Summary
This Privacy Policy and comprehensive privacy notice explains how Mnemia collects, uses, stores, shares, transfers, protects, and otherwise processes personal information when you use our websites, mobile apps, AI tools, marketplace, exam mode, multiplayer features, premium content, diagnostics, and related services.
Mnemia does not sell personal information or share it for cross-context behavioral advertising. We use information to operate the product, protect accounts, personalize learning, process features you choose to use, and comply with legal obligations.
Controller and contact
Mnemia is operated by Gustavo Guerrero Gallaga in Mexico City, Mexico. For privacy questions, rights requests, or account deletion requests, contact privacy@mnemia.cards.
Information we collect
Depending on how you use Mnemia, we may process account and authentication data; profile, language, and timezone; decks, cards, answers, files, notes, images, or audio you provide; study progress, session results, response times, mastery, XP, achievements, and streaks; marketplace activity, favorites, ratings, and reviews; multiplayer rooms, invitations, rankings, and results; purchase receipts, subscriptions, and entitlements; notification tokens and device permissions; crash diagnostics, security logs, errors, product analytics, server logs, and job metadata.
We do not intentionally request government identifiers, biometrics, precise geolocation, full payment card numbers, medical files, political opinions, religious beliefs, or other sensitive data unless you voluntarily provide it or a specific feature lawfully requires it.
Why we process information
We use personal information to create and administer accounts; authenticate users; sync progress; operate flashcards, adaptive study, recommendations, marketplace, marketplace, exam mode, multiplayer, deck voting, game state synchronization, invitations, leaderboards, purchases, subscriptions, notifications, support, calendar invitations, AI generation, and content review; prevent fraud, spam, abuse, cheating, and unauthorized access; maintain security and reliability; comply with law, tax, accounting, app store, and regulatory obligations; and protect the rights, safety, and integrity of Mnemia, users, and third parties.
Where required, we rely on legal bases such as contract performance, legitimate interests, consent, legal obligations, and establishment or defense of legal claims.
AI, files, and generated content
If you use AI features, Mnemia may process prompts, instructions, text, PDFs, documents, images, audio, cards, answers, and generated outputs to create flashcards, summaries, explanations, suggestions, and quality reviews. Authorized AI providers may process this content on Mnemia's behalf under contractual obligations.
We may keep AI credit balances, estimates, reservations, usage ledger, adjustments, refund or chargeback markers, processing mode, file-size/page estimates, and job metadata to operate billing, refunds, support, abuse prevention, and reliability.
Do not upload sensitive, confidential, regulated, or third-party information unless you have the right to do so and it is necessary for the feature you choose to use.
Sharing and providers
We may share information with providers needed to operate Mnemia, including infrastructure, hosting, API, database, cache/queues, object storage, backup, AI, authentication, email, support, notifications, analytics, crash diagnostics, security, app stores, payment, and purchase verification providers. Information you choose to publish or share may be visible to other users, such as public decks, display name, avatar, ratings, reviews, invitations, rooms, results, rankings, or collaboration activity.
We may also disclose information where necessary to comply with law, valid orders, investigations, abuse prevention, rights protection, safety, contracts, or a corporate transaction such as a merger, acquisition, financing, or reorganization.
Production infrastructure and diagnostics
Mnemia may process server logs, crash reports, worker/job metadata, API activity, cache/queue events, object-storage metadata, backups, and diagnostics needed to operate production services, monitor reliability, restore service, investigate incidents, and prevent abuse.
Exam mode, multiplayer rooms, deck voting, game state synchronization, official marketplace deck variants, audio review, and push notifications may generate activity records needed to provide the feature, resolve disputes, and keep the experience consistent across devices.
International transfers
Mnemia is operated from Mexico and may use providers in Mexico, the United States, and other countries. Where safeguards are required for international transfers, we use appropriate mechanisms such as contracts, standard clauses, adequacy decisions, technical and organizational measures, or other legally permitted tools.
Retention
We retain information only for as long as reasonably necessary to operate Mnemia, maintain progress, provide requested features, comply with legal obligations, process purchases, resolve disputes, prevent fraud, maintain security, enforce rules, support accounting and tax needs, and address operational requirements. Some copies may remain temporarily in encrypted backups, recovery systems, security logs, or legally required records.
Your rights and controls
Depending on your location and applicable law, you may request access, correction, deletion, portability, restriction, objection, withdrawal of consent, limitation of sensitive data use or disclosure, opt-out of sale or sharing where applicable, appeal, or complaint to a competent authority. Contact privacy@mnemia.cards. We may request reasonable information to verify identity before fulfilling a request.
You can also manage language, privacy, notifications, sessions, and device permissions in the app or through iOS/Android settings where available.
Children
Mnemia is intended for users who meet the minimum age required by law to use digital services. Unless a higher age applies, Mnemia is not directed to children under 13 and does not knowingly collect information from children under 13 without verifiable parent, guardian, school, or other legally valid authorization.
Security
We use reasonable administrative, technical, and organizational safeguards, including HTTPS/TLS, password hashing, token-based authentication, session revocation, access controls, audit logs, rate limiting, security monitoring, backups, and incident response procedures. No internet-connected system can guarantee zero risk.
Cookies and similar technologies
Mnemia may use cookies, local storage, device storage, tokens, or similar technologies needed to maintain sessions, remember preferences, route invitations, measure reliability, prevent fraud, and operate the services. If we introduce non-essential technologies that require consent or opt-out, we will provide the required controls.
Changes
We may update this policy for legal, technical, operational, service, provider, security, or privacy practice changes. For material changes, we will provide reasonable notice through the app, website, email, or other legally permitted channels.
Contact
For questions, rights requests, account deletion, or privacy concerns, contact privacy@mnemia.cards.