Mewmory privacy policy

Your library and cloud sync

Cards, images, folders, review history and preferences are stored on your device. After onboarding, a private guest session automatically syncs your library to our server over HTTPS. Cloud sync is limited to 32 MB including images. The server keeps the current library and up to three earlier versions for recovery. Daily server backups expire after seven days.

Android may also back up local app data according to your device's system backup settings. Secure session credentials are excluded from Android backup. System backups and exported copies are controlled separately from our cloud service.

Optional Google linking

You may link a Google account to recover your library on another device. We receive your verified email address and Google account identifier. We do not receive your Google password. A random session credential is stored in Android secure storage or an HttpOnly browser cookie.

Optional AI features

When you ask for AI generation or an explanation, your selected text, photos, PDF or card content is sent through our server to OpenAI. Requests use the Responses API with storage disabled. OpenAI processes the material under its privacy policy; provider security and abuse-prevention retention may still apply. Avoid submitting sensitive material. AI output can be inaccurate; review cards before saving. Hiding AI features does not disable cloud sync.

Using AI while cloud sync is off creates a private guest account on our server. It stores a random account identifier, a session credential and usage counters, but no library. You can delete it in Settings → Cloud sync → Delete cloud account.

Purchases and Mewmory Pro

Google Play processes the purchase of the app and any Mewmory Pro subscription. We never receive your card number or other payment details. Your purchase includes a monthly AI allowance; the optional Mewmory Pro subscription raises it. When you subscribe or restore purchases, the app sends the Google Play purchase token to our server. The server checks it with Google Play and stores only that token and the subscription's product, plan, status, renewal setting and expiry date, tied to your anonymous account.

The app gives Google Play a one-way hash of your anonymous account identifier so a purchase can be matched to the right account; it contains no name or email. Google Play may notify our server when a subscription renews, lapses or is refunded. We count your monthly AI requests to apply your allowance.

Sharing decks

You can create a portable deck file containing its questions, answers, tags and images. Shared files exclude your study progress, folders and account details. Sharing and importing these files happen on your device without a sharing server. The app you choose to send the file processes it under its own policy, and recipients can retain or forward it. Imported decks become part of the recipient's library and follow their cloud sync settings.

Permissions and technical data

Camera access is requested only when taking a photo. Selected photos and files are accessed through Android system pickers. Notification permission is requested only if you enable a daily reminder. We process IP addresses and a random app-installation identifier for AI rate limiting. The installation identifier is stored separately from your library and excluded from exports and sync. The server stores quota counts keyed by account identifiers and hashes of installation IDs and IP networks. Linked accounts use a hash of their verified Google identifier. These anti-abuse counters can survive account deletion until expiry; expired counters are pruned when subsequent AI requests are processed. We do not sell personal data or display advertising. Anonymous analytics and crash reports are described below.

Anonymous analytics and crash reports

Mewmory sends anonymous usage events and crash or error reports to PostHog, hosted in the EU (eu.i.posthog.com). Events describe things such as the screens you open and whether an AI request or import succeeded, using counts and categories such as cards created or minutes studied. They never include your cards, decks, notes, images, file names or account details. The app does not identify you by email or Google account, and session replay and text capture are off. PostHog (EU) derives approximate location (country and city) from the IP address of each request. Crash reports include the app version, the error message and the stack trace. You can turn this off in Settings → About → Share anonymous usage & crash data, and nothing is sent while it is off. PostHog processes this data for us as a service provider.

Deletion and your choices

In Settings → Cloud sync → Delete cloud account, you can delete your server account, Google link, cloud library, server version history and stored purchase tokens. Deleting your account does not cancel a Mewmory Pro subscription. Cancel it in Google Play (Profile → Payments & subscriptions) to stop future charges. You can later restore an active subscription on a new account with Restore purchases. Sync then stays off on that device until you explicitly enable it. Device cards remain available offline. Other signed-in devices lose access to the deleted account, but their local copies are not remotely erased. Server backups expire within seven days. Removing the app clears its private local data; exported backups and copies you shared remain under your control.

You can also request account deletion outside the app. Export a backup before deleting data you wish to keep. Deleted decks and cards can be restored in Recently deleted for 30 days; this is separate from permanent cloud-account deletion.

Service providers and transfers

Our hosting provider stores cloud libraries; Google handles optional sign-in and Google Play processes purchases; OpenAI handles requested AI processing; PostHog (EU) receives anonymous analytics and crash reports. These services may process data outside your country. We use HTTPS in transit and account-scoped authorization for cloud access. We do not claim end-to-end encryption.

Terms of use

The rules for using the app are in our Mewmory terms of use.

Changes

Policy changes will appear here with a revised effective date. Contact the email above to ask about access, correction or deletion of your data.