Because these records sit in the app's storage, they are included in your device backup the way every app's settings are. Deleting the app removes them from the device; a backup you took earlier may still hold them.

What never leaves the device

The Creativity test is scored on the device with Apple's built-in English word model. Your words are never sent anywhere; they are saved with your results and included in your own CSV export.

The How to Play section on the iPhone and iPad home screen can save its overview as a narrated video. The narration is spoken by Apple's on-device voice or comes from clips bundled with the app; the MP4 is written to the app's temporary folder and goes nowhere unless you tap Share the overview video and choose a destination. It contains no player data.

On Vision Pro, another Zencora app can open Memory Match through the link zencora-memorymatch://. Memory Match ignores anything carried in the link; it only brings the lobby forward.

Nearby play

iPhone and iPad. Play on Two Devices finds the other device over your local network or Apple's direct device-to-device link, using the Bonjour service _zmemorymatch._tcp. iOS asks for Local Network permission first. The two devices connect to each other directly; there is no server in the middle.

What the other device receives: your chosen player name and the app-made player id behind it, the board (a random seed, board size, rules, challenge and the host's name), the board state as it changes, and your taps. The other device shows your name on its scoreboard and adds you to its saved players list so your results on that device are filed under your name. Each device saves the finished game as its own result. In the nearby list, devices appear as their model name plus four random characters.

Apple Vision Pro. Nearby race connects two headsets on the same Wi-Fi with Apple's Multipeer Connectivity (service mmvision-race), encrypted. It sends only the deal (seed, pairs, challenge) and progress (pairs found, turns, finished). No name travels: each headset identifies itself as "Memory Match" plus six random characters.

Play across houses with SharePlay

SharePlay uses Apple's Group Activities service, which carries messages between participants over the internet under Apple's terms. Memory Match has no relay of its own.

iPhone and iPad. Play Across Houses sends the same messages as nearby play (your player name and id, the board, its state and taps) to the one other participant. The game has two seats; a third participant cannot play. Each person needs their own Apple Account, and both need the same version of Memory Match. Your saved notes are never part of it.

Apple Vision Pro. Play together shares one board: the seed, size, challenge, the chosen world and scene settings, the two seats (Apple's participant ids) and the board state. No typed name is sent. To keep the board in front of you, the shared room reads the headset's position on the device for as long as the room is open; that position is used only on your headset and is not sent or saved.

The app does not access FaceTime audio or video, your contacts, or your camera.

Apple Watch heart rate (Labs)

Labs is a switch on the watch app's first screen. It is off by default; nothing is asked of Health until you turn it on.

When you turn it on, the watch asks permission to read heart rate, heart rate variability (SDNN), beat-to-beat heartbeat series and workouts, and to share a workout. During each game the app runs a short mind-and-body workout session so the sensor streams live. That session is discarded when the game ends and is never saved to Health. During the game the current reading sits beside the clock; the result screen shows the average, lowest and highest heart rate for the game, the rise from the first readings to the highest reading, and HRV when the watch recorded some.

Those heart numbers are shown on the watch and nowhere else: they are not stored on the watch, not sent to your phone, and not sent to us. What the watch does send to your own paired phone is the game, board size, time, moves, date, your player name and id, and your median tap interval. Your phone sends the watch your chosen player name and id so results are filed correctly.

Purchases

Memory Match offers optional in-app purchases through Apple's App Store: one-time card packs (listed in the app at US$0.99 or US$1.99, with Apple's price the one that applies) and, when it is available, a Family Plan subscription (com.zencora.memorymatch.family.monthly and .yearly). The current games are not locked behind the Family Plan.

Apple handles the payment. The app receives only Apple's signed record that a product is owned; we never see your card, name or Apple Account. Restore Purchases asks Apple to sync your purchases to this device.

Soundscape

Memory Match on iPhone, iPad and Vision Pro carries a Soundscape engine that plays sounds the app synthesizes itself, chosen from a few presets; in this version it has no screen of its own yet. It uses no network, no microphone and no downloaded sound files. It notices whether headphones are connected, because some presets need them, and it can keep playing with the screen off only while its timer is running; with no timer it stops when the app goes to the background. It stores your volume, the last preset, the timer length and the layer levels you set for each preset on the device. Nothing from Soundscape is saved with a game's result in this version; if a later version does that, this page will say so first.

Children and families

There are no accounts, no advertising, no tracking, no chat and no public leaderboards. The only thing another person ever sees is the player name you chose, and only while you play with them nearby or over SharePlay; a nickname works fine. Results and notes stay on the device until an adult chooses to export them. The export contains player names, results and any Creativity words, so look it over before sending it outside the household.

Voice feedback in test builds

If you are testing a beta, here is exactly what happens:

• The microphone is requested the first time you press Record, never at launch. You can decline.
• The note is recorded as an AAC .m4a file into the app's own Documents/feedback folder on your device, named with the build number and the time.
• Memory Match does not upload the note. The shared Zencora recorder has an uploading mode used by other Zencora test apps; Memory Match uses the local-only mode, and the badge says "It stays on this device until it is pulled." When a note starts and ends, the app writes a line to the device's system log (the one Apple's Console shows) with the file name, length and size; that log stays on the device.
• The only way a note reaches us is if the device is connected to a Mac and the app's folder is copied off it. In practice that means our own test devices. If you hand us a device to do this, we will hear the note and keep it only as long as it is useful for fixing the build.
• To delete recordings, delete the app; the folder is inside it and is not shown in the Files app. If we have pulled a copy from your device, email us and we will delete it.

Your choices

• Export. Players & Results > Share Results & Feedback writes a CSV of every finished game (kind, date, players, challenge, mode, rules, pairs, moves, seconds, scores, star counts, note) plus your saved notes and Creativity words, and opens the system share sheet. Nothing leaves the device until you choose where it goes.
• Rename. Players can be renamed in Players & Results; results stay with the player.
• Delete. The app has no per-result delete yet. Deleting the app removes all of its players, results, notes, preferences and any voice notes from that device. An earlier device backup may still contain them.
• Share a video. The How to Play overview video is only made when you ask for it and only leaves the device through the share sheet.
• Permissions. Local Network, Microphone (test builds) and Health (watch Labs) can be withdrawn in Settings at any time. Nearby play and SharePlay only start when you open those screens.
• Labs. Turn it off on the watch's first screen; the app stops starting workout sessions.

What reaches us through Apple, and through email

Apple gives us aggregate App Store statistics (downloads, countries, device types) that identify no one. If you have turned on sharing crash reports with developers, Apple may pass us individual crash reports with device and OS details; they are not under your name and we do not try to link them to a person. If you email us, we have your message and address for as long as the conversation is open and in our mail archive afterwards. That is the one record of you we are likely to hold, and we will delete it on request.

Contact and changes

Questions, deletion requests and anything this page does not answer: info@zencoraneuro.com. Support is at zencora.app/memory-match/support; the policy for all Zencora apps is at zencora.app/privacy.

If a future version of Memory Match collects anything new, this page will be rewritten before that version ships, the date at the top will change, and the app's privacy manifest will be updated in the same release. We will not begin collecting data under a policy that says we do not.