Privacy Policy

Last Updated: July 1, 2026

This policy explains what information Memdojo collects, why we collect it, how we use it, and what choices you have. We do not sell your personal information.

1. Information We Collect

Our guiding principle is to collect what we need to run Memdojo, support users, improve the product, prevent abuse, and keep the service secure.

Account and profile data

When you create an account, we collect information such as your email address, sign-in method, authentication identifiers, and any profile information you choose to add, including a username, display name, biography, or avatar.

Study content and files

We store the content you create or upload in Memdojo, including decks, cards, notes, folders, review history, learning progress, profile images, and attached media such as images or audio.

Public content

If you choose to publish a deck or folder, or post a rating or comment, that content may become visible to other users and visitors together with profile details you have made public.

Billing and subscription data

If you use a paid plan, we collect subscription and billing metadata such as your plan, purchase status, renewal dates, receipts, and store or provider customer identifiers. Payment card details are handled by the relevant app store or payment processor rather than stored directly by Memdojo.

AI interactions

If you use AI-powered features, we process the prompts, instructions, uploaded source material, generated outputs, model selection, and usage metadata needed to provide those features and apply usage limits or cost controls.

Device, log, and usage data

We collect technical data needed to operate and protect the service, such as IP address, browser or device information, session activity, crash or diagnostic information, and security event logs.

Support and communications

If you contact us, request support, or subscribe to updates, we collect the contents of those messages and the contact details needed to respond.

2. How We Use Information

We use information to:

  • Create, authenticate, and secure accounts.
  • Provide study tools, syncing, public publishing, and AI features.
  • Process subscriptions, receipts, refunds, and billing support.
  • Detect abuse, investigate moderation issues, and protect the service.
  • Respond to support requests and improve product reliability.
  • Send service-related notices and, if you opt in, marketing updates.

3. When We Share or Disclose Information

We do not sell personal information. We share or disclose information only as reasonably necessary to run Memdojo and comply with our obligations. Examples include:

  • Service providers that help with hosting, storage, authentication, analytics, AI processing, billing, email, or support workflows.
  • Public information you intentionally publish, such as public decks, folders, ratings, comments, usernames, display names, or profile images.
  • Internal review of account or content information when needed to investigate abuse, fraud, moderation reports, or security incidents.
  • Legal compliance, lawful process, emergency requests, or a merger, acquisition, or asset transfer involving the business.

4. Cookies and Local Storage

Memdojo may use cookies, local storage, and similar technologies for sign-in, session continuity, preference storage, security, and core product functionality. If you disable these technologies, parts of the website or web app may not function correctly.

5. Data Retention

We keep information for as long as needed to provide the service, maintain legitimate business records, investigate abuse, resolve disputes, enforce our agreements, and meet legal obligations.

When you delete your account, it is scheduled for deletion and held for 30 days. Signing back in during those 30 days cancels the deletion and restores everything. After 30 days we permanently delete your profile, your decks and cards, your study history, your uploaded files, and your sign-in credentials, and this cannot be reversed.

Some records outlive the account, and this is what they are:

  • Billing records, kept for tax, accounting, and audit purposes. These hold your account identifier, the email address and name the account was billed under, your plan and payment history, and any refund requests — and nothing else from your profile. We keep these for seven years.
  • A record that the deletion happened, including when it took place and, where an administrator carried it out, who did so.
  • Ratings you left on other people’s decks, with your account detached from them, so that other people’s deck scores do not change when you leave. These can no longer be connected back to you. Comments you wrote are deleted outright.
  • Decks you published, if you chose at deletion to leave them available. Your name, username, and photo are removed from them and they are credited to “Deleted User”. If you chose to hide them instead, they are deleted with the rest of your account.
  • Moderation and abuse records, where we need them to investigate reports, enforce our terms, or prevent a banned account from simply signing up again.

Your subscription is billed by the App Store or Google Play, not by us. Deleting your account does not cancel it, and we cannot cancel it for you — you need to do that from the subscription settings in your store account. Those stores keep their own payment records under their own policies.

6. Your Choices

  • You can update certain account and profile details in the app.
  • You can download a copy of everything on your account from Settings → Account settings.
  • You can delete your account using the account settings flow.
  • You can choose whether to publish study content publicly.
  • When you delete your account you choose what happens to the decks you published: they can be hidden, or stay available with your name, username, and photo removed.
  • You can opt out of non-essential marketing emails.
  • You can contact us with privacy questions or requests.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International Processing

Memdojo is based in the United States, and our service providers may process information in the United States and other countries. By using the service, you understand that your information may be transferred to places with different data protection rules than your home jurisdiction.

9. Children's Privacy

Memdojo is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

10. Changes and Contact

We may update this policy from time to time. If we make material changes, we will post the updated version here and revise the effective date above.

For privacy questions, contact support@memdojo.com.

Adapted in part from the Basecamp open-source policies / CC BY 4.0.