Memora
Privacy Policy — Memora
Last updated: 26 September 2026
Memora ("the app") is provided by Insightish Labs Oy ("we", "us"), a company registered in Finland. This policy explains what personal data the app collects, why, who processes it, and the rights you have over it. Insightish Labs Oy is the data controller for the personal data described here.
1. Data we collect
| Category | What it includes | Why we collect it |
|---|---|---|
| Account information | Your email address. If you sign in with Google: your name and profile photo. | To create and secure your account and sign you in. |
| Your memories | What you choose to save: typed text, voice recordings and their transcripts, photos and screenshots, and the titles, categories, tags, dates and lists generated from them. | To store, organise and search your memories, and to restore them when you sign in on a new device. |
| Your questions | Questions you ask Memora about your memories. | To find and answer from your memories, and to show your recent questions. |
| Purchase information | Subscription status, purchase history and an account identifier. We never receive your card details; payments are handled by Google Play. | To give you access to what you paid for and to manage your subscription. |
| Usage analytics | Which screens and features you use, device and app information, device identifiers, IP address and the approximate location derived from it. | To understand how the app is used and improve it. You can turn this off at any time. |
| Crash reports | Crash logs, device model, operating system and app version. | To find and fix crashes. |
| Notification token | A device token for push notifications. | To deliver notifications you have enabled. |
We use your microphone only while you record a memory, and your camera only while you take a photo for a memory. We do not collect your precise location, contacts, or any data you have not chosen to save.
2. How we use your data and our legal bases
- Providing the service — keeping your account, storing, organising, searching and restoring your memories, and answering your questions. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
- AI processing — to transcribe voice recordings, organise memories and answer questions, the relevant content (a recording, a photo, text, or a question with the memories that match it) is sent to AI and speech-to-text service providers, which process it on our behalf and return the result. Legal basis: performance of contract.
- Subscriptions and billing — Legal bases: performance of contract, and our legal obligations to keep accounting records (GDPR Art. 6(1)(c)).
- Analytics — Legal basis: our legitimate interest in improving the app (GDPR Art. 6(1)(f)). You can object at any time by switching off Settings → Share usage analytics.
- Crash reports and security — Legal basis: our legitimate interest in keeping the app reliable and secure.
We do not use your memories for advertising, we do not show ads, and we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
3. Sharing
We do not sell your personal data and we do not share it for cross-context behavioural advertising.
We use trusted service providers that process personal data on our behalf, under contracts that limit their use of it to providing their service to us:
- Cloud hosting and database providers — store your account and memories.
- AI and speech-to-text providers — transcribe, organise and answer, as described above.
- App store and subscription management providers — process purchases and subscription status.
- Analytics and crash-reporting providers — usage analytics and crash reports.
- Push notification provider — delivers notifications.
We may also disclose data where required by law, or to protect the rights and safety of our users or of us. You can ask us for the names of the providers that process your data by emailing privacy@insightish.com.
4. Retention
- Your account and memories are kept while your account exists. Deleting a memory removes it, with its recordings and images, from our systems; remaining copies are purged within 30 days.
- When you delete your account, your account, memories, recordings and images are deleted from our active systems straight away, and any remaining copies are fully purged within 30 days.
- Analytics and crash data are kept only as long as needed for the purposes above.
- Purchase records may be kept longer where accounting law requires it.
5. Your rights
You can:
- Delete your account and all associated data in the app: Settings → Delete account.
- Switch off usage analytics in the app: Settings → Share usage analytics.
- Delete individual memories at any time.
- Request access to, a copy of (portability), or correction of your data, or restrict or object to its processing, by emailing privacy@insightish.com.
We respond to requests within one month.
6. Security
Data is encrypted in transit. Memories on your device are stored in an encrypted database, and access to your data on our servers is restricted to your own signed-in account. No method of storage or transmission is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.
7. Children
Memora is not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
8. International transfers and GDPR
We are based in the European Union. Some of our service providers process data outside the European Economic Area, including in the United States. Where that happens we rely on an adequacy decision (such as the EU-U.S. Data Privacy Framework) or on the European Commission's Standard Contractual Clauses, with additional safeguards where needed.
If you are in the EEA, you also have the right to lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi). We would appreciate the chance to address your concern first.
9. California residents (CCPA / CPRA)
In the past 12 months we have collected these categories of personal information: identifiers (email address, account and device identifiers, IP address); customer records (name, where provided); commercial information (subscription and purchase history); internet or other electronic network activity (app usage); approximate geolocation; and audio and visual information (voice recordings and photos you choose to save). Sources, purposes and retention are described above.
We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes other than providing the service. You have the right to know, access, correct and delete your personal information, and not to be discriminated against for exercising these rights. To make a request, email privacy@insightish.com. We will verify your request against your account email. You may use an authorised agent.
10. Changes to this policy
We will update this page when our practices change. The "Last updated" date at the top shows the most recent change. If a change is material, we will tell you in the app before it takes effect.
11. Contact
Privacy questions and requests: privacy@insightish.com
Insightish Labs Oy, Finland.