Privacy Policy

1.1Controllers

Victor Plesco and Vladimir Sandic, private individuals, Elisabethstraße 32/5, 8010 Graz, Austria. Email: office@einmemo.com.

1.2Joint controllers

We decide together how your data is used, so we are joint controllers (Art. 26 GDPR). Either of us answers any request about your data, and you may exercise your rights against either of us.

2.1Your email address and messaging app

We use your email address and the messaging app you choose on the sign-up form to send you your code and information about your access, because you asked for it (Art. 6(1)(b) GDPR), and keep them until you ask us to delete them. If we stop einmemo, we delete the list of sign-ups.

2.2Your code

We use your code to send it to you and recognise it in the chat, as our contract with you requires (Art. 6(1)(b) GDPR), and keep it as long as your email address.

2.3Hosting and server logs

Cloudflare hosts this site and processes your IP address to deliver it to you and protect it from attacks. When something goes wrong with a sign-up, we log it with your email address shortened to its first letter and domain (for example v***@gmail.com) and a short code made from it with a secret key, never with your IP address. Both are our legitimate interest in running the site securely and fixing errors (Art. 6(1)(f) GDPR). Cloudflare deletes these logs after 7 days.

2.4Rate limit

We check your IP address and email address against a rate limit to stop spam and abuse of the form, which is our legitimate interest (Art. 6(1)(f) GDPR), and hold them in memory only, deleting them within the hour.

2.5Sign-up note

For each sign-up, we post a note with a short code made from your email address with a secret key to our private team chat on Telegram, so we know that sign-ups work, which is our legitimate interest (Art. 6(1)(f) GDPR); the note stays as long as the team chat keeps it. The code does not name you, and nobody without the key can tell whose sign-up it was.

3.1How Memo reads your messages

Memo is an AI. It reads only what you send it and can make mistakes, so check anything important.

3.2What Memo processes

Everything you send Memo in your messaging app: messages, voice notes and photos, including screenshots, and your account ID in that app, which for some apps is your phone number. Memo does not read your name in the app. Memo uses what you send to save your timezone, city, contacts, reminders and calendar entries, to pass feedback you give to us, and to write and send the emails and calendar invites you ask for. It sends them from memo@einmemo.com. The person who receives such an email sees your request and the details you gave for it.

3.3AI providers

To read your messages, voice notes and photos, Memo passes them to AI model providers (see Recipients). Memo makes no decision about you that has legal or similarly significant effects (Art. 22 GDPR).

3.4What Memo keeps, and why

Memo does not store your voice notes and photos; it keeps what it read from them.

• Memo keeps your messages and what it read from voice notes and photos to do what you ask, under our contract with you (Art. 6(1)(b) GDPR), as long as your account exists, and deletes them within one month after you ask us.
• Memo keeps your timezone, city, contacts, reminders and calendar entries because you asked it to (Art. 6(1)(b) GDPR), as long as your account exists, and deletes them within one month after you ask us.
• Memo keeps the emails and invites it sent for you as a record of what it sent at your request (Art. 6(1)(b) GDPR), as long as your account exists, and deletes them within one month after you ask us.
• We use feedback you send us, and read conversations, to find and fix errors and improve Memo, which is our legitimate interest (Art. 6(1)(f) GDPR), and keep feedback as long as your account exists.
• Memo keeps technical logs (account and chat ID, message lengths and errors, never what you write) for 30 days, and a record of each action it takes for one year, to stay secure and to fix errors, which is our legitimate interest (Art. 6(1)(f) GDPR).

3.5Group chats

Memo works only in private chats. If someone adds Memo to a group chat, Memo replies that it works only in private chats and processes nothing else.

3.6Other people in what you send

Memo uses the details of people you name in your messages or photos, save as a contact, or ask it to email or invite only to do what you asked, because organising your own life is your legitimate interest (Art. 6(1)(f) GDPR), and keeps them as long as the item they appear in or, for a contact, until it is deleted.

4.1Processors

These providers process your data for us, only on our instructions (Art. 28 GDPR).

• Hetzner Online GmbH: runs Memo's server in Nuremberg. Germany, EU
• Supabase Inc.: stores your account, contacts, reminders, calendar entries, the emails Memo sent, feedback and a backup of your chat with Memo. Data in Ireland, EU; Supabase is a US company.
• GitHub Inc.: holds an old backup of past chats with Memo until we delete it. United States, under the EU–US Data Privacy Framework (adequacy decision, Art. 45 GDPR).
• Requesty Ltd.: passes your messages, voice notes and photos to the AI models, without storing their content. United Kingdom, under the EU adequacy decision for the UK (Art. 45 GDPR)
• Anthropic PBC: its model Claude reads your messages and writes Memo's replies, and its tool Claude Code helps us review conversations and feedback to fix errors. United States.
• Google LLC: its model Gemini reads your voice notes and photos. Outside the EU.
• OpenRouter Inc.: passes your messages, voice notes and photos to the AI models only when Requesty fails. United States.
• Brevo (Sendinblue SAS): stores the list of sign-ups, sends the code email, and sends the emails and invites Memo writes for you. France, EU
• Axiom Inc.: stores Memo's technical logs for 30 days. Data in the EU; Axiom is a US company.
• Atlassian (Trello): holds our task board, which can quote feedback you send us. United States.
• Cloudflare, Inc.: hosts this website and keeps its error logs for 7 days. It serves each visit from a data centre near you, so mostly in the EU; Cloudflare is a US company, under the EU–US Data Privacy Framework (adequacy decision, Art. 45 GDPR)

4.2Messaging apps

The messaging app you use carries your chat with Memo, and Telegram carries our team note. Each app acts as a controller in its own right, under its own privacy policy, not for us. We disclose data to anyone else only where the law requires it.

5.1Your rights

You have the right to access your data and get a copy (Art. 15 GDPR), have wrong data corrected (Art. 16), have your data deleted (Art. 17), have our processing restricted (Art. 18), receive your data in a portable format (Art. 20), object to processing based on legitimate interest (Art. 21), and withdraw your consent at any time, without affecting what was done before (Art. 7(3)).

5.2How to use them

Write to office@einmemo.com. This includes having everything Memo keeps about you deleted. It is free, and we answer within one month.

5.3Do you have to give us data?

No, and no law requires it. Without an email address we cannot send you a code; without what you send, Memo cannot work.

5.4Complaints

You can complain to the Austrian data protection authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, Austria, dsb.gv.at. You can also complain to the authority in the EU country where you live or work (Art. 77 GDPR).