1. Overview

Memgrain ("the Service") is operated by Steven Urry ("we", "us", "our"), who acts as the data controller for personal data processed through the Service. This Privacy Policy explains what information we collect, how we use it, our legal basis for processing, and the choices you have. We aim to collect only what we need to operate and improve the Service.

2. Information We Collect

Account data: email address and authentication identifiers.
Study content: notes, documents, URLs, and texts you upload, plus the flashcards, quizzes, and memorized texts you generate or save. Once your flashcards or quizzes are generated we delete the content you uploaded.
Usage data: study activity, progress metrics, and rate-limit counters used to operate the Service.
Billing data: processed by our payment provider; we store only the subscription identifiers we need to manage your plan.

3. How We Use Information

To provide, maintain, and improve the Service.
To generate AI-powered flashcards, quizzes, hints, and explanations from content you submit.
To track study progress and display dashboards and statistics to you.
To enforce rate limits and prevent abuse.
To process subscriptions and respond to support requests.

4. AI Processing

Content you submit for AI generation may be sent to third-party AI providers solely to fulfill your request (e.g. generating flashcards or explanations). We do not use your content to train AI models.

5. Data Storage & Security

Data is stored on secure cloud infrastructure with row-level security so that your study content is only accessible to you. We use industry-standard safeguards but cannot guarantee absolute security.

5a. Legal Basis for Processing

Where applicable law (such as the GDPR) requires a legal basis for processing personal data, we rely on:

Performance of a contract: to provide the Service you have signed up for, including authentication, generating study content, and managing your subscription.
Legitimate interests: to secure the Service, prevent abuse, enforce rate limits, and improve product quality.
Legal obligation: to comply with tax, accounting, and other applicable laws.
Consent: where required, for example for non-essential cookies.

5b. Data Retention

We retain personal data only as long as needed for the purposes set out in this Policy. Account and study content is kept while your account is active and deleted on request or shortly after account deletion. Source content uploaded for AI generation is deleted once the flashcards or quizzes have been generated. Billing records held by Paddle are retained for the period required by applicable tax and accounting law (typically 6–10 years). Backups are rotated and overwritten on a regular schedule.

6. Sharing

We do not sell your personal information. We share data only with service providers required to operate the Service, under appropriate confidentiality obligations, or when required by law. Categories of recipients include:

Hosting and database infrastructure for storing your account and study content.
Authentication providers for sign-in.
AI inference providers to process content you submit for flashcard, quiz, and explanation generation.
Paddle.com Market Limited ("Paddle"), our Merchant of Record, which handles checkout, payment processing, subscription billing, refunds, invoicing, and tax compliance. Paddle acts as an independent controller for the billing data it collects. See Paddle's privacy notice.
Professional advisers and authorities where required by law.

7. Your Choices

You can edit or delete your study content at any time within the app.
You can cancel your subscription from your account settings.
You can request deletion of your account, which removes your associated data.

8. Cookies & Advertising

We use cookies and local storage for authentication, preferences (such as theme), and to keep your study session state.

We also display advertising provided by Google AdSense. Google and its partners (third-party vendors) use cookies and similar technologies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to Memgrain and/or other sites on the Internet.

You may opt out of personalized advertising by visiting Google Ads Settings.
You may also opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info.
For users in the EEA, UK, and Switzerland, Google presents a consent choice before serving personalized ads, in accordance with Google's EU user consent policy.

See Google's Advertising Policies and Privacy Policy for more information.

9. Children

The Service is not directed to children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

For privacy questions or to exercise your rights regarding your data, please reach out through the support channel listed in your account settings.