Privacy Policy

MEF Labs SAS, 61 rue de Lyon, 75012 Paris, France, is the data controller for the personal data described here. For any question about this policy or to exercise your rights, write to contact@meflabs.com.

Account data. Your email address, and your name if you provide one. If you sign in with Google, we receive your email address and name from Google — never your Google password.

Research data. The onboarding answers you give, your searches, watched apps, collections, comparisons, generated reports and build plans. This is the substance of the product and it is stored against your account.

Billing data. If you subscribe, Stripe processes your payment and we store the resulting subscription status, plan, billing period and Stripe customer identifier. We never see or store your card number.

Usage data. Pages visited and features used, along with technical data such as IP address, browser and device type, collected through PostHog so we can see which parts of the product are actually used.

We do not collect special category data, and we ask that you do not put any into the product.

• To provide the service — authenticating you, storing your research, running the daily collection. Basis: performance of our contract with you.
• To take payment — managing subscriptions and invoices. Basis: performance of our contract, and our legal obligation to keep accounting records.
• To send alert emails — telling you when a watched app moves. Basis: performance of our contract, since alerts are the feature you subscribed to. You can turn delivery off at any time without losing the alerts themselves.
• To improve the product — understanding which features are used and where people get stuck. Basis: our legitimate interest in building a product that works.
• To keep the service secure — detecting abuse and enforcing quotas. Basis: our legitimate interest in protecting the service and its other users.

We do not sell your personal data, and we do not use it to train AI models.

Some features — review analysis, niche suggestions, build plans — send text to Mistral AI to be processed. What is sent is public App Store review text and the prompt you submitted, not your account data. We do not permit that content to be used to train models.

We use the following processors. Each one receives only what it needs to do its job.

Some of these providers are based outside the European Economic Area. Where that is the case, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

Account and research data are kept while your account is open. If you delete your account, they are deleted within 30 days, except where we must keep records longer — invoices, for instance, are kept for the period required by tax law.

Usage analytics are retained in aggregate. Alert records are kept for as long as the account, since their history is part of what the product shows you.

If you are in the EEA or the UK, you have the right to access your data, to correct it, to have it erased, to restrict or object to its processing, and to receive it in a portable format. Where processing rests on legitimate interest, you can object to it. Where it rests on consent, you can withdraw that consent at any time.

Write to contact@meflabs.com and we will answer within one month. If you believe we have handled your data badly, you may complain to your national supervisory authority.

We set cookies that are necessary for the service to work — keeping you signed in, and remembering your session. We also use PostHog analytics cookies to measure product usage.

Data is encrypted in transit and at rest by our infrastructure providers. Access to production data is restricted, and row-level security in the database means one account cannot read another's research. No system is perfectly secure; if a breach affects your data and is likely to present a risk to you, we will tell you.

If we change this policy in a way that materially affects you, we will tell you by email or in the product before it takes effect. The date at the top of this page always reflects the current version. See also our Terms of Service.