Privacy Policy
Effective: 23 October 2026
Meemori helps you record life-story interviews with the people you love, and turns them into written transcripts. Those recordings are personal and often precious, so this page explains exactly what happens to them.
1. Who is responsible
The controller of the personal data described here is:
GVAHIM s.r.o.
Company ID (IČO): 10731121 · VAT ID (DIČ): CZ10731121
Lihovarská 1060/12, 190 00 Praha 9 – Libeň, Czech Republic
Email: info@meemori.com
We have not appointed a data protection officer. Write to the address above for anything about your data.
2. What stays on your device
- Video and audio recordings of your interviews.
- Transcripts, interview questions, titles, and the names you enter for the people you interview.
- A short technical log used for diagnosing problems. It records timings and error messages; it does not contain what anyone said. It leaves your phone only if you send it to us yourself, with Settings → Help → Something isn't working.
We do not keep this content and cannot see it, except for the parts that pass through our servers to be processed (next section). Deleting a memory in the app deletes the recording and its transcript from your device. Uninstalling the app removes everything it stored.
3. What is sent off your device, and why
- Audio is sent to OpenAI to be converted into text, while recording and when you ask for a written transcript.
- Text (your interview topic, questions, and transcript excerpts) is sent to OpenAI to suggest follow-up questions and to clean up transcription mistakes.
The requests go through our own server, which runs on Google Cloud in Belgium (europe-west1) and passes them on to OpenAI. OpenAI acts as our processor. Under OpenAI's standard API terms, content sent through the API is not used to train its models. OpenAI may keep API inputs and outputs for up to 30 days to monitor for abuse, and then deletes them. We do not store the audio or text on our own servers once a request completes.
If you turn off AI features for an interview, no audio or text leaves your device for that interview.
4. What our servers do store
Only your credit account: a randomly generated account identifier, your credit balance, and a ledger of how credits were granted and spent. There is no name, email address, or phone number attached to it. Accounts are anonymous by default.
The account identifier is issued by Firebase Authentication, a Google service, and the credit account is kept in Google's Firebase / Firestore. To keep free credits from being claimed by automated installs, the app asks Google Play to confirm that it is a genuine copy running on a real device; Google receives information about the device and the app to do this.
For each request, our server logs record the account identifier, the IP address, the app version and how much AI processing was used. They never record the audio or the text. If you send us a report from Settings, the technical log arrives in the same logs, marked with your account identifier.
Purchases are processed by Google Play, or by the App Store on iPhone. We use RevenueCat to validate them and to credit your account; we receive a confirmation that a purchase happened, never your payment details.
5. Why we process data, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Provide the AI features: transcription, follow-up questions, tidying transcripts | Audio and text you choose to process | Performance of the contract with you (Art. 6(1)(b)); your consent where you turn on AI for an interview (Art. 6(1)(a)) |
| Run your credit account and purchases | Account identifier, balance, ledger, purchase confirmations | Performance of the contract (Art. 6(1)(b)); legal obligations such as accounting (Art. 6(1)(c)) |
| Security, abuse and fraud prevention, fair use of free credits, diagnosing faults | Server logs (account identifier, IP address, app version), device integrity check, technical log you send us | Our legitimate interest in running a secure and reliable service (Art. 6(1)(f)) |
| Anonymous usage statistics and crash reports | Firebase analytics and crash data, no interview content | Your consent (Art. 6(1)(a)), changeable in Settings |
| Answering your emails and requests | Your email address and what you tell us | Legitimate interest (Art. 6(1)(f)); for rights requests, legal obligation (Art. 6(1)(c)) |
We do not use your data for advertising, we do not sell it, and we do not make decisions about you by automated means that have legal or similarly significant effects.
6. Who receives data
- OpenAI (United States): transcription, question generation and transcript clean-up.
- Google (Google Cloud, Firebase Authentication, Firestore, Firebase analytics and crash reporting, Google Play and its device-integrity check): hosting, accounts, credit balance, purchases on Android.
- Apple (App Store): purchases on iPhone.
- RevenueCat: validation of purchases.
- Authorities or advisers, only where the law requires it or we need to protect our rights.
These companies act as our processors, or as independent controllers for their own store and payment functions. We do not otherwise share your data.
7. Transfers outside the EU
OpenAI, and some Google, Apple and RevenueCat services, are based in or process data in the United States. Where that happens we rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework where the company is certified, and otherwise on the Standard Contractual Clauses.
8. Recording other people
Meemori records another person's voice, face, and life story. If you use it, you decide to record, and you are responsible for it: tell the person what you are doing, that the recording will be transcribed using an AI service, and get their agreement before you start. Do not record someone who has not agreed. If they later change their mind, delete the memory; that removes the recording and transcript from your device. If you share a recording with others, that is your own decision and responsibility.
If you are someone who was recorded and want to know what happens to the recording, ask the person who recorded you; the files are on their device, not with us. You can also write to us.
9. Your rights
Under the GDPR you have the right to access your personal data, to have it corrected, to have it erased, to restrict its processing, to receive it in a portable format, to object to processing based on legitimate interests, and to withdraw any consent at any time (withdrawing does not affect what happened before). In the app:
- Export: Settings → Your data → Save a copy of everything. This produces a file with your on-device interviews and your account record.
- Erase: Settings → Your data → Delete my account and everything. This deletes your credit account and its history from our servers, and everything the app stored on your device. Any unused credits are forfeited.
- Analytics: in Settings you can switch usage statistics and crash reports on or off.
You can also write to info@meemori.com. We answer within one month. We may ask for your account identifier, because we cannot find an anonymous account otherwise.
You have the right to complain to a supervisory authority. In the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), uoou.gov.cz. You may also complain to the authority in the country where you live or work.
10. Analytics and crash reports
The app can send anonymous usage statistics and crash reports (Firebase) to help us find problems. These contain no interview content, names, or transcripts. In the EU this is off unless you turn it on; you can change it any time in Settings.
11. This website
meemori.com sets no cookies and loads no analytics, advertising or social-media trackers, which is why you see no cookie banner. See the cookies page. Like any website, the company that hosts it keeps standard access logs (IP address, page requested, time) for security. If you email us, we use your address to reply.
Beta page. If you leave your email or feedback on meemori.com/beta, we store what you typed (email, which phone you use, your feedback) in Google Cloud Firestore in the EU, together with the time. We use the email only to send you the beta link and to ask how the beta went, and the feedback only to improve Meemori. It is not linked to your app account and not shared. The legal basis is your consent, which you can withdraw at any time by writing to info@meemori.com; we delete beta emails and feedback when the beta ends, at the latest 12 months after you sent them.
12. Children
Meemori is not directed at children under 16 and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will delete it.
13. Retention
On-device content stays until you delete it or uninstall. Your credit account is kept while the account exists and is deleted when you ask us to erase it; records the law requires us to keep (for example for accounting) are kept for the period the law sets. Server logs, including any report you send us, are kept for up to 30 days. OpenAI keeps API content for up to 30 days as described above. Emails to us are kept as long as needed to deal with them.
14. Changes
If this policy changes materially, we will say so on this page. The date at the top always shows the current version.