Privacy Policy

1. Data we collect

Depending on how you use Memoo, we collect:

• account data, including an anonymous Firebase identifier or, after registration, email address, username, and linked Apple, Google, Microsoft, or password sign-in method;
• decks, cards, images, source files, learning settings, and study activity;
• catalog metadata, publication choices, imports, reports, blocks, and moderation records;
• subscription status and transaction identifiers supplied by Apple or our subscription provider, but not full card details;
• device, app version, locale, time zone, push-notification token, diagnostics, crash, security, and usage data; and
• website information such as browser data, server logs, and a privacy-preserving representation of network information used to prevent report abuse.

2. Why we use it and our legal bases

• Contract: to create your account, sync and study decks, process purchases, generate cards, publish or import decks, and provide support.
• Legitimate interests: to secure and improve Memoo, diagnose failures, prevent abuse, moderate community content, and understand feature performance, balanced against your rights.
• Consent: for optional notifications, marketing or non-essential cookies where consent is required. You may withdraw consent at any time.
• Legal obligations: to meet tax, accounting, consumer-protection, safety, and lawful-request requirements.

3. Guest use and account protection

You can use core Memoo features before creating a permanent account. Memoo creates a cloud-backed anonymous Firebase user so decks and study progress can persist on that installation. Anonymous use is not a recoverable account: deleting the app, clearing app data, or losing the device may permanently remove access to that guest workspace.

If you later link Apple, Google, Microsoft, or email and password, we retain the same identifier where possible. If you sign in to an existing Memoo account, we use a short-lived, one-use authorization to transfer your guest decks, study data, and owned files into that account. We do not use OAuth tokens for advertising or store account passwords from those providers.

4. AI features and moderation

When you request AI generation, the selected text, image, or document is processed to return generated cards. Public deck submissions may also undergo automated safety checks followed by human review. Do not submit confidential or sensitive personal information to AI features. You can contact us to ask for human review of a moderation decision.

5. Sharing and public decks

Private decks are available only through your account. A deck shared as "Anyone with the link" is accessible to anyone who has its link but is excluded from search-engine indexing and catalog discovery. An approved public deck, its cards, title, description, category, and creator username can be shown in the catalog and on an indexable public web page.

Imported decks become independent copies in the importing user's account. Unpublishing or deleting your account cannot delete copies other users previously imported.

6. Service providers and disclosures

We disclose only the data needed to providers that help run Memoo, including Google Firebase for authentication, database, storage, hosting, and analytics; OpenAI for requested generation and safety processing; Apple and RevenueCat for purchases; Expo for push delivery; Bugsnag for diagnostics; and Resend for service email. These providers process data under their own terms and our instructions where applicable.

We may also disclose data when legally required, to protect users and the Service, or as part of a corporate transaction subject to appropriate safeguards. We do not sell personal data.

7. International transfers

Our providers may process data outside the United Kingdom or European Economic Area. Where required, we rely on adequacy decisions, approved contractual safeguards such as standard contractual clauses, or another lawful transfer mechanism.

8. Retention and deletion

We keep account and deck data while your account is active and as needed to provide the Service. Rotating or disabling a share link ends access through the previous link. Deleting a source deck disables its link-shared snapshot; an approved public snapshot may remain in your account until you unpublish it.

Guest workspaces are deleted after 90 days without meaningful activity. The deletion covers the anonymous authentication record, decks, cards, study records, temporary AI sources, and files owned by that guest. Returning to the app or making meaningful changes refreshes the activity date. You can also delete guest data immediately from Settings.

Account deletion removes your account data and catalog listings and disables their Memoo links. Independent copies already imported by other users remain in those users' accounts. Limited transaction, fraud-prevention, moderation, support, or legal records may be retained only for as long as reasonably necessary. Residual encrypted backups expire through their normal lifecycle.

9. Your rights

Depending on where you live, you may ask to access, correct, erase, restrict, or receive a portable copy of your data, or object to certain processing. You may withdraw consent and complain to your local data-protection authority. In the United Kingdom, this is the Information Commissioner's Office. Memoo also provides account deletion and data export from within the app. We may need to verify your identity before fulfilling a request.

10. Security and children

We use technical and organisational measures intended to protect data, but no online service is completely secure. Memoo is not directed to children under 13. Where local law requires a higher age for independent consent, a parent or guardian must consent. Contact us if you believe a child supplied data improperly.

11. Changes and contact

We may update this policy and will change the date above. We will provide additional notice where required for material changes.

Questions and privacy requests: support@memoo.app. Postal address: LOOP Interactive, Unit 7291, PO Box 6945, London W1A 6US, United Kingdom.