Privacy Policy

Akudreams LTD (“Mekami”, “we”, “us”, “our”) is the data controller for personal data collected through the Mekami website (mekami.com) and the Mekami Android application (together, the “Service”). We are registered with the Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER].

This policy explains what data we collect, why we collect it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect the following categories of personal data:

Account data

• —Your name and email address, provided by Google when you sign in.
• —Your profile photo URL, if your Google account has one.
• —A username you choose when setting up your profile.

Activity data

• —Games you log, rate, review, or add to lists.
• —Social interactions: who you follow, games you like or pass.
• —Content you create: reviews, list names, and profile bio.

Technical data

• —IP address and approximate location (country/region level only).
• —Device type, operating system, and browser (web) or app version (Android).
• —Timestamps of requests made to our service.

• —To provide the Service — powering your diary, feed, and recommendations.
• —To authenticate you — verifying your identity on sign-in.
• —To personalise your experience — tailoring recommendations based on your activity.
• —To communicate with you — sending transactional emails such as notifications you have opted into.
• —To improve the Service — analysing aggregate usage patterns to understand how Mekami is used.
• —To comply with legal obligations — retaining records as required by law.

We do not sell your personal data to third parties. We do not use your data for advertising or share it with advertising networks.

We rely on the following legal bases under UK GDPR:

• —Contract — processing necessary to provide the Service you have signed up for (account management, logging, social features).
• —Legitimate interests — improving the Service, detecting abuse, and ensuring security, where these do not override your rights and freedoms.
• —Legal obligation — retaining data where required by law.
• —Consent — for non-essential cookies and optional communications (where applicable). You may withdraw consent at any time.

We share your data only with the following third parties, and only as necessary to operate the Service:

• —Google LLC (Firebase)— our authentication provider and primary data store. Data is stored in Firebase Firestore and processed under Google's data processing terms. Google is certified under the EU-US Data Privacy Framework.
• —Cloud infrastructure providers — for hosting and serving the web application. We will update this section as providers change.

We may disclose your data if required by law, court order, or a regulatory authority (such as the ICO), or to protect the rights, property, or safety of Mekami, our users, or others.

• —Account and activity data — retained for as long as your account is active. On account deletion, your personal data is deleted within 30 days.
• —Anonymised/aggregated data — may be retained indefinitely as it cannot be used to identify you.
• —Legal and financial records — retained for the period required by UK law (typically 6 years).

Firebase stores data in data centres operated by Google, which may be located outside the UK. Such transfers are subject to appropriate safeguards, including the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Under UK GDPR you have the right to:

• —Access — request a copy of the personal data we hold about you.
• —Rectification — ask us to correct inaccurate or incomplete data.
• —Erasure — ask us to delete your personal data (“right to be forgotten”), subject to certain legal exceptions.
• —Restriction — ask us to restrict processing of your data in certain circumstances.
• —Data portability — receive your data in a structured, machine-readable format.
• —Object — object to processing based on legitimate interests.
• —Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email legal@mekami.com. We will respond within one calendar month. If you are unsatisfied with our response, you have the right to lodge a complaint with the ICO at ico.org.uk.

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at legal@mekami.com and we will delete it promptly.

We use cookies and similar technologies to operate the Service. For full details, see our Cookie Policy.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

For privacy enquiries or to exercise your rights:

Akudreams LTD
Data Controller
Email: legal@mekami.com
Registered in England and Wales
Company number: [COMPANY NUMBER]
Registered address: [REGISTERED ADDRESS]