DiscoverMe
DiscoverMe is an app built around small everyday discoveries and short daily moments that invite you to notice more of the world around you. This policy explains what personal data the app collects, why, and what you can do about it. It is written to match what the app actually does — nothing described here is aspirational.
The short version. We collect your email address, your progress through paths, and the notes you write. We do not run ads, we do not track you across other apps or websites, and we never sell your data. Your notes are never sent to our analytics or crash-reporting providers.
DiscoverMe is operated by Nina Sergutenko (Belarus), acting as the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and, where it applies to you, the UK GDPR.
Postal address: Stroitelei str. 32a, Mogilev 212015, Belarus
Contact for privacy matters: info@discoverme.app
Because we are established outside the European Union and the United Kingdom but offer the app to people there, we appoint local representatives you and the authorities can contact.
You can raise any data-protection matter with the representative for your region, or with us directly at info@discoverme.app.
You can use DiscoverMe without an account. If you create one, you sign in with Apple or Google. We do not ask for or store a password.
We do not store a profile photo.
Payment itself is handled entirely by Apple. We never receive your card details, billing address, or Apple Account credentials.
We record product events to understand how the app is used — for example, that a moment was viewed or completed, that a paywall was shown, or that a purchase failed. Events carry the path identifier, the moment number, durations, counters, and error categories.
The text of your notes is never included in analytics. When you write a note, the only thing recorded is that a note was written and how many characters it contained.
When the app hits an error or crashes, we collect diagnostic information to find and fix the problem: error and crash reports, stack traces, the operating system and app version, release and build details, limited technical detail about the app's state at the time, and a short trail of the events leading up to the error ("breadcrumbs"). For signed-in users, this information may be associated with your pseudonymous DiscoverMe account identifier.
We deliberately keep personal data out of these reports. We do not send your email, name, note text, sign-in credentials, access tokens, purchase receipts, screenshots, or any screen recording. This data is processed on our behalf by Sentry (see section 05) solely to keep the app stable, secure and working properly — never for advertising or profiling.
DiscoverMe does not request or access your location, camera, microphone, photos, contacts, health data, or advertising identifier. There is no advertising in the app and no cross-app or cross-site tracking.
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and maintain your account | Account data | Contract (Art. 6(1)(b)) |
| Save your notes and sync progress across devices | Content and progress | Contract (Art. 6(1)(b)) |
| Unlock the paths you have bought and restore them | Purchase data, account identifier | Contract (Art. 6(1)(b)) |
| Send the daily reminder you asked for | Time zone, reminder setting | Consent (Art. 6(1)(a)) — you enable it, and can turn it off |
| Improve the app and fix problems | Usage analytics, technical data | Legitimate interests (Art. 6(1)(f)) |
| Diagnose crashes and technical errors | Crash and diagnostic data | Legitimate interests (Art. 6(1)(f)) |
| Prevent fraud and abuse of purchases | Purchase data, account identifier | Legitimate interests (Art. 6(1)(f)) |
| Answer your support emails | Whatever you include in your message | Legitimate interests (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have weighed those interests against your rights and limited what we collect accordingly — for example, by keeping note content out of analytics and crash reports entirely.
We do not sell personal data and we do not share it for advertising. We use a small number of processors who handle data on our instructions:
| Provider | What they process | Role |
|---|---|---|
| Supabase | Account data, notes, progress, purchase records | Backend and database hosting |
| RevenueCat | Account identifier, purchase records | Purchase validation and entitlement management |
| PostHog | Account identifier, usage events, technical data | Product analytics |
| Sentry (Functional Software, Inc.) | Crash and diagnostic data, pseudonymous account identifier | Crash reporting and error monitoring |
| Apple | Sign-in, payment, and transaction data | Independent controller for its own services |
| Sign-in data, if you choose Google sign-in | Independent controller for its own services |
We may also disclose data where we are legally required to do so, or to establish, exercise or defend legal claims.
Our database and backend are hosted by Supabase in the West EU (Ireland) region, and our product analytics run on PostHog's EU infrastructure. So the core of your data — account, notes, progress, analytics — is processed within the European Union.
Encrypted backups of our production database are also stored on a dedicated server located in Poland, within the European Union. The server is owned by the DiscoverMe operator and technically administered by an authorised developer under a data processing agreement. These backups are used exclusively for security, disaster recovery and system restoration.
Some providers process limited data outside the European Economic Area: RevenueCat (purchase validation) operates from the United States, and Apple and Google run global infrastructure for sign-in and payments. Our crash-reporting provider, Sentry, processes diagnostic data in EU (Frankfurt, Germany) region. Where data is transferred outside the EEA, the transfer is covered by the European Commission's Standard Contractual Clauses or another safeguard permitted under Chapter V of the GDPR. You can ask us for details using the contact address above.
DiscoverMe keeps a local copy of your progress, completed moments, cached path content, note drafts, and settings on your device so the app works offline. If you use the app without an account, this local copy is the only place that data exists — it is not sent to us. Deleting the app removes it.
DiscoverMe keeps your notes and account data while your account is active, so you can return to your moments.
When you delete your account, we delete your account data and notes from our active systems. Some information may remain in encrypted backups for up to 30 calendar days after the backup was created, before those backups are automatically deleted or overwritten. Backups are used only for security, disaster recovery and system restoration, and are not used to restore deleted accounts as active accounts.
You can delete your account from inside the app, under Profile. This will permanently delete your profile, email, notes, and account data from DiscoverMe, and deletes your customer record at RevenueCat. This cannot be undone.
Any purchases stay with your Apple Account. Deleting your DiscoverMe account does not cancel or refund anything at Apple, and it does not erase your Apple purchase history. Because paths are one-time purchases tied to your Apple Account, you can sign in again later and use Restore purchases to reclaim paths you have already paid for.
Under the GDPR (and UK GDPR where it applies to you) you have the right to:
To exercise any of these, email info@discoverme.app. We respond within one month. You also have the right to complain to your local data protection authority — for example, the supervisory authority in your EU country, or the Information Commissioner's Office (ICO) in the UK.
DiscoverMe is intended for users aged 13 and over. We do not knowingly collect personal data from anyone under 13. If you believe someone under 13 has given us personal data, contact us at info@discoverme.app and we will delete it.
Traffic between the app and our servers is encrypted in transit. Access to your data in our database is restricted by row-level security rules so that one account cannot read another account's notes, progress, or purchases. Sensitive server credentials are held only on the server side and are never shipped in the app. No system is perfectly secure, but we take these measures seriously and review them as the app changes.
If we change how we handle personal data, we will update this page and change the effective date above. For significant changes we will give notice in the app before they take effect.
For any privacy question, email info@discoverme.app. Our identity and postal address as data controller are set out in section 01, and our EU and UK representatives in section 02.