Privacy Policy
Last updated: 2026-07-18 · info@memolandum.com
This Privacy Policy applies to the Memolandum Service as a whole: the website at memolandum.com, progressive web use, and Memolandum mobile applications on Android and iOS when published (together, the “Service”). We do not maintain a separate “app-only” privacy policy — one clear document covers all surfaces. Memolandum (“we”, “us”) wants learning to stay joyful while handling data carefully.
1. Who we are & contact
The Service is operated under the Memolandum brand. Privacy requests (access, correction, deletion help): info@memolandum.com. Canonical policy URL (use this in App Store / Play Console): https://memolandum.com/legal/privacy/.
2. At a glance
• Same rules on web and in apps. • Guest play keeps most data on your device. • Sign-in enables cloud sync (progress, vault, study profiles). • AI translation is sent to Google Gemini only when you use that feature; saving to your vault is optional. • Microphone is used only if you choose voice input. • You can sign out anytime; you can delete your account in Profile (same control in future apps). • We do not sell your personal information.
3. Categories of data
We may process: (a) Account info — email, display name, profile photo (email/password or Google Sign-In; on iOS we may also offer Sign in with Apple when required by platform rules); (b) Learning & gameplay — XP, scores, gems, levels, study-language profiles, word-vault entries when signed in (Cloud Firestore); (c) User content for translation — text or voice you submit for instant translation; (d) Audio — microphone capture only during voice translation you start; audio is used to produce text/translation and is not kept as a permanent voice archive in our product after the request completes, unless you save resulting text to your vault; (e) Identifiers & security — Firebase Auth user id, App Check / reCAPTCHA signals, and on mobile app instances device/app instance identifiers needed for Firebase/Google security and analytics SDKs; (f) Diagnostics & analytics — aggregated usage via Google Analytics for Firebase; crash/performance data if we enable Firebase Crashlytics or similar on a platform; (g) Local device storage — UI language, theme, guest progress (localStorage / app local storage); (h) Billing metadata — Premium status, provider (Shopier/Stripe), period end, payment reference ids. Card numbers and CVV are never collected by Memolandum — only on PCI-compliant Shopier (Türkiye) and/or Stripe hosted pages. Arcade learning on static databases stays free; AI translation beyond the free trial is Premium. We do not require precise GPS location.
4. Purposes & legal bases
We process data to: provide and sync the Service you request (contract / steps prior to contract); secure the Service, prevent abuse, and keep leaderboards reasonably fair (legitimate interests, balanced with your rights); understand aggregated usage and improve learning quality and stability (legitimate interests); and meet legal obligations when required. Where a specific optional technology legally requires consent in your region, we will request it in a compliant way when that flow ships.
5. AI processing (Gemini)
When you use instant translation, the content of that request is sent to Google Gemini through Firebase AI Logic to generate a response. Do not submit secrets or sensitive data you are unwilling to process via Google. We store translation-related text in your Memolandum vault only if you explicitly save it. AI outputs can be inaccurate; see also our Terms of Service.
6. Processors & transfers
Core processors include Google (Firebase Authentication, Cloud Firestore, Hosting, Cloud Functions, App Check, Analytics; Gemini via Firebase AI Logic; Google Sign-In); Shopier for Türkiye card/local payments; and Stripe for international card payments. On Apple platforms, Sign in with Apple is provided by Apple when enabled. Payment processors receive the billing data needed to complete checkout under their own privacy terms. Data may be processed in data centers outside your country under those providers’ terms and safeguards. We do not sell personal information. We do not use your vault or translation content to publicly identify you for third-party advertising beyond standard aggregated Analytics.
7. Local storage, sync & sessions
Guest progress may stay on-device. After sign-in we may merge eligible guest progress into your cloud account and sync vault/stats. Auth sessions use long-lived local persistence until you sign out, delete the account, or clear app/site data. Sign-out ends the session on that device without deleting cloud data.
8. Retention
Account and learning data are kept while the account is active and as needed to operate the Service. After account deletion (§9), primary cloud records tied to your user id are removed; provider logs/backups may remain briefly for security and legal compliance, then follow those providers’ cycles. Local leftovers can be cleared by uninstalling the app or clearing site data.
9. Your rights & account deletion
In the Service you can view/update profile fields and manage your vault while signed in. You may sign out; clear local storage; revoke Google (or Apple) sign-in in that provider’s account settings; and permanently delete your account via Profile → Delete account — the same product control is intended on mobile apps. Deletion requires recent re-authentication, then a Cloud Function deletes your Firestore user tree (vault, stats, study profiles, meta), leaderboard entry, username reservation, and Firebase Auth user, limited to your uid. Email info@memolandum.com for help. Depending on your region (e.g. KVKK / GDPR-style rights), you may request access, correction, deletion, restriction, or objection; we respond within the period required by applicable law.
10. Children
The Service is general educational software and is not directed at children under 13 (or a higher age required where you live). We do not knowingly collect personal data from children below that age. We do not place the Service in store “Kids” categories. Parents/guardians who believe data was provided inappropriately should contact us for deletion.
11. Security
We use HTTPS, Firebase Authentication, Firestore security rules (private user data readable/writable by the owner; certain leaderboard-oriented stats may be publicly readable for rankings), App Check with reCAPTCHA Enterprise on web (and platform-appropriate App Check on mobile when configured), client abuse rate limits, and server-side account deletion bound to the authenticated uid after re-authentication. No method is 100% secure; we keep measures proportionate to a free learning service.
12. Automated decision-making
We do not use solely automated profiling that produces legal or similarly significant effects (credit, employment, identity). Game difficulty, review scheduling, and abuse limits are product logic for learning and safety.
13. Store disclosures
When you install from Google Play or the Apple App Store, the store’s own privacy labels / Data safety forms summarize data types. Those forms are filled to match this Policy. If a store UI differs in wording, this Policy and in-product controls govern our practices. Permission prompts (e.g. microphone) will state the learning purpose.
14. Changes
We may update this Policy as the Service or laws change. We revise the “Last updated” date and, for material changes, take reasonable notice steps when practical (including on this page). Continued use after changes means acceptance unless mandatory law says otherwise.
15. Contact & complaints
Privacy: info@memolandum.com · https://memolandum.com. You may lodge a complaint with your data-protection authority (in Türkiye, KVKK where applicable). We prefer you contact us first so we can fix issues quickly.