Privacy and data

Who is responsible

The data controller is Florent Regnault (Web Online Concept), 5 rue Paul Estival, 31200 Toulouse, France. For any question about your data: contact@memoday.net.

What MemoDay keeps, and why

• Your account: your email address, and if you give them, your first name and photo; your language, time zone and settings. To run your account (performance of the contract).
• What you entrust: your sentences, photos and documents, and what MemoDay understands from them (titles, amounts, dates, people, places, reminders), and what you enter yourself (for example a tracked subscription: its name, amount and frequency; what someone owes you or what you owe: a first name, an amount, a reason; or a tracked loan: its monthly payment, its term and, if you give them, its amount and rate; never an account or contract number). To keep them and give them back to you (performance of the contract).
• Sensitive data you choose to entrust (a health document, for example) is only used to keep it and give it back to you, when you ask. Entrusting it means you consent to that; you can erase it at any time.
• Your voice: it is turned into text, then the recording is discarded. It is never kept.
• Your transfers (My memory → Transfers): the file is kept as is, without being read by the AI, then deleted automatically after 7 days.
• Your photos: only the date the photo was taken is read. Any GPS position is not used.
• Your connected devices: browser, system, approximate city and country (derived from the connection; the IP address is not kept), date, and how MemoDay is opened on it (iPhone or Android app, home screen, browser). For your security: to warn you when a new device signs in; and to know which versions of MemoDay to maintain (legitimate interest).
• Visits to the public pages (presentation, sign-in, legal pages…), without an account and without cookies: the page, where you came from (search engine, social network, link), the country and the type of device. To count the visitors of a day, a fingerprint of the connection is mixed with a secret of the day, erased the next day: nobody is followed from one day to the next, and the IP address is not kept. To measure the site's audience (legitimate interest). Kept 13 months.
• Your usage: numbers per day (sentences, photos, questions, voice duration, AI calls and their cost) and the days you open MemoDay (and from where: app, home screen, browser), never the content. To apply your plan, measure what the service costs and know how many people use it (performance of the contract and legitimate interest).
• Your subscription: its status and dates. Payment happens at Stripe; MemoDay never sees your card (performance of the contract; legal obligation for invoices). Taken in the Android or iPhone app: payment happens at Google Play or the App Store, which give MemoDay the subscription's status (product, dates, renewal), a purchase number and, for each payment, its amount, its tax and the country of purchase (kept as accounting records, legal obligation), never your payment method; a masked identifier of your account, which says nothing about you, goes with the purchase to link it to your account (performance of the contract).
• Your messages (Contact, “An idea, a problem?”): what you write and your email address, to answer you. Without an account, an encrypted fingerprint of the IP address is used only to limit abuse (legitimate interest).
• The emails MemoDay writes to you (a reply, information about your account, the news): their subject, text and date, to know what you were told. Kept 3 years at most. Service information (terms, prices, outage, security) is sent to every account (performance of the contract). MemoDay news (rarely, an important update) only if you accept it: turn it off in Settings, or in one click at the bottom of each email (legitimate interest).
• Notifications: the technical address provided by your browser, if you turn them on.
• A withdrawal: your declaration (name, contract, date and time), as the law requires (legal obligation).

Artificial intelligence

To understand your sentences, read your photos and documents, turn your voice into text and answer you, MemoDay uses an AI service from Google (Gemini API, paid tier).

Google acts as a processor: it processes this data for MemoDay only, does not use it to improve its products, and keeps it only briefly to detect abuse.

Who else receives data

Only the providers MemoDay needs to work, each for its own task:

• Supabase: database, files and sign-in — servers in the European Union.
• Vercel: hosting of the site, and cookie-free audience measurement (pages viewed, where visitors come from, type of device; never MemoDay's content or your identity).
• Google: the AI (Gemini) and the contact@memoday.net mailbox.
• Resend: sending emails (sign-in links, reminders, replies and MemoDay news) and receiving the emails you forward to MemoDay.
• Stripe: payment and invoices.
• Google Play and Apple (App Store): payment in the Android and iPhone apps, if you subscribe there.
• Your browser's notification service (Google, Apple or Mozilla), if you turn notifications on.

Some of these providers are based in the United States. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

If you report an answer (“Wrong answer?”) and tick “Share”, your question, the answer and what you expected are read by the MemoDay team to fix the app, without your name or address being shown to them; without that box, only the type of problem is sent. Reports are deleted after 180 days.

When you save a link, MemoDay opens the page once, from its server, to read its title, description and preview picture (a small copy of the picture is kept in your private space; your screen never loads it from the site): the site sees a visit from MemoDay, without your IP address or anything about you. A login, password or unsubscribe link is never opened.

If you share with someone close (My account → My people), they only see what you choose to share: a list (they see it, add to it and tick it) or an appointment (they get a copy in their Planning: the title and the date, nothing else of what you said or sent). A shared grocery list only becomes theirs if they choose so. They also see the first name you use in MemoDay. The rest of your memory stays private. To invite them, MemoDay sends an email to the address you give. Sharing stops whenever one of you decides; appointments already shared stay in each person's Planning.

If you add your appointments to your calendar (Settings → My calendar), the calendar service you choose (Google, Apple, Microsoft…) reads, through a secret link, their titles, dates and times, and nothing else. You can change or stop this link at any time.

If you forward an email to your MemoDay address (Settings → Forward an email), it is received by Resend, then MemoDay keeps its text and the attachments it can read (PDFs, photos, documents) as memories. Only emails sent from your account's address, or another address you confirmed with a code, are accepted; the others are refused and nothing is kept. MemoDay never opens the links or remote images in an email. You can turn receiving off or change the address at any time.

If you save your bank accounts (Money → My accounts), the IBAN you save is encrypted by MemoDay before being stored: the database only holds its encrypted version and its last four characters. A bank details document you send is read by the AI (Google, like your other documents) only to fill in the form, which you check before saving; if you keep the original document, it is stored in your private space like your other documents (protected, but not encrypted by MemoDay); sent then abandoned, it is erased after a day. Your data export contains the masked IBAN: the full one is shown in My accounts. MemoDay never connects to your bank and never keeps a password, a code or a card number.

Nobody else. Your data is never sold or rented.

For how long

• Your memories and files: as long as your account exists. What you delete stays 30 days in the trash, then disappears.
• Your transfers: 7 days, then deleted automatically (except the ones you keep).
• The tracking of your bulk imports (number and names of files): 40 days after the import ends.
• Your deleted account: 30 days to change your mind, then everything is erased (memories, files, messages, logs). Technical backup copies then disappear on their own within a few days.
• Your connected devices: up to 400 days after the end of the session.
• Your messages, usage counters and the log of AI calls: 3 years at most, and erased with your account.
• Invoices and payments: 10 years at Stripe, as accounting law requires.
• Withdrawal declarations: 5 years, as proof.

Cookies

MemoDay only uses necessary cookies: no advertising cookies, and the audience measurement (MemoDay's own, like Vercel's) sets none and doesn't follow you from site to site. That is why no banner asks for your consent.

• Your session (to stay signed in).
• Your device (for your security, 400 days).
• The app lock, if you turned it on: to know whether to ask for your code on this device (400 days), and proof that it was just entered (a few minutes).
• Your language (1 year).
• “Discover MemoDay already seen” (5 years).

Your browser also keeps a few display preferences, and the current conversation until the tab is closed.

Security

• All exchanges are encrypted (HTTPS).
• Each account is isolated in the database: a rule in the database itself prevents reading anyone else's data.
• Sign-in without a password, by a link or a code sent by email; an email warns you of every new device.
• Administration access is protected by two-factor authentication. Administration only sees numbers, never the content of your memories.

No system is infallible. If a data breach concerned you, you would be informed, as would the French data protection authority (CNIL), as the law requires.

Your rights

At any time you can access your data, correct it, erase it, take it with you (My account → Download all my memory), object to or restrict a processing, and withdraw your consent. You can also leave instructions about what happens to your data after your death.

To do so: My account, or an email to contact@memoday.net. Answer within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.

Delete your account

In MemoDay (on the website or in the app): My account → “Delete my account”. Before that, you can download everything: My account → “Download all my memory”.

If you can't access your account: email contact@memoday.net from your account's email address, asking for it to be deleted.

• Erased 30 days after the request (time to change your mind): your account, your memories, your photos, videos and documents, your messages, your lists, your shares and your logs.
• Kept, as the law requires: invoices and payments (10 years, at Stripe) and withdrawal statements (5 years).

Age

MemoDay is for people aged 18 and over.

Changes

If this page changes significantly, you will be told by email or in the app before the change applies.