Privacy Policy

1. Introduction

Memendo GmbH ("we," "us," or "our") operates the Memendo mobile application (iOS and Android), the Memendo web app at app.memendo.co, and the website at memendo.co (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Memendo, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Data controller

The controller responsible for the processing of your personal data is:

See also our Impressum (legal notice).

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name (if provided via Google or Apple sign-in)
• Authentication provider identifier (Google, Apple, or email)

2.2 User Content

We store the content you create within the app, including:

• Notes and documents (text, images, checklists, tables, code blocks)
• Files, images and scanned documents you upload
• Tasks, deadlines and reminders
• Categories, folders, tags and projects
• If you share a note: the email addresses of the people you invite

2.3 AI Assistant Data

When you use the AI features (such as the Memo assistant, summarizing or enhancing a note, or asking questions about your notes), the content you submit is sent from our servers to Google's Gemini API for processing. This can include the text of the note you are working on, your question or instruction, relevant excerpts of your other notes, and images or files you attach to the request.

To let you search and ask questions across your notes, the text of your notes is also converted into numerical representations ("embeddings") by Google's Gemini embedding model. The embeddings are stored with your account.

Google processes this content under its own terms (see section 5). We also keep a usage record of each AI request (feature, model, number of tokens and time) to enforce usage limits and control costs.

If you choose to connect an external AI assistant to your Memendo account through the web app's integration settings, the content you allow it to access is shared with that service under your own agreement with its provider.

2.4 Device & Usage Information

We automatically collect:

• Device type, operating system, and version
• App version
• Usage events in the mobile app (for example, which screens or features are used and how far you get in onboarding). These events describe actions, not the content of your notes.
• A push notification token for your device, if you allow notifications
• Technical request data such as your IP address in the server logs of our hosting and cloud providers

If you have chosen to share diagnostics with app developers in your device settings, Apple and Google may also provide us with anonymised crash reports.

We do not use Firebase Analytics or Google Analytics, and we do not use advertising or ad-tracking SDKs.

2.5 Subscription & Payment Information

Payments for Memendo Premium in the mobile apps are processed entirely by Apple (App Store) or Google (Google Play). Payments for Premium subscriptions started in the web app are processed by Stripe. We do not collect or store your payment card details, billing address, or other financial information. We receive only the status of your subscription (for example, the plan, its renewal date and whether it is active) and related identifiers from the respective provider. We use RevenueCat to manage and verify subscriptions in the mobile apps (see section 5).

2.6 Emails We Send

We send emails only for things you trigger yourself: password reset and email verification messages, and an invitation email when you invite someone without a Memendo account to a shared note. We do not operate a newsletter.

2.7 Cookies

Our website uses only essential cookies required for basic site functionality. We do not use tracking or advertising cookies. The web app stores your sign-in session and preferences (such as your language) in your browser's local storage so that it can work.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Sync your notes, tasks, and data across your devices
• Process AI Assistant requests
• Manage your account and subscription
• Send important service notifications (e.g., security alerts, feature updates)
• Analyze usage trends to improve features and performance
• Detect, prevent, and address technical issues or abuse

4. Data Storage & Security

Your data is stored using Google Firebase, which provides industry-standard security measures:

• Encryption at rest: All stored data is encrypted
• Encryption in transit: All data transfers are protected with TLS (Transport Layer Security)
• Access controls: Strict authentication and authorization mechanisms
• Local caching: Notes are cached locally on your device for offline access

While we implement commercially reasonable security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

5. Third-Party Services (Processors)

We use the following service providers to operate Memendo. They process personal data on our behalf for the purposes described below.

6. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in these cases:

• Service providers: With third-party providers listed above, solely to operate the Service
• Legal requirements: When required by law, regulation, or legal process
• Safety: To protect the rights, property, or safety of Memendo, our users, or others
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to users

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data and content within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, resolving disputes).

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

For all users

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Export: Request a portable copy of your data

For EU/EEA residents (GDPR)

• Restriction: Request restriction of processing
• Objection: Object to processing based on legitimate interests
• Portability: Receive your data in a structured, machine-readable format
• Withdraw consent: Withdraw consent at any time where processing is based on consent
• Lodge a complaint: File a complaint with your local data protection authority. In Austria this is the Datenschutzbehörde (dsb.gv.at)

For California residents (CCPA)

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at support@memendo.co. We will respond within 30 days.

9. Children's Privacy

Memendo is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@memendo.co.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers (such as Google, Stripe and RevenueCat) maintain servers. For example, our server-side functions run in Google's US Central region. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required, to protect your data in accordance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice through the app or via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: