Meep · Effective October 31, 2026
Meep does not track you across other companies’ apps or websites. There is no advertising, no analytics service and no third-party SDK in the app. Meep does use three service providers to run: Railway hosts the app and its database in the United States, Twilio sends and checks phone verification texts, and Apple provides Sign in with Apple, device attestation, push notifications and the App Store. What Meep stores is your account, the rounds you play, the people you play with, the notifications you have allowed, and a small record of which parts of the app you use. This page says exactly what that means.
Meep is made and run by David Jabech, an individual in the United States. Meep is offered on the App Store in the United States and Canada.
On first launch your device generates a random 32-byte secret and keeps it in the iOS Keychain. The server stores only its SHA-256, so a copy of the database is not a list of ways to sign in as its own rows. You are never asked to create an account and never shown a login screen.
Along with the account, the server keeps: your sessions (a hashed sign-in token, which expires 60 days after it was last refreshed); a record of each install that has signed in (the platform and the app build); and the device attestation Apple issues for that install (a key identifier, its public key and Apple’s receipt), which is how the server knows a request came from a real copy of Meep on a real iPhone. All of it is destroyed when you delete your account.
Optional, and only if you choose it. Meep receives the identifier Apple issues for this app and nothing else: it does not request your name or your email address. The identifier is stored as Apple sent it, attached to your account, so that the account can survive a new phone.
Every player has one. Meep deals you a generated handle (something like @swiftotter) when your account is created, and you can change it any time in Settings. It is public and searchable by design: a handle is how someone finds you to send a board. A handle is checked against a word list when you set it, and existing handles are checked again when that list changes; a handle that fails is replaced with a placeholder and you are told.
Optional. If you set one, it is chosen through the system photo picker (Meep never asks for access to your photo library), resized on your device, stored with your account as a JPEG of at most 256 KB, and shown to your friends and to the people you play next to your handle. People you are matched with as strangers see a tile with your initials instead, never the photo. You can change or remove it any time from your profile, and deleting your account deletes it. If you never set one, Meep shows a colored circle with your initials, and no photo exists anywhere. A photo that is reported can be removed by the person who reviews reports.
Adding your phone number is optional. If you add it, your phone turns it into a fingerprint (a one-way code), and the fingerprint is what Meep keeps: never the number, only for as long as you keep your number added, and deleted the moment you remove it or delete your account. A fingerprint of a phone number does not hide it completely: a phone number has too few possible values, so anyone holding Meep’s data and the formula behind the fingerprint could work a number out by trying every one. This protects your number against casual disclosure, not against someone determined to reverse it.
To add your number you have to prove you can read a text sent to it. Your number reaches Meep’s server once, for exactly as long as it takes to hand it to Twilio, a text-message company, which creates a six-digit code, sends it, and decides whether the code you type is right. The code you type also passes through Meep’s server on its way to Twilio. Neither the number nor the code is ever written to Meep’s database or to a log. What Meep writes down about an attempt is the fingerprint of the number, Twilio’s reference for the attempt, when it started, how many codes were tried against it and whether it worked, and those rows are deleted after two days. Twilio keeps its own record of the numbers it texted, under its own privacy policy. Texts are limited per player, per number and across everyone, so the feature can pause for a month if the limit is reached.
Contacts are read only when you tap Find friends from your contacts, and only the contacts you allow (iOS can limit this to a handful). Names never leave your phone. The numbers are turned into fingerprints on your phone and sent to ask which belong to Meep players who also added their own number; the answer is what you see on screen. Meep keeps no contact of yours. Two things are written down for the day: how many numbers your account sent, and a small summary (about two kilobytes) that estimates how many different ones they were, so that re-checking the same address book does not count against you twice. The summary holds no numbers and no names and cannot be turned back into either, but it is more than a plain count. Both are deleted after two days, and Meep holds lookups to at most 4,000 different numbers a day per account. Nothing about your contacts reaches another player unless you tap Invite or Challenge.
Separately from contacts matching, Meep stores the friendships you make, the friend requests you send and receive (an unanswered request lapses after 30 days), your friend code, and anyone you block.
Inviting a contact who is not on Meep opens your phone’s own Messages app with a link already typed in. You send it; Meep does not, and never sends a text on your behalf.
You can remove your number at any time from the You tab’s Friends card: Your number → Remove. From that moment you can no longer be found by it.
Meep has no way to tell you whether a number you add already belongs to another player: if somebody else added that number first, their having it does not make you findable.
Every round you finish is stored on Meep’s server, whichever mode it was: the board, the words you found with the path you traced for each, how long the round took, and a move-by-move log. This is what lets a new phone get your history, your word collection and your achievements back, and it is kept for as long as your account exists. Practice rounds are stored the same way today; a change is planned so that they stay on the phone and only the words you found are kept.
For a round you play against other people, the server keeps its own copy as well (the score, the words, the log and a few measurements used to spot cheating) and replays the log against the board to check that a claimed score is one the board could actually produce. This is what makes a competitive result mean anything. The server’s copy of the move-by-move log and the measurements are deleted after 90 days; the score and the words stay.
A board you send or accept is stored with who was invited, who played and the result, and it stays in both players’ history. When you ask for a random opponent, Meep keeps a request (the preset you asked for, your rating at the time, and when) for up to seven days, until it is paired or lapses. Your rating is stored on your account, and each rated board writes a receipt of how it moved your rating and your opponent’s.
The achievements you earn are counted on your account: how many, the three most recent, and the one you wear beside your name. Other players see the badge you wear.
Meep records a fixed list of 22 things you do in the app, such as opening the leaderboard, finishing the daily board or asking for a random opponent, each with a small set of fixed labels and never any typed text, tied to your account. The developer reads them as a weekly summary to see which features get used. They are kept for 90 days and deleted with your account. There is no switch to turn this off today.
If you allow notifications, Meep stores the token Apple issues for your device, along with the build it came from, your locale, and which kinds of notification you have switched on. A token Apple reports as dead is dropped after 30 days; all of them are destroyed with your account. You can turn notifications off in iOS Settings at any time and the game works without them.
If you report someone, Meep stores who you reported, the board it was about, the reason you picked, any note you write (up to 1,000 characters), when, and what was done about it, so that a person can read it. A person does: reports go to a queue the developer reads, and the possible actions are a warning, a replacement handle, a suspension for a number of days (during which the player cannot sign in and is told the date it ends), removal of a photo, or closing the report. Every action is logged with who took it, when and why. Reports and those logs are kept.
Blocking someone hides you from each other in Meep: neither of you can find, invite, match with or see the other, and it ends any board between you that nobody has played yet. A board you had both already accepted keeps running to its result. The person you block is not told.
Meep Premium is bought through the App Store. Apple handles the payment; Meep never receives your card or any payment detail, and keeps no record of the purchase on its server. Whether you are subscribed is read on your phone from the App Store. Deleting the app or deleting your Meep account does not cancel a subscription: cancel it in your Apple subscription settings.
Your address is used in memory to apply rate limits and is forgotten a minute later or when the server restarts. One count is kept for longer: so that one network cannot make accounts by the hundred, Meep counts how many new accounts were made from each network each day. That count is stored under a fingerprint of the address made with a secret key, never the address itself, is not joined to any account, and is deleted after two days. If a request is refused for exceeding a limit, the address appears in the server’s log line for that refusal. Railway, which hosts Meep, keeps its own request logs under its own terms.
| What | How long |
|---|---|
| Your account, handle, photo, phone fingerprint, friendships, blocks, rating, achievements | Until you delete the account (or remove the item) |
| Your round history | Until you delete the account |
| The server’s own copy of a competitive round’s move log and cheating measurements | 90 days |
| The record of which parts of the app you use | 90 days |
| Sessions | 60 days after the last refresh |
| Phone verification attempts, and the day’s contacts count and summary | 2 days |
| A request for a random opponent | 7 days, then marked lapsed |
| Dead notification tokens | 30 days |
| Finished boards, reports and moderation logs | Not yet deleted on a schedule |
The last row is honest rather than final: finished boards, reports and moderation records are kept today, and a schedule for them is being decided.
In the app: Settings → Delete account. In one step it destroys every credential, session, install record and device attestation, so nothing can sign in as you again; deletes your photo, your whole round history, your friendships, friend requests, friend code, blocks, your rating and its receipts, your notification tokens, your phone fingerprint and verification attempts, the contacts counters and the record of which features you used; and clears your handle, which someone else may later take. If you cannot sign in, write to the address below and we will do it for you after confirming the account is yours.
Some things deliberately survive. Games you have already finished stay in your opponents’ history, with their scores and move logs, under an account record with no name on it: a completed challenge is two people’s record, and the other player’s result is not ours to delete. Your opponents’ rating receipts still refer to that nameless record. Reports you made and reports about you are kept with their notes, and so are any moderation actions, because evidence that vanishes when someone leaves is not evidence. The nameless record also keeps the dates it was created and last seen and its achievement counts. None of this carries your name, but it is still about you, so this policy still covers it.
You can ask to see what Meep holds about you, to correct it, to receive a copy, or to have it deleted, by writing to the address below; we answer within the time the law where you live allows. Meep runs on servers in the United States, so your information is processed there wherever you are. If you are unhappy with an answer you can complain to the privacy regulator where you live.
Meep is not directed at children under 13 and does not knowingly collect their data. If you believe a child under 13 has an account, write to the address below and it will be deleted.
When this page changes, the date at the top changes with it, and a change that matters is announced in the app.
Questions, a request about your data, a report you cannot make in the app, or an urgent safety concern: [email protected]. Please do not put phone numbers, account secrets or other people’s details anywhere public.