Privacy policy

This policy explains which personal data Memorics processes, why, on what legal basis, who else receives it, how long it is kept, and which rights you have under the General Data Protection Regulation (GDPR). For the main points in plain words, read the privacy FAQ.

Who is responsible

The controller is Johannes Schießl, whose address is in the Impressum. For anything about your data, write to privacy@memorics.app.

In short

• Memorics has no ads, no tracking and no analytics, and doesn’t sell your data.
• Your account and everything you study is stored in data centers in the European Union.
• The assistant’s AI providers don’t keep what you send them and don’t train on it.
• Memorics only stores what it needs on your device to work, so it doesn’t ask for cookie consent.

Visiting the website and the app

When you open memorics.app, your browser sends your IP address, the address of the page, and information about your browser and device. Memorics needs this to deliver the pages and to protect the service against attacks (Art. 6(1)(f) GDPR: our legitimate interest in a working, secure service). Memorics doesn’t keep a log of the pages you request. If an error happens in the assistant, a technical error report is kept for at most 7 days, to fix it. It doesn’t contain your IP address.

The website and the app load everything from memorics.app itself, including fonts and images, so your browser doesn’t contact other companies while you browse. The links to our profiles on Instagram, TikTok and Threads are plain links: those services only learn about you if you open them.

Your account

You sign in with your Google account. Google tells Memorics your name, your email address, whether it’s verified, and an ID for your Google account, and gives Memorics the sign-in tokens of that sign-in. Memorics stores these to create your account and recognize you when you sign in again. Memorics doesn’t keep your Google photo and can’t access anything else in your Google account. Legal basis: Art. 6(1)(b) GDPR (providing the service you signed up for).

When you agree to the terms of service, Memorics stores which version you agreed to, and when, so that it can show which terms apply to you (Art. 6(1)(b) and (f) GDPR: our interest in being able to prove the agreement). This is deleted with your account.

For each device you’re signed in on, Memorics stores the session with its IP address, the browser and system you use, and when you signed in and last used it. This keeps you signed in, protects your account, and lets you see and sign out your devices in Settings (Art. 6(1)(b) and (f) GDPR). A session ends 7 days after you last used it, or when you sign out.

Signing in itself happens at Google, under Google’s privacy policy. Google is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

What you study

Memorics stores what you put into it and make with it, to provide the service (Art. 6(1)(b) GDPR):

• your topics, cards and exams, and the sources you add: files you upload, links and texts
• your study progress: how well you know each card, when you last reviewed it and when it’s due
• your settings, such as your time zone and the instructions you give the assistant

When you add a YouTube video as a source, Memorics’ server asks YouTube for the video’s title and still image and stores them with the source. Your browser doesn’t contact YouTube for this.

Your profile and what others see

You choose a username. Your profile shows it with an avatar made from your account, your published topics and your friends, and everyone signed in to Memorics can see it. Your name and email address from Google are never shown to anyone else.

A topic is only yours until you share it by link or publish it. Then everyone signed in who has the link, or finds it on Explore if you published it, can see its cards and subtopics. Its sources always stay private: only you see them. You can stop sharing or publishing at any time. Legal basis: Art. 6(1)(b) GDPR.

The assistant

When you use the assistant, including making cards with it, Memorics sends what it needs to answer to an AI model: your messages and what you attach to them, the topics, cards and sources it reads, what it remembers about you, your instructions and your username. Your chats, what the assistant remembers about you and your skills are stored in your account until you delete them. You can read, change or clear what it remembers, or turn its memory off, in Settings. Memorics also records how much each answer costs, to count your allowance. Legal basis: Art. 6(1)(b) GDPR.

The models are reached through OpenRouter, Inc., USA, and run by Microsoft (Azure). Memorics only uses providers that don’t keep what they’re sent and don’t use it to train their models.

Playing YouTube videos

A YouTube video in your sources only plays after you click play. Then your browser loads the video from YouTube (youtube-nocookie.com), which sends your IP address and information about your browser to Google, and YouTube may store information on your device. By clicking play, you consent to this (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Until you click, nothing is loaded from YouTube. YouTube is a service of Google Ireland Limited, under Google’s privacy policy.

Early access to Plus

If you ask for early access to Plus, Memorics stores your request with its message and the decision on it, to answer it (Art. 6(1)(b) GDPR).

Emails to us

If you write to us, we use your email address and what you write to answer you, and keep it for as long as we need to (Art. 6(1)(b) GDPR if it’s about your account, otherwise Art. 6(1)(f) GDPR: our interest in answering).

What Memorics stores on your device

Memorics stores only what it needs to work on your device:

• Cookies that keep you signed in and protect signing in with Google.
• Local storage for your choices and your work in progress: your theme, the size of panels, the assistant chat you had open, card drafts you haven’t saved, a study session in progress and how fast you answered lately, progress that hasn’t been sent yet while you’re offline, and your last choices for making cards.
• A copy of what you study: the topics and cards you study and your progress on them, as Memorics last showed them, so that opening the app again only asks Memorics what changed. It is kept for up to 30 days.
• The app itself, saved by your browser so it opens quickly and works offline.

All of this is needed for the service you asked for, so it’s allowed without consent (§ 25(2) no. 2 TDDDG), and Memorics doesn’t show a cookie banner. Memorics stores nothing on your device for tracking, analytics or ads. Signing out or clearing your browser’s data removes it.

Who processes your data for Memorics

• Cloudflare, Inc., USA, runs Memorics: it delivers the website and the app and stores your account and everything in it. Your data is stored in Cloudflare’s data centers in the European Union. Requests pass through Cloudflare’s network on the way, at the location nearest to you, which can be outside the EU.
• OpenRouter, Inc., USA, and Microsoft Corporation, USA, through Azure, for the assistant (see above).
• Google for signing in, and YouTube only when you play a video (see above).

Cloudflare and OpenRouter process your data on our behalf, under data processing agreements (Art. 28 GDPR). Memorics doesn’t sell or rent your data, and gives it to no one else unless the law requires it.

Transfers outside the EU

Cloudflare, Microsoft and Google are certified under the EU-U.S. Data Privacy Framework, which the European Commission has found to protect personal data adequately (Art. 45 GDPR). OpenRouter is bound by the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

How long data is kept

• Your account and everything in it are kept for as long as you have your account.
• What you move to the trash is deleted for good after 30 days.
• When you delete your account in Settings, everything in it is deleted right away. Its files follow within a day.
• Sessions end 7 days after you last used them. Error reports are deleted after at most 7 days.

Your rights

You have the right to:

• get a copy of your data and information about how it’s processed (Art. 15 GDPR)
• have wrong data corrected (Art. 16 GDPR)
• have your data deleted (Art. 17 GDPR): you can delete your account yourself in Settings
• have its processing restricted (Art. 18 GDPR)
• receive your data in a common, machine-readable format (Art. 20 GDPR)
• object to processing that is based on our legitimate interests, for reasons that arise from your particular situation (Art. 21 GDPR)
• withdraw a consent you gave at any time, for the future (Art. 7(3) GDPR)

To use them, write to privacy@memorics.app. You also have the right to complain to a data protection authority (Art. 77 GDPR), for example the one where you live.

Do you have to provide your data?

You need a Google account, and Memorics needs your name and email address from it, to create your account. Without them, you can’t use the app, but you can still read the website. Memorics makes no decisions about you based solely on automated processing (Art. 22 GDPR).

Changes

When Memorics changes what it does with your data, this policy changes with it. The date at the top shows when it last changed.