Privacy Policy

Who we are

Memori is a flashcard study app for exam students, operated by Memori Ltd, a company registered in England and Wales (company no. 17318602) ("Memori", "we", "us" or "our"). We are the data controller for the personal data described in this policy.

This policy covers the Memori iOS app, this website (including the beta waitlist), and the Memori Shop. You can reach us about anything in this policy at info@memoristudy.com.

We are registered with the UK Information Commissioner's Office (ICO) under registration reference ZC189932. We process personal data in line with UK GDPR and the Data Protection Act 2018.

Information we collect

Account and profile

When you create an account we collect your email address, a password (stored only as a secure hash; we never see it), and an optional display name.

Your study content

The cards, sets, tags, subjects and exam dates you create, plus the study data the app generates as you learn: which segments you flag, your study log and streaks, spaced-repetition schedules, performance stats and time spent studying. This is the core of your account and is synced so it is available across your devices.

AI card generation

If you use the premium AI features, the notes you provide, whether typed or pasted text or a photo of your notes, are sent to our AI provider to generate cards for you. This content is processed only to create your cards; it is not used to train AI models. We also keep a running monthly tally of your AI usage to apply fair-use limits.

Purchases, subscriptions and codes

Premium subscriptions and Shop purchases are processed by Apple through the App Store (and our subscription manager). We receive confirmation of what you bought and your subscription status, but we never receive or store your card or payment details. Apple handles payment. If you redeem an access or promotional code, we record which code your account redeemed so each code is only used once per account.

Feedback and support

If you contact us or send feedback through the app, we keep your message, the category you chose, and the reply-to email you give us, so we can respond.

Beta waitlist

If you join the beta waitlist on this website, we collect your email address so we can tell you about the beta and the launch.

Memori Shop usage analytics

When you study a set you obtained from the Memori Shop, we collect anonymous usage analytics about that set (see “Sharing analytics with set providers” below). This is tied to a random per-installation identifier, not to your account.

Technical data

Like most apps and websites, we process limited technical information needed to deliver the service securely and reliably (for example, app and device information and basic logs from our hosting providers). Daily study reminders are scheduled locally on your device; we do not collect push notification tokens.

How we use your information, and our legal bases

Under UK GDPR we must have a lawful basis for using your data. We rely on the following:

• To provide your account and sync your study content across devices: necessary to perform our contract with you.
• To deliver premium and AI features you have purchased: performance of our contract.
• To send the beta-waitlist email and any marketing: your consent, which you can withdraw at any time.
• To process your AI content into cards: performance of our contract, and your consent when you choose to submit the content.
• To keep the service secure, prevent abuse, fix bugs and improve our product, including aggregate Shop analytics: our legitimate interests, balanced against your rights.
• To respond to your support requests and to meet our legal obligations.

Sharing analytics with set providers (Memori Shop)

The Memori Shop offers ready-made card sets created by Memori and third-party providers such as businesses, tutors and content partners. To help those providers improve their sets, we share usage analytics with them: for example, the total time learners spend on a set, how many cards are studied, how learners fare on individual cards (such as how often a card is answered right or wrong, or drilled in Focus mode), which segments learners most often flag as difficult, and when a set is added to a library, updated or removed.

This analytics data is designed to protect your privacy:

• De-identified. It is collected against a random, per-installation identifier, not your name, email or account. Providers only ever receive aggregate statistics about how their set performs across all learners, never your identity or anything that could single you out.
• Limited to Shop sets. Only sets you obtained from the Shop are measured this way. Sets you create yourself, and your private study content, are never shared with anyone.
• Not linked to your account. Because this data is not connected to your profile, it is not removed when you delete your account, as there is nothing identifying to remove.

We rely on the legitimate interests of Memori and our set providers in understanding how learning content performs and improving it, balanced against your privacy, which is safeguarded by the fact that this data is de-identified and only ever shared in aggregate.

Who we share your data with

We share your personal data only with the service providers who help us run Memori, and only as needed:

• Supabase: our database, authentication and cloud storage, which holds your account and study data.
• Anthropic: our AI provider, which processes the notes you submit to generate cards.
• Resend: our email provider, which sends transactional and waitlist emails to your address.
• Apple and our subscription manager: to process App Store purchases and subscriptions.
• Vercel: which hosts this website.
• Memori Shop set providers: they receive only the aggregate, de-identified analytics described above.

We may also disclose data where we are legally required to, or to protect our rights, users or the safety of others.

International transfers

Your account and study data are stored by Supabase in the United Kingdom (AWS eu-west-2, London), so the core of your data does not leave the UK. Some of our other providers, namely Anthropic (AI), Resend (email) and Vercel (website hosting), process data in the United States. Where data is transferred outside the UK, we rely on appropriate safeguards under those providers' data processing agreements (the UK International Data Transfer Agreement or Addendum, or equivalent Standard Contractual Clauses) so your data remains protected.

How long we keep your data

• Account and study data: kept while your account is active. When you delete your account (Profile → Delete account), it is erased; residual copies in backups are removed within a limited period.
• Beta waitlist email: kept until launch or until you ask us to remove it. Unsubscribing stops the emails and keeps a minimal record so we do not contact you again; ask us to delete it to remove it entirely.
• Feedback and support messages: kept to handle your query, and deleted with your account.
• Shop usage analytics: kept in aggregate, de-identified form, as it is not linked to you.

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal data, to data portability, and to withdraw consent at any time. You will not receive worse treatment for exercising these rights.

You can exercise them directly or by contacting us:

• Delete your data: in the app, Profile → Delete account removes your account and associated data. To delete a waitlist signup or any other data, email info@memoristudy.com.
• Get a copy of your data: in the app, Profile → Download data exports your account and study data. You can also ask us by email.
• Stop emails: use the unsubscribe link in any email we send, or email us.
• Anything else: email info@memoristudy.com and we will respond within one month.

Marketing and the beta waitlist

We only send you marketing, including beta and launch updates, where you have given consent, such as by joining the waitlist. Every marketing email includes a one-click unsubscribe, and you can opt out at any time. Unsubscribing does not affect essential service emails (for example, account or security messages).

Children

Memori is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us and we will delete it.

How we protect your data

We use industry-standard measures to protect your data, including encryption in transit and at rest, securely hashed passwords, and database access controls that keep your private content scoped to you. No system is completely secure, but we work to keep your data safe and to respond quickly if something goes wrong.

Changes to this policy

We may update this policy from time to time. When we do, we will update the date at the top, and we will let you know about significant changes where appropriate.

Contact us

For any question about this policy or your data, or to exercise your rights, email info@memoristudy.com.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to put things right first.