Privacy Policy

1. Data we collect

Depending on how you use Memoo, we collect:

• account data, including email address and username;
• decks, cards, images, source files, learning settings, and study activity;
• catalog metadata, publication choices, imports, reports, blocks, and moderation records;
• subscription status and transaction identifiers supplied by Apple or our subscription provider, but not full card details;
• device, app version, locale, time zone, push-notification token, diagnostics, crash, security, and usage data; and
• website information such as browser data, server logs, and a privacy-preserving representation of network information used to prevent report abuse.

2. Why we use it and our legal bases

• Contract: to create your account, sync and study decks, process purchases, generate cards, publish or import decks, and provide support.
• Legitimate interests: to secure and improve Memoo, diagnose failures, prevent abuse, moderate community content, and understand feature performance, balanced against your rights.
• Consent: for optional notifications, marketing or non-essential cookies where consent is required. You may withdraw consent at any time.
• Legal obligations: to meet tax, accounting, consumer-protection, safety, and lawful-request requirements.

3. AI features and moderation

When you request AI generation, the selected text, image, or document is processed to return generated cards. Public deck submissions may also undergo automated safety checks followed by human review. Do not submit confidential or sensitive personal information to AI features. You can contact us to ask for human review of a moderation decision.

4. Sharing and public decks

Private decks are available only through your account. A deck shared as "Anyone with the link" is accessible to anyone who has its link but is excluded from search-engine indexing and catalog discovery. An approved public deck, its cards, title, description, category, and creator username can be shown in the catalog and on an indexable public web page.

Imported decks become independent copies in the importing user's account. Unpublishing or deleting your account cannot delete copies other users previously imported.

5. Service providers and disclosures

We disclose only the data needed to providers that help run Memoo, including Google Firebase for authentication, database, storage, hosting, and analytics; OpenAI for requested generation and safety processing; Apple and RevenueCat for purchases; Expo for push delivery; Bugsnag for diagnostics; and Resend for service email. These providers process data under their own terms and our instructions where applicable.

We may also disclose data when legally required, to protect users and the Service, or as part of a corporate transaction subject to appropriate safeguards. We do not sell personal data.

6. International transfers

Our providers may process data outside the United Kingdom or European Economic Area. Where required, we rely on adequacy decisions, approved contractual safeguards such as standard contractual clauses, or another lawful transfer mechanism.

7. Retention and deletion

We keep account and deck data while your account is active and as needed to provide the Service. Rotating or disabling a share link ends access through the previous link. Deleting a source deck disables its link-shared snapshot; an approved public snapshot may remain in your account until you unpublish it.

Account deletion removes your account data and catalog listings and disables their Memoo links. Independent copies already imported by other users remain in those users' accounts. Limited transaction, fraud-prevention, moderation, support, or legal records may be retained only for as long as reasonably necessary. Residual encrypted backups expire through their normal lifecycle.

8. Your rights

Depending on where you live, you may ask to access, correct, erase, restrict, or receive a portable copy of your data, or object to certain processing. You may withdraw consent and complain to your local data-protection authority. In the United Kingdom, this is the Information Commissioner's Office. Memoo also provides account deletion and data export from within the app. We may need to verify your identity before fulfilling a request.

9. Security and children

We use technical and organisational measures intended to protect data, but no online service is completely secure. Memoo is not directed to children under 13. Where local law requires a higher age for independent consent, a parent or guardian must consent. Contact us if you believe a child supplied data improperly.

10. Changes and contact

We may update this policy and will change the date above. We will provide additional notice where required for material changes.

Questions and privacy requests: support@memoo.app. Postal address: LOOP Interactive, Unit 7291, PO Box 6945, London W1A 6US, United Kingdom.