Privacy Policy - MemSurf

1. Information We Collect

We collect information you provide directly, information created when you use MemSurf, information collected with your device permissions, and information processed by service providers that help us operate the app.

2. How We Use Information

We use information to:

• Provide, maintain, and improve MemSurf.
• Create, authenticate, and manage your account.
• Process captures, images, notes, transcripts, lessons, quizzes, and other learning content.
• Generate summaries, study material, personalized learning outputs, and recommendations.
• Sync content across the app, widgets, and extensions.
• Provide social, leaderboard, notification, sharing, and collaboration features.
• Process subscriptions, validate purchases, and enforce plan limits.
• Send service messages, push notifications, support responses, and product communications.
• Analyze app performance, usage, reliability, and feature adoption.
• Show, deliver, or measure ads where applicable.
• Detect, prevent, and respond to fraud, abuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our terms.

3. AI Processing

MemSurf uses AI systems and related service providers, including OpenAI, Google (Gemini), and Anthropic (Claude), to process content you submit and generate learning outputs, including summaries, lessons, quizzes, classifications, and study materials. Depending on the feature you use, this may include captured text, prompts, uploaded files or images, generated responses, and related request metadata needed to process your request. We request in-app user permission before sending personal data for third-party AI processing, and you can revoke that permission in Settings > AI Privacy. Content sent for AI processing is used to provide requested app features. We do not sell your user content.

4. How We Share Information

We may share information with:

• Service providers that host our backend, store data, send notifications, provide analytics, process AI requests, support authentication, validate purchases, deliver ads, or help operate the app.
• Apple, Google, Facebook, and other authentication or platform providers when you use their services.
• Analytics and advertising partners, including Amplitude and Google Mobile Ads, as described in this policy.
• Other users when you choose to use social, sharing, circles, comments, leaderboard, or collaboration features.
• Authorities, courts, or other parties when required by law or necessary to protect rights, safety, security, and the integrity of the service.
• A successor or acquirer if MemSurf is involved in a merger, acquisition, financing, reorganization, or sale of assets.

We require service providers and third parties that process user data for us to protect that data and provide the same or equal level of protection described in this Privacy Policy and required by applicable law.

We do not sell your personal information for money. Some advertising or analytics disclosures may be considered "sharing" or "targeted advertising" under certain privacy laws. Where required, we provide consent or opt-out choices.

5. Data Retention and Deletion

We keep personal information for as long as needed to provide MemSurf, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, support security, and maintain backups.

User content and account data are generally kept until you delete the content, delete your account, or request deletion, unless we need to retain limited information for legal, security, backup, fraud-prevention, or operational reasons. Backup copies and logs may remain for a limited period before deletion according to our retention practices.

You can delete your MemSurf account in the app. Deleting your account permanently deletes your account and associated app data, subject to limited retention for the reasons described above. If you have an active Apple subscription, deleting your MemSurf account does not automatically cancel your Apple subscription; you must cancel it through your Apple ID subscription settings.

6. Your Choices

You can:

• Update certain account and profile information in the app.
• Delete content you created where the app provides deletion controls.
• Delete your MemSurf account in the app.
• Allow or revoke AI processing consent in Settings > AI Privacy before personal data is sent to third-party AI providers.
• Turn off push notifications in the app or in iOS Settings.
• Disable camera, photo library, microphone, speech recognition, and contacts permissions in iOS Settings.
• Manage Apple subscriptions through your Apple ID settings.
• Manage advertising and tracking choices through iOS privacy settings and any consent prompts shown in the app.

Contact us at contact@memsurf.com to request access, correction, deletion, export, or other privacy support.

7. Legal Bases for Processing

Where applicable, we process personal information based on one or more of the following legal bases:

• Performance of a contract, such as providing the app and account features.
• Consent, such as optional device permissions, notifications, and consent-based advertising or analytics.
• Legitimate interests, such as security, fraud prevention, service improvement, and troubleshooting.
• Legal obligations, such as tax, accounting, compliance, and lawful request requirements.

8. California and Other Privacy Rights

Depending on your location, you may have rights to request access to personal information, correction of inaccurate personal information, deletion of personal information, portability of information you provided, and information about categories of personal information we collect, use, disclose, sell, or share.

To exercise privacy rights, contact us at contact@memsurf.com. We may need to verify your request before acting on it. We will not discriminate against you for exercising privacy rights.

9. Children's Privacy

MemSurf is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us at contact@memsurf.com.

10. International Processing

Your information may be processed in the United States and other countries where we or our service providers operate. These countries may have data protection laws different from those in your location. Where required, we use appropriate safeguards for international transfers.

11. Security

We use reasonable technical, administrative, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and may provide additional notice in the app or through other appropriate channels.