1. Who we are and what this covers
Memiqo is operated by SOFTAM S.R.L., a Romanian limited-liability company (societate cu răspundere limitată), with its registered office at Str. Vlad Dracul nr. 9, bl. C9, sc. 1, et. 7, ap. 30, Sector 3, 031193 București, Romania (trade register number J2025005627003, CUI 51429075). SOFTAM S.R.L. is the controller of your personal data under the GDPR. You can reach us at hello@memiqo.io. The Legal notice lists all company details.
This policy applies to the Memiqo website (memiqo.io), the Memiqo app (app.memiqo.io), the Memiqo server that the app talks to (api.memiqo.io) and email you send us.
2. What we store
Your Google account
Memiqo only offers sign in with Google. We receive your Google account ID, email address, name and profile picture URL. We never see your Google password.
Your study material
The files you upload (PDF, DOCX, PPTX, TXT, PNG, JPG), the text we extract from them, and the topics, questions, explanations, source quotes, flashcards and notes we write from that text. We keep an uploaded file only until its text has been read: it is deleted about an hour later. A file whose upload is never completed is deleted after 24 hours. The text and everything written from it stay in your pack.
Your progress
Your answers, scores per topic, mastery, streak, daily goal and which mode you played. This is what makes spaced repetition work.
Payments
If you choose Pro, Stripe handles the payment. We store your Stripe customer ID, plan and subscription status. You enter your card details on the page of Stripe, so we never see or store your card number.
Technical basics
One cookie that keeps you signed in, your theme and sound settings in your browser, and standard server logs (IP address, browser, times) kept for security and to find and fix faults.
3. Why we use it
To sign you in, read your files, write your questions, keep your progress, bill Pro subscriptions, keep the service secure and answer your emails. We do not sell your data and we do not use your material to advertise to you.
Under the GDPR, we use your data to provide the service you asked for (performance of a contract), we keep payment records because tax law requires it (legal obligation), and we keep server logs to protect the service (legitimate interest).
4. Who helps us process it
A short list of providers. Each one only receives what it needs for its job.
- Vercel: hosts the website and the app, and sends their pages to your browser.
- Railway: hosts the Memiqo server and the database, in the EU (Amsterdam, the Netherlands).
- Amazon S3 (Amazon Web Services): stores the files you upload, in Frankfurt, Germany, only until their text has been read.
- Google: sign in.
- OpenAI: receives the extracted text from your files to write topics, questions, explanations and notes.
- Mistral: receives photos and scanned pages to read the text on them (OCR).
- Stripe: payments and subscription management.
- ImprovMX: forwards the email you send to hello@memiqo.io to our mailbox.
Your material is not used by these providers to train their models under the agreements we use with them. Some providers are outside the EU; where that is the case, standard contractual clauses or equivalent safeguards apply.
5. Who can see your packs
Only you. Packs are private to your account and are never shared with other students, shown publicly or used as examples. We only look at your content if you ask us to help with a problem, or if the law requires it.
6. How long we keep it
Your packs, questions and progress stay for as long as your account exists. Uploaded files are deleted once their text has been read, as described above. Deleting a pack removes its text, questions and progress. Deleting your account removes everything. Database backups are kept for up to one month and then deleted. Payment records are kept as long as tax law requires.
7. Deleting your account
Open Settings in the app and choose Delete account, then type DELETE to confirm. If you have not signed in recently, the app asks you to sign in with Google again first. Your packs, progress and profile are then deleted, and any active Pro subscription is cancelled. Stripe keeps its records of past payments, as the law requires. You can also email us and we will do it for you.
8. Your rights
Depending on where you live (for example under the GDPR), you can ask to access, correct, export or delete your data, or object to how we use it. Email hello@memiqo.io and we will respond within 30 days. You can also complain to your local data protection authority.
9. Cookies and browser storage
The website sets no cookies. If you change its colour theme, your choice is saved in the local storage of your browser.
The app uses one cookie, set by api.memiqo.io, which keeps you signed in for up to 14 days. Scripts on the page cannot read it, and it is sent only when the app renews your sign-in or signs you out. The app also saves your theme and sound settings in local storage, and the page to return to after sign in in session storage.
All of these are needed for Memiqo to work, so we do not ask for consent to them. There are no advertising cookies, no analytics and no third party trackers on the website or in the app. Google and Stripe set their own cookies on their own pages when you sign in or pay.
10. Security and younger users
Files are encrypted at rest and in transit, access is scoped to your account and secrets are managed outside the codebase. No service can promise perfect security; if you think something is wrong with your account, tell us. Memiqo is meant for university students and is not directed at children under 16.
11. Changes
When the product or our providers change, this page changes too. The date at the top is the latest version. Significant changes are announced in the app.