Privacy policy

Who runs Memvi

Memvi is run by Healthy Steps LLC, 1 Radisson Plaza, Suite 800, New Rochelle, NY 10801, United States. We are the controller of the personal data described here. For anything about your data, write to help@memvi.app.

What we store

• Your account: email address and name. If you sign in with Google or Apple, we also keep the account ID they give us, so we can recognise you next time. With Apple’s “Hide my email” we only see the relay address Apple creates. New accounts have no password; accounts made before passwordless sign-in may still hold a password hash.
• Your answers during setup: who you are (for example student or teacher), school level and year, field and first subject, goals, exam timing, daily study time, and how you heard about us. You can skip the last one.
• What you add to study: text you paste, PDFs, audio files, web links and the text of those pages, and the notes, quizzes, flashcards, and chats made from them. Files sit in private storage, not at public links.
• Your plan: whether you have Plus, the plan, and when it renews or ends. Payments are handled by our payment partners. We never see or store your full card number.
• Messages to support that you send from the app.

Some settings, like theme, accent color, language, and your profile photo, stay in your browser and are not sent to us. Your study reminder choices (email, app notifications, time, and time zone) are kept with your account, so the website and the app show the same.

Why we use it

• To create your account and sign you in.
• To turn your material into notes, quizzes, flashcards, and answers. Quizzes and flashcards are built on our own servers.
• To transcribe audio and translate notes, only when you use those features.
• To run the free plan (up to 3 notes) and Plus, and to take payment for Plus.
• To send emails you ask for, like sign-in links, and important messages about your account or subscription.
• To tailor suggestions during setup, answer support requests, keep the service safe, and understand in aggregate who uses Memvi so we can improve it.

We rely on our contract with you to provide the service, on our legitimate interest to keep it safe and improve it, and on legal obligations for payment records. Ad attribution in the iOS app that uses your device’s advertising identifier relies on your consent, which you can withdraw at any time in iOS Settings.

Who helps us run it

These companies process data for us, only to provide their part of the service:

• Vercel: hosting the app and storing uploaded files.
• Neon: the database with your account and study material.
• OpenAI: transcribing audio you upload and translating notes you ask to translate. Under OpenAI’s API terms, this data is not used to train their models.
• RevenueCat and Stripe: subscriptions and card payments on the web. In the iOS app, payments go through Apple.
• Google and Apple: signing in, if you choose them.
• Resend: sending sign-in links and account emails.

Some of these companies are in the United States. Where data leaves the European Economic Area, transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. We don’t sell your data. The only data that reaches ad networks is the ad measurement in the iOS app described below, and only if you allow it.

Cookies

We only use cookies the service needs to work:

• A sign-in cookie that keeps you logged in for up to 30 days.
• Short-lived cookies, for up to 10 minutes, that protect sign-in with Google or Apple.

The checkout window from our payment partners may set its own cookies to process and protect payments. We use no advertising or analytics cookies.

Ads and tracking in the iOS app

We advertise Memvi, and we want to know which ads actually bring students, so we can stop paying for the ones that don’t. The iOS app asks you once, with Apple’s “Allow tracking” question, whether it may do this. Saying no changes nothing else in the app.

• If you allow tracking, the app shares your device’s advertising identifier and its identifier for our apps with RevenueCat, together with your account ID and whether you start a trial or buy Plus. RevenueCat can pass these events to the ad networks we advertise with, so they can tell us which ad led to the install or purchase.
• Apple Search Ads: the app sends Apple’s attribution token to RevenueCat, which asks Apple which search ad, if any, led to the install. Apple provides this without tracking you across apps.
• Meta and TikTok: the app includes their measurement code (Meta’s SDK and TikTok’s App Events SDK). It tells them when the app is installed and opened, and TikTok also when you buy Plus, with the advertising identifier only if you allow tracking. Meta also gets your trials and purchases from RevenueCat. Without your permission they only get the aggregated, anonymous attribution Apple provides (SKAdNetwork). We don’t show ads, and we don’t use what you study for advertising.

You can change your answer any time in iOS Settings, under Privacy & Security, Tracking. The website uses no tracking. Study reminders are sent by the app on your phone, at the time you choose; turn them off in Settings in the app or in iOS Settings.

How long we keep it

We keep your account and study material until you delete them. Sign-in links expire after 15 minutes and work once. When you delete your account in Settings, we delete it and everything stored with it. Payment records that the law requires are kept by our payment partners for the period the law sets.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to move it to another service, or to stop using it for a purpose you object to. You can delete your account yourself at any time in Settings. For anything else, write to help@memvi.app; we answer within 30 days. You can also complain to your data protection authority (in Poland: Prezes UODO, uodo.gov.pl).

Children

Memvi is for students, some of whom are young. You must be at least 13 to create an account, and if you are under 16, you need a parent’s or guardian’s permission. If you believe a child has given us data without permission, contact us and we will delete it.

Changes

If we change this policy, we update the date at the top. If a change matters for how we use your data, we tell you in the app or by email before it takes effect.