Who handles your data
Quandelia SRL is the controller for the personal data described here. This policy covers the Memoris website and web app. Our registered address and contact details are in the Legal Notice.
What data we use
Account data comes from the sign-in provider you choose. It includes an account identifier and can include an email address, display name or profile image if the provider supplies it. Apple can supply a relay email address. You enter your credentials with Google or Apple. Sign-in data is necessary to create and use a synced account.
Library data includes the collections, decks, tags, questions and answers you create, plus the review information used to schedule your cards. When you write to us, we receive your email address and what you choose to share.
Sign-in and website delivery can involve connection information such as your IP address, browser information and security events.
Why we use it
We process account and library data to carry out our agreement with you, including sign-in, review scheduling and library sync. Our legitimate interests include responding to questions, diagnosing issues, preventing abuse, protecting the service and handling legal claims. We also process data where necessary to meet a legal obligation.
Your study ratings help set the next review date for a card and show your progress.
Cookies and browser storage
The web app uses browser storage to maintain your session, remember your language and keep your library and app available for offline study. Google or Apple may use cookies or similar storage when you open their sign-in screen.
You can clear site data in your browser settings. This can sign you out, remove the local library and erase unsynced changes. To request account closure or deletion of synced data, contact us.
Service providers and transfers
Google provides account authentication through Firebase. Google and Apple also handle their own sign-in services under their privacy policies. Hosting and security providers process data as needed to deliver and protect Memoris. We may disclose data if the law requires it.
Firebase Authentication processes data in the United States. Google’s data processing terms describe safeguards for transfers outside the European Economic Area, including adequacy mechanisms and standard contractual clauses where applicable. You can contact us for details or a copy of the safeguards that apply to your data.
How long we keep data
We keep account and synced library data while needed to provide your account. When you request closure or erasure, we review what needs to be removed and whether any records must be kept for a legal obligation, security incident or dispute. We keep support correspondence for as long as needed to resolve the request and handle any related dispute.
Google says Firebase Authentication keeps logged IP addresses for a few weeks and removes other authentication data from live and backup systems within 180 days after we initiate deletion. Local copies can stay on your devices until you clear them in your browser settings.
Your privacy rights
You can ask for access to your personal data, correction, erasure or restriction of processing. You can also object to processing based on legitimate interests or ask for a portable copy where applicable. Email us using the contact below. We may need to verify that the request comes from you.
You can complain to the Belgian Data Protection Authority or another competent data protection authority, including in the EU country where you live or work.
Contact
For questions about Memoris, account closure, privacy requests or complaints, email us and mention Memoris.