Privacy Policy

Last updated: 19 March 2026

Data Controller: MMG Labs Ltd, 82A James Carter Road, Bury St. Edmunds, IP28 7DE, United Kingdom.
Email: support@mmglabs.co.uk

Introduction

MMG Labs Ltd ("MMG Labs", "we", "us", or "our") develops and publishes iOS applications. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our applications and services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using any of our applications, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please discontinue use of our applications.

Information We Collect

We may collect and process the following categories of personal data, depending on how you interact with our applications and services:

Personal Data Provided Directly

When you contact us for support, provide feedback, or otherwise communicate with us, you may provide personal data including your name, email address, and any additional information you choose to include in your correspondence.

Usage Data

We may collect data about how you use our applications, including device information (such as device model and unique device identifiers), operating system version, app usage patterns, feature interaction data, and general usage statistics. This data helps us understand how our applications are used and how we can improve them.

Data Collected Automatically

Our applications may automatically collect certain technical data, including crash logs, performance diagnostics, and error reports. This data is essential for identifying and resolving technical issues, and for maintaining the stability and reliability of our applications.

Please note: The specific data collected may vary by application. For detailed information about the data collected by a particular app, please refer to the individual app privacy disclosure available on the App Store listing for that application.

How We Collect Your Data

We collect personal data through the following means:

Directly from You

We collect information that you voluntarily provide to us when you submit support requests, send feedback, or otherwise correspond with us via email or in-app communication channels.

Automatically Through Our Applications

Our applications may incorporate analytics and crash reporting functionality that automatically collects usage and diagnostic data during normal operation. This collection is carried out in accordance with the permissions you grant and the settings available on your device.

From Third Parties

We may receive aggregated or anonymised data from Apple through App Store Connect analytics and related services. Additionally, where our applications integrate third-party SDKs or services, those third parties may collect data as disclosed in the individual app privacy disclosures on the App Store.

How We Use Your Data

We use the personal data we collect for the following purposes:

  • Provide and maintain our applications: To deliver the core functionality of our apps, process in-app purchases and subscriptions, and ensure our services operate correctly.
  • Respond to support requests: To address your queries, troubleshoot issues, and provide technical assistance when you contact us.
  • Analyse usage to improve our applications: To understand how users interact with our apps, identify popular features, detect areas for improvement, and inform our development priorities.
  • Detect and prevent technical issues: To monitor application performance, identify crashes and bugs, and implement fixes to improve stability and user experience.
  • Comply with legal obligations: To meet our legal and regulatory requirements, including obligations under UK data protection law, tax law, and other applicable legislation.

Lawful Basis for Processing

Under the UK GDPR, we must have a valid lawful basis to process your personal data. We rely on the following bases depending on the specific processing activity:

  • Consent: Where you have given clear, informed consent for us to process your personal data for a specific purpose — for example, when opting in to analytics or providing your details via a contact form. You may withdraw your consent at any time.
  • Legitimate interests: Where processing is necessary for our legitimate interests, such as improving our applications through analytics, understanding usage trends, maintaining app security, and enhancing user experience, provided those interests are not overridden by your rights and freedoms.
  • Contractual necessity: Where processing is necessary for the performance of a contract with you — for example, to provide the app services you have requested, manage your subscription, or deliver in-app purchases.
  • Legal obligation: Where processing is necessary to comply with a legal obligation to which we are subject, such as maintaining financial records or responding to lawful requests from regulatory authorities.

Third-Party Data Sharing

We may share your personal data with the following categories of third parties, strictly as necessary for the purposes outlined in this policy:

  • Apple: As our applications are distributed through the Apple App Store, certain data is shared with or processed by Apple in connection with App Store services, StoreKit (for purchases and subscriptions), and App Store analytics. Apple's processing of this data is governed by Apple's Privacy Policy.
  • Analytics providers: We may use third-party analytics services to help us understand app usage. The specific providers used vary by application and are disclosed in the relevant app privacy disclosures on the App Store.
  • Crash reporting services: We may use third-party crash reporting tools to collect and analyse crash logs and performance data, enabling us to diagnose and resolve issues promptly.

We do not sell your personal data. We will never sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

International Data Transfers

Your personal data may be transferred to, stored in, or processed in countries outside the United Kingdom. This may occur, for example, when data is processed by third-party service providers (such as Apple or analytics providers) whose servers are located outside the UK.

Where your personal data is transferred outside the UK, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements. These safeguards may include:

  • Transfers to countries that have received an adequacy decision from the UK Secretary of State, confirming that the country provides an adequate level of data protection.
  • The use of Standard Contractual Clauses (SCCs) approved for use under UK data protection law, which contractually oblige the recipient to protect your data to UK standards.
  • Other appropriate safeguards as permitted under the UK GDPR, such as binding corporate rules or certified codes of conduct.

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Our specific retention periods are as follows:

  • Support correspondence: Retained for 2 years after the date of your last contact with us, after which it is securely deleted.
  • Analytics data: Retained for 12 months from the date of collection, after which it is deleted or anonymised.
  • Account and subscription data: Retained for the duration of your active subscription, plus 6 months following cancellation or expiry, to allow for any billing queries or account recovery.

Once the applicable retention period has expired, your personal data will be securely deleted or irreversibly anonymised so that it can no longer be associated with you.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights in relation to your personal data. These rights are not absolute and may be subject to certain conditions and exemptions as set out in data protection law:

  • Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
  • Right to rectification: You have the right to request that we correct any personal data that is inaccurate or incomplete.
  • Right to erasure: You have the right to request that we delete your personal data where there is no compelling reason for us to continue processing it — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw your consent.
  • Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for instance, where you contest the accuracy of the data, or where you object to processing based on legitimate interests.
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit that data to another controller where technically feasible.
  • Right to object: You have the right to object to the processing of your personal data where we are relying on legitimate interests as our lawful basis, or where data is processed for direct marketing purposes.
  • Right to withdraw consent: Where we process your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us by email at support@mmglabs.co.uk. We will respond to your request within one month of receipt. In certain circumstances, we may extend this period by a further two months where the request is complex or where we receive a large number of requests, in which case we will inform you of the extension and the reasons for it.

Right to Lodge a Complaint

If you are not satisfied with how we have handled your personal data or responded to your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.

You can contact the ICO through their website at ico.org.uk, by telephone on 0303 123 1113, or by post at: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

Children's Privacy

Our applications are not directed at children under the age of 13, and we do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13 without appropriate parental consent, we will take reasonable steps to delete that data as promptly as possible.

If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at support@mmglabs.co.uk so that we can take the necessary steps to remove that information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will post the revised policy on this page and update the "Last updated" date at the top of the document.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of our applications after any changes to this policy constitutes your acceptance of the updated terms.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please do not hesitate to contact us:

MMG Labs Ltd
82A James Carter Road
Bury St. Edmunds
IP28 7DE
United Kingdom

Email: support@mmglabs.co.uk