Privacy Notice

Last updated June 10, 2026

Who we are

Memory Assistant is provided by Brandy Wolstenholme ("we", "us"). We act as the data controller for the personal data described below.

What we collect and why

Account data (name, email, login credentials) — to create and secure your account. Legal basis: contract performance.
Memories and notes you save (text, categories, follow-up dates, tags, optional household associations) — to provide the core service. Legal basis: contract performance.
Usage & device data (logs, browser, IP address) — for security, fraud prevention and product improvement. Legal basis: legitimate interests.
Support messages — to respond to your inquiries.

We process your memory content using AI models (operated by our model providers) solely to categorize and answer your questions. We do not use your content to train third-party models.

Who we share data with

Service providers / subprocessors: hosting, database and AI inference providers — under contract.
Merchant of Record: Paddle.com handles all sales, subscription management, payments, tax compliance and invoicing. Payment data is collected directly by Paddle.
Household members: if you place a memory in a shared notebook, the other members of your household can see it.
Authorities: where required by law.

Retention

We keep your account and memory data for as long as your account is active. On deletion or cancellation we delete or anonymize data when it's no longer needed. You can delete individual memories at any time from within the app.

Your rights

You can request access, correction, deletion, restriction, portability, or object to certain processing. You may withdraw consent and lodge a complaint with your local data protection authority. To exercise any right, contact us through the in-app support channel. We respond within 30 days.

International transfers

Where data is transferred outside your region we rely on appropriate safeguards (standard contractual clauses or adequacy decisions).

Security

We apply encryption in transit, encryption at rest for stored data, access controls and least-privilege practices.

Cookies

We use essential cookies and local storage for sign-in sessions. We don't run advertising trackers.