Mnemes
Mnemes

Privacy Policy

Last updated Draft

This policy covers mnemes.ai, the Mnemes account at account.mnemes.ai, Mnemes Cards at cards.mnemes.ai and Mnemes Board at board.mnemes.ai.

Who we are

Mnemes is run by [LEGAL NAME], [ADDRESS]. Write to hello@mnemes.ai with any question about this policy or about your data.

What we collect

  • Your account: your email address and a hash of your password, so you can sign in. If you sign in with Google, the email address and name Google gives us, and nothing else.
  • In Cards: the decks and cards you create, the pictures and sounds you add to them, and your review history. Reviews are stored because scheduling is not possible without them.
  • On a Board: the boards you make or join, what you put on them (PDFs, pictures, videos, notes and documents), and who is on a board at a given moment.
  • On this site: mnemes.ai runs no script and sets no cookie. Its web server logs each request (IP address, page, time and browser) to keep the site running and safe, and keeps the log for [RETENTION].

What we do with it

We use it to run the service: to sign you in, to schedule your reviews, to show you your own cards and the boards you belong to, and to keep a board in step for everyone on it. We do not sell it and we do not share it with advertisers.

What you put on a board is seen by everyone on that board. While you are on a board, the others there see your name and where your cursor is.

Who else handles your data

  • DigitalOcean runs the service and its databases in Frankfurt, so it holds everything above, to host it.
  • Amazon Web Services (S3) stores the files you add (pictures and sounds on cards; PDFs and pictures on boards) and a nightly backup of each database, to keep them and restore them after a failure. Both are in Paris (eu-west-3).
  • Brevo gets each email we send and the address it goes to, to deliver it: the verification email, the password reset email, and invitations.
  • Google, only when you choose to sign in with it, tells us who you are, to sign you in.
  • YouTube: a YouTube video on a board is played from YouTube, which then receives what a browser sends to any website it loads from, including your IP address. [CONFIRM: whether Board embeds from youtube-nocookie.com, and whether anything loads before you press play.]
  • Sentry gets an error report from Cards and the id of the signed-in account (no email address, no card text), to let us find and fix the error.
  • PostHog gets the pages you open in Cards, the actions in it that we count, and the id of the signed-in account (no email address, no card text, no IP address or location), to learn which parts of the app are used. Its data is in the EU.
  • OpenRouter passes each AI request to a model from one of the vendors behind it ([CONFIRM the current list for Cards and Board]; some of them are in China). In Cards it gets the prompt, what you typed into it and the field names of the card type, to write new cards; your existing cards and review history are not sent. On a Board it gets the PDF page you ask to rewrite and the prompt. The model vendors may not use your text to train their models.

Cookies

One cookie, holding your session, set by the Mnemes account when you sign in and cleared when you sign out. There is no advertising or cross-site tracking cookie. Our analytics (PostHog, in Cards) sets no cookie and stores nothing in your browser.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it, and you can object to how we use it. You can export a folder’s cards from Cards as a CSV file, and you can delete your account along with what it owns. If you are in the EU or the UK, you can also complain to your data protection authority.

Children

[CONFIRM: the minimum age to hold an account, and how a school or a parent agrees for a younger student.]

Changes

When this policy changes, the date at the top changes with it. [CONFIRM: how account holders are told of a significant change, for example by email.]