Privacy

Updated November 11, 2026

Samedeck keeps what it needs to run the app, shows it only to the people this page names, and sells nothing. There are no ads.

Who we are

Samedeck is made by Thomas Mook, one person in Groningen, the Netherlands. He is responsible for your data under the GDPR, and “we” on this page means him. Questions about your data go to hello@samedeck.com.

What we keep

• Your account: your email address, or your Apple or Google sign-in; your first name and, if you give it, your last name; your username; your birthday; your photo, if you add one; and your phone number, if you add it.
• What you do in Samedeck: your answers, whys, replies and hearts, your games, your chats, your friends and friend requests, the people you block, your reports and your settings.
• The cards you were shown: the app records which cards it showed you and how you answered, to choose the next ones, and shares it with nobody.
• A notification token, so your phone can get notifications. It goes when you sign out.

Who sees it

• Your answers and whys are seen by your friends. Answers on some 18+ cards are seen only by friends who chose to see those cards too.
• A reply you write under a why is seen by everyone who can see that why.
• Your name and username can be found by anyone on Samedeck, unless you turn that off in Settings › Privacy › Find Me By. Your photo is seen by your friends and their friends; everyone else sees your initial.
• In Play Live, people in the room see each other’s photos and answers in that room.
• Your birthday is never shown to anyone. It only checks that you are 18 or over.
• Nobody but you sees who you blocked or reported.

Mind, Belief, Politics and 18+ cards

Answers to these cards can say what you believe, how you vote, or about your sex life, which the GDPR treats as sensitive. They are off until you turn them on in Settings. Turning one on is your consent to keep those answers. To withdraw it and have those answers deleted, write to us.

Your contacts

If you allow it, Samedeck reads the phone numbers in your contacts. Our server turns each number into a scrambled code before keeping it; it never keeps names or the numbers themselves. We use the codes to show which of your contacts are on Samedeck, to suggest who to invite first, and to connect an invite when that person joins. We keep them while Search My Contacts is on (Settings › Privacy), and delete them six months after you last opened Add Friends, at once when you turn it off, and when you delete your account.

When you invite someone, we keep the number you invited so we can connect them to you when they join. It is deleted after 30 days if they don’t. If you are not on Samedeck and want your number removed, write to us.

How the app is used

Samedeck counts how often screens are opened, which steps of sign-up are reached, which notifications are tapped, and whether the app is opened again after the first day. These are sent as daily totals with nothing that says who you are, and we use them only to make the app better. To opt out, write to us.

This website sets no cookies and counts nothing.

Why we use it

Most of it is needed to give you the app you signed up for: your account, answers, friends, games, chats and notifications. Mind, Belief, Politics and 18+ cards, your contacts, your photos and notifications rest on your consent, which your phone or the app asks for. Reports, blocks, the word filter and the daily totals rest on our legitimate interest in keeping Samedeck safe and working. You can object to that by writing to us.

Who helps run it

A few companies run parts of Samedeck for us and use your data only to do that:

• Supabase keeps the database, sign-in and photos, on servers in Ireland.
• Resend sends the sign-in codes by email.
• Expo delivers notifications and app updates. A notification’s text, such as a name and a message, passes through Expo and then Apple or Google.
• Apple and Google handle sign-in, if you use them, and notifications.
• DigitalOcean hosts this website.

Supabase, Resend, Expo, Apple, Google and DigitalOcean are American companies, so some data leaves the EU. That is covered by the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

Everything in your account stays until you delete it. Contacts and invites are kept as described above. A report is kept until it has been dealt with. Our hosts keep server logs, including IP addresses, for a few days.

Your rights

You can see and change most of your data in the app, download a copy in Settings › Privacy › Download My Data, and delete your account in Settings › Account › Delete Account at any time. Deleting takes your profile, answers, photo, friends, games, chats and messages, and can’t be undone.

You can also ask us to correct, delete or restrict your data, or object to how we use it. Write to us from the email you sign in with, and we answer within a month. If you think we handle your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

Changes

If this page changes in a way that matters, the app tells you before the change takes effect.