Privacy Policy
Your words stay yours.
Memorafy works on your computer first. This policy explains the little we collect, what we cannot see, how long we keep it, and how to reach us.
Who we are
Memorafy makes the Memorafy desktop app for Mac and Windows, runs memorafy.com, and provides Memorafy accounts, sync, Pro and support. In this policy, “Memorafy”, “we” and “us” mean the team that operates these services. We are responsible for the personal information described here.
Questions or requests about your information: support@memorafy.com.
What stays on your computer
Your Clipboard history, Stacks cards, Templates, collections, Text Tools work and settings are stored on your computer. You do not need an account to use Memorafy, and without one none of it is sent to us.
Memorafy skips content that password managers and other apps mark as confidential, so passwords do not enter your history. You can pause capture at any time and choose how long history is kept. Text Tools work is temporary and is never added to your history.
Memorafy does not open or fetch the links you copy. The desktop app connects only to Memorafy’s own services and the providers named in this policy, and only for the purposes described here.
Your account
An account is optional. You need one to sync between computers, use Pro, and use your account portal on memorafy.com.
We keep your email address, your password in a form we cannot read, whether two-step verification is on, your plan, and the settings needed to run your account. If you turn on two-step verification, we store what is needed to check the codes from your authenticator app.
For each computer you connect, we keep its name, operating system, Memorafy version, when it was last active and whether it is syncing. You can rename a computer or disconnect it from your account at any time.
We also log important security events on your account, such as devices being approved or removed and encryption keys being replaced, so we can protect the account and help if something goes wrong.
End-to-end encrypted sync
When sync is on, the content you sync, such as Clipboard items, images and Templates, is encrypted on your computer before it is sent. Our servers store only the encrypted data and never store the key that unlocks it in a usable form, so we cannot read your synced content.
To make sync work, we also keep some details that are not encrypted, such as which account and device an item belongs to, its type and size, and when it was created, changed or deleted. We use these only to run sync and apply your plan’s limits.
Your password unlocks your encryption key on your devices. That is why we cannot restore synced content for you, and why resetting a forgotten password makes content synced before the reset unreadable.
Buying Pro
Pro is sold by Paddle, our reseller and merchant of record. Paddle collects your payment details, billing address and tax information and handles them under its own privacy policy at https://www.paddle.com/legal/privacy. We never receive your full card number.
Paddle sends us what we need to run your subscription: your plan and its status, billing dates, the amount and currency paid, and the country used for tax. We keep billing records for as long as tax and accounting law requires, which can be longer than your account exists.
If you activate an offline licence, we record which installation and account it is registered to.
Support
When you contact support, we keep your messages, the email address we reply to, and anything you choose to include, such as your app version.
Support staff can see your account details and your messages, but not your synced content. Staff access requires two-step verification, is limited by role, and is logged.
Emails
We send the emails your account needs, such as confirmation codes, security notices and replies to your support requests, through our email provider, Resend. Paddle sends receipts and billing emails for your purchases. We do not send marketing email without your permission.
Optional anonymous usage summary
If you turn on Share anonymous product usage, Memorafy sends one summary a day. It contains a random installation ID that is not linked to your account, the app version, operating system and its version, processor type, language, how long ago Memorafy was installed, how many days it ran this week, whether you are signed in, and how many items and collections you have, as ranges such as 10 to 99.
It never includes Clipboard content, titles, searches, file names, account IDs or exact counts. It stays off until you turn it on, in Settings or when you first open Memorafy. Turning it off stops the summaries and deletes the ones already sent. Summaries are deleted automatically after 13 months.
Updates and downloads
To offer updates, the app regularly asks memorafy.com whether a newer version exists. The request includes the app’s platform, processor type, installer type and version. Copies installed from the Microsoft Store are updated by the Store instead.
When you download Memorafy from memorafy.com, we add one to a daily count by platform, version and language. That count contains nothing that identifies you or your device.
The website and cookies
memorafy.com does not use advertising or analytics cookies and does not track you across other sites. It sets a language cookie that remembers your language for one year and, when you sign in, session cookies that keep you signed in. Both exist only to provide what you asked for.
The Pro checkout is provided by Paddle, which may set the cookies it needs to process your payment securely.
As with any website, our hosting provider receives technical information such as your IP address and browser type when you visit, and keeps it in short-lived logs used for security and troubleshooting.
Why we use information
We use personal information only to provide and protect Memorafy: to run your account and sync, sell and manage Pro, answer support requests, send the emails your account needs, keep the service secure, prevent abuse, and meet legal obligations such as keeping tax records.
Where the law asks for a legal basis, we rely on our contract with you for the account, sync, Pro and support; on your consent for the usage summary; on legal obligations for billing records; and on our legitimate interests for security, preventing abuse and counting downloads.
We do not sell or rent personal information, share it for targeted advertising, or use your content to train AI models.
Who we share information with
We use a small number of providers that process information for us, under contract and only as we instruct: Supabase for accounts, databases and file storage; Vercel for hosting memorafy.com; Cloudflare for delivering downloads and updates; and Resend for email.
Paddle processes payments as merchant of record and is responsible for its own processing. If you install Memorafy from the Microsoft Store, Microsoft handles that installation under its own terms.
We may disclose information when the law requires it, or to protect our customers, the public or Memorafy from fraud or other harm. If Memorafy is ever sold or merged, the information stays protected by this policy.
International transfers
Our providers may process information in the United States, the European Union and other countries. When personal information from the European Economic Area, the United Kingdom or Switzerland is transferred elsewhere, we rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses.
How long we keep information
Account details and connected computers: for as long as your account exists.
The change log that brings your devices up to date: 30 days.
Security events on your account: 2 years.
Support conversations: 3 years after they are closed.
Usage summaries: 13 months.
Payment notifications from Paddle: 2 years. Billing records: as long as tax and accounting law requires.
One-time trial protection: while Memorafy offers the one-time trial, we keep a protected one-way fingerprint of an email that claimed it. It is used only to prevent repeat claims and cannot be used to recover the email or your content.
Pro codes: a protected fingerprint of each code, never the code itself, with its settings and who redeemed it and when, for as long as the code exists, so no code can be used twice. Campaign codes also use the protected email fingerprint described above, so each email can redeem one once.
Download counts: indefinitely, as anonymous totals.
Deleting your account
You can delete your account from your account portal on memorafy.com. This permanently deletes your synced content, connected computers, encryption keys, usage summaries and profile.
Billing records are kept where the law requires it, with your identity replaced by a random reference. Support conversations are kept in anonymised form until their retention period ends. If the account claimed the one-time Pro trial, the protected trial fingerprint described above remains so deleting and recreating the account cannot restart it.
If you redeemed a Pro code, the record that it was used stays, no longer linked to your account, so the code cannot be used again.
Deleting your account does not remove what is stored on your computers. To remove that, use Erase all local data in Memorafy’s Settings.
Your rights
Depending on where you live, you can ask to access, correct or delete your personal information, receive a copy of it, object to or restrict how we use it, and withdraw your consent at any time. Email support@memorafy.com from the address on your account and we will reply within one month.
Much of this you can do yourself: update your details and computers in your account portal, turn the usage summary on or off in Settings, and delete your account whenever you like.
If you are in the European Economic Area, the United Kingdom or Switzerland, you can also complain to your local data protection authority, though we would welcome the chance to help first.
Security
We protect information with encryption in transit, end-to-end encryption for synced content, two-step verification and role-based access for our staff, and audit logs. No system is perfectly secure. If a breach affects your personal information, we will tell you and the authorities as the law requires.
Children
Memorafy is not directed at children. You must be at least 16 to create an account, and we do not knowingly collect personal information from anyone younger. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
We will update this policy when Memorafy changes. If a change is significant, we will tell you in the app or by email before it takes effect. The date at the top of this page shows the latest version.