Privacy Policy
Last updated: July 7, 2026
This Privacy Policy explains what personal data Memoryist collects, why, and what rights you have over it.
1. What we collect
- Account data: email address, name, hashed password (if you sign up with email/password), or basic profile info from Google sign-in.
- Session data: session cookies used to keep you logged in.
- Uploaded content: books/PDFs you upload, and content extracted from them (text, images, OCR output).
- Generated content: quizzes, review schedules, generated audio (text-to-speech).
- Usage data: quiz attempts, review/study history, learning stats, notification preferences, usage counters (for example, uploads this month).
- Analytics data: only if you accept our cookie-consent banner — see Cookies below.
2. How we use your information
- To create and secure your account, and let you log in.
- To parse your uploaded materials and generate quizzes, spaced-repetition schedules, and audio read-alouds.
- To run OCR on scanned PDFs (Pro tier only).
- To send you optional email digests and web-push reminders, if you opt in.
- To show you your own learning stats and progress.
- To operate, secure, monitor, and improve the service, including understanding feature usage (only with analytics consent).
- To communicate with you about your account, billing, or service changes.
3. Subprocessors & third parties
We share limited data with the following providers, only as needed to run the service:
| Provider | Purpose | Data shared |
|---|---|---|
| Cloudflare R2 | File storage | Uploaded PDFs, extracted images, generated audio files |
| Hetzner | Server hosting (EU data centers, Germany/Finland) | All application data is stored on / passes through these servers |
| Mistral | OCR API (Pro tier, scanned PDFs only) | Images of scanned pages |
| DeepInfra | LLM API (quiz generation & grading) & text-to-speech (Pro tier) | Excerpts of your book text; text to be converted to audio |
| Resend | Transactional & digest emails | Your email address, email content |
| PostHog | Product analytics — only after you accept cookie consent | Usage/interaction events with consent; otherwise only an anonymous, non-identifying signup count |
| Paddle | Merchant of record — handles all payments | Billing/payment details; we never see your card number |
Free-tier uploads use a self-hosted parser and self-hosted text-to-speech (no third party involved for those). Pro-tier scanned-PDF OCR and premium audio use Mistral and DeepInfra respectively, as above.
4. Legal bases for processing (GDPR)
- Contract necessity: processing needed to provide the service you signed up for (parsing, quizzes, schedules, audio, account management, billing).
- Consent: analytics cookies (PostHog) — only after you actively opt in; optional email digests and push notifications — only if you opt in.
- Legitimate interests: service security, fraud prevention, and essential operational logs.
- Legal obligation: where billing records must be retained for tax/accounting purposes.
5. Data retention
- Account and content data are kept for as long as your account is active.
- If you delete your account, your personal data and uploaded content (including stored files) are deleted.
- Billing records may be retained longer where required by law or by Paddle’s own obligations as merchant of record.
6. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Export your data — available as a JSON export from Account settings.
- Delete your account and data — available from Account settings, or by emailing [email protected].
- Rectify inaccurate data — update your profile in Account settings, or contact us.
- Object to or restrict certain processing (for example, withdraw analytics consent, or opt out of email/push notifications).
To exercise any of these rights, use the in-app controls where available, or email [email protected]. We’ll respond within the timeframe required by applicable law.
7. Cookies
- Essential cookies: session cookies that keep you logged in. These are required for the service to function and don’t need consent.
- Analytics cookies: PostHog product-analytics cookies, used only if you accept our cookie-consent banner. Declining means a full opt-out — no analytics cookies are set and no usage events are collected.
Separately, when an account is created we record a single anonymous, cookieless signal — no name, no identifier, no device or usage data — so we can count signups and confirm registration is working. Because it identifies no one, it is unaffected by the choice above.
8. International data transfers
Our primary hosting (Hetzner) is in the EU (Germany/Finland), and OCR (Mistral) is processed in the EU. However, some of our subprocessors (Cloudflare R2, DeepInfra, Resend, PostHog, Paddle) may process data outside the EU, including in the United States.
Where a subprocessor processes data outside the EU/EEA, we rely on the EU Standard Contractual Clauses — or an equivalent approved safeguard such as the EU–U.S. Data Privacy Framework — as set out in that provider’s data processing agreement.
9. Children’s privacy
Memoryist is not intended for children under 13. We do not knowingly collect personal data from children below that age. If you believe a child has created an account, contact us and we’ll delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we’ll notify you (for example, by email or in-app notice) before they take effect.
11. Contact
Questions about this policy or your data? Email [email protected]. See also our Terms of Service.