Numeri privacy policy

Last updated 18 August 2026 · applies to Numeri for iOS and Android (com.mhworks.numeri)

This policy covers the Numeri app for iPhone, iPad and Android. It is written to meet the UK GDPR and the Data Protection Act 2018, and it describes what the app actually does rather than what a policy of this kind usually says.

Who is responsible

The data controller is MH WORKS LTD, a company registered in England and Wales under company number 15932874, whose registered office is at 20 Westbourne Park, Scarborough, England, YO12 4AT.

Write to matthew@mh-works.com with any question about this policy or about your data. We are not required to appoint a data protection officer and have not appointed one, so that address reaches the person answerable for it.

What the app collects about you

Nothing. To be specific, Numeri does not collect or ask for:

• your name, email address, phone number or postal address;
• an account or a password, because the app has neither;
• your date of birth or your age;
• your location, at any level of precision;
• your contacts, photos, calendar, microphone or camera, none of which the app requests access to;
• an advertising identifier, on either platform, and it does not ask for permission to track you because it has nothing to track you with;
• anything about how you play: no analytics, no usage statistics, no behavioural profiling and no A/B testing.

There are no adverts and no advertising networks in the app. Nothing about you is sold, rented, shared or handed to a data broker, and no automated decisions are made about you.

The app requests no sensitive permissions: no location, no contacts, no photos, no camera and no microphone. Nothing it declares puts a permission prompt in front of you, and nothing it declares gives it access to anything of yours.

What the app does declare is the plumbing for two things, both of them described in this policy. The first is selling you the unlock through the store, which is also why the store listing shows that the app contains in-app purchases. The second is network access, which is used for the crash reports described below and for nothing else. Buying or restoring the unlock is carried out by the App Store or Google Play through the operating system, rather than by the app opening a connection of its own.

What is stored on your device

Numeri keeps your progress through the game, your settings, and the fact that you have bought the unlock. That sits in the app's own private storage, where other apps cannot read it.

We cannot read it either. None of it is sent anywhere, and there is no account or server it could be sent to. Deleting the app deletes it. Your phone's own backup, whether iCloud or Google, may include a copy depending on your device settings; that backup is a matter between you and Apple or Google under their terms, and we have no access to it.

Crash and error reports

This is the only personal-data question the app raises, so it gets the most space.

Why they exist

When the app crashes, or hits an error it was not written to handle, it puts together a technical report of what went wrong and sends it to us. A crash that happens only on one model of phone, or only in one language, is close to impossible to find without them.

These reports are the only thing Numeri itself sends anywhere. There is one other piece of network activity involved in using the app, and it is not ours: when you buy or restore the unlock, Apple's or Google's purchase framework contacts their own servers, exactly as it does for every paid app on the platform. We are not party to that exchange beyond being told that the unlock is owned.

What a report contains

• what failed: the type of error or crash, and the stack trace, which is the list of lines of our own code that were running at the time;
• the app's version and build number;
• technical facts about the device and the app's state at the moment it failed: the device model, the operating system and its version, the device language and region, the time zone, and readings such as available memory or storage;
• a short trail of the app's own recent internal events, which the code records about itself: which screen was open, which routine ran, whether a sound started. This is a log of the software's behaviour, not of yours.

What a report never contains

• your name, email address or any other contact detail, because the app has never asked for one;
• an advertising identifier: no IDFA on iOS, no Android advertising ID, and nothing that would let anyone recognise you in another app;
• your IP address. Sentry, our processor, is configured not to store it, so the report is not tied to your connection or your rough location;
• anything you typed, said or answered while playing, and no screenshots and no recording of your screen;
• your location, your contacts, or the contents of your device.

Who processes them, and where

Reports go to Sentry, an error-monitoring service that acts as our data processor under a written data processing agreement and handles them only on our instructions. The project is hosted in Sentry's European Union data region, in Germany, so reports are stored in the European Economic Area.

Sentry is a United States company, so its staff may need access for support and security work. Where that happens it is covered by the safeguards in our agreement with them, which include the European Commission's standard contractual clauses and the UK International Data Transfer Addendum to them.

When they are sent, and how long they are kept

If the app fails while you are offline, the report waits in the app's own storage and goes out the next time a connection is available. If that never happens, it is never sent.

Reports are kept for no longer than 90 days and are then deleted automatically. What we learn from them ends up in the code, not in a record about anybody.

Our lawful basis, and how to turn it off

We rely on legitimate interests, under Article 6(1)(f) of the UK GDPR: our interest in an app that does not crash, which is also your interest in it. We have weighed that against your privacy, and the result is the design described above. The reports carry no identity and no IP address precisely so that fixing a crash does not cost you anything. We do not rely on consent, and we do not use any of this for advertising, analytics or profiling.

You have the right to object to processing based on legitimate interests, and you do not have to write to us to exercise it. The app's settings include a switch that turns crash reporting off. With it off, the app prepares no reports, queues none and sends none.

One limit worth stating plainly: a report that has already been sent carries no identifier for you, so we cannot search out yours or pick them out for deletion. There is nothing in them to look you up by, which is the point of building it this way. Turning the setting off stops anything further.

Children

Numeri is a general-audience app, suitable for all ages, and it is not designed for or directed at children. It has no social features, no chat, no user-generated content and no advertising.

It collects no data that could identify anyone, so it collects none from a child either. We hold no information about any user, of any age, and there is therefore nothing about a child for us to delete, disclose or misuse. If you believe otherwise, write to us and we will look into it.

Buying the unlock

The in-app purchase is handled entirely by the App Store or Google Play. Apple and Google are the merchant of record: they take the payment and they hold whatever account and payment details that involves, under their own privacy policies. We never see your card number, your billing address or your store account, and we could not charge you if we wanted to.

What reaches the app is simply confirmation that the unlock has been bought, which it checks on the device. Apple and Google also give us aggregate sales reporting in their developer consoles, such as how many unlocks were bought in which countries. That reporting does not identify who bought them, and we receive nothing that would let us contact a buyer.

Their policies are at apple.com/legal/privacy and policies.google.com/privacy. Refunds are covered on the Numeri support page.

Your rights

Under the UK GDPR you have the right to:

• ask what personal data we hold about you, and get a copy of it;
• have inaccurate data corrected;
• have data erased, where we have no continuing reason to keep it;
• restrict or object to how we process it, including processing we base on legitimate interests;
• receive data you gave us in a portable, machine-readable form;
• withdraw consent at any time, where processing is based on consent. Nothing described in this policy relies on consent.

In practice we hold nothing that identifies you, so if you ask for a copy of your data we will almost certainly have nothing to give you, and we will say so plainly rather than pretending to search. To use any of these rights, email matthew@mh-works.com. We will reply within one month, and there is no charge.

Complaints

If you think we have handled your data badly, tell us first so we can put it right. You can also complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

If this policy changes, the new version appears on this page with a new date at the top. Where a change materially affects how the app treats your data, we will say so in the app's release notes as well, since we have no way to contact you directly.

Other MH Works policies

This policy covers Numeri and nothing else. Coniuga! has its own, and the MH Works Ltd privacy policy covers this website and the consultancy side of the business.