Privacy Policy
Effective: November 14, 2025
Last updated: November 14, 2025
This Privacy Policy describes how Memory Lab ("Memory Lab", "we", "us", or "our") collects, uses, and protects personal information when you use our website, browser extension, applications, and related services ("Services").
For the purposes of applicable privacy and data protection laws, the data controller is Jacy Gao, operating as a sole trader under the name Memory Lab, based in Australia.
Memory Lab is designed as a learning and revision companion. This Privacy Policy applies to all users globally except where local privacy laws require a separate region-specific policy.
1. Information We Collect
1.1. Personal Information You Provide
Account Information
When you create an account, we collect:
- Email address (used for account login and revision reminders)
- Display name (used solely for in-app personalisation)
We use Google Firebase Authentication for both social login and email/password accounts. We do not store or have access to your password.
User Content
Content you add to the Service (notes, flashcards, cloze items, or other study materials) may include Personal Information if you choose to include it. This content is stored to provide the Service.
Communication Information
If you contact us (support requests, feedback, bug reports), we may collect your email and the content of the message.
1.2. Information Collected Automatically
Technical and Usage Information
We collect limited technical data to operate and improve the Service, such as:
- Device type
- Browser type and version
- General interaction data (e.g., when you create notes or start a revision session)
- IP address (for security and anti-abuse purposes)
Cookies
Memory Lab does not currently use cookies. If cookies are introduced in the future, this policy will be updated.
2. How We Use Your Information
We use your Personal Information for the following purposes:
- To provide, operate, and maintain the Services, including saving your content and delivering revision reminders
- To authenticate you and keep your account secure
- To send revision emails and necessary service notifications
- To improve the Service, including analytics on feature usage (non-identifying)
- To personalise your experience (e.g., using your display name)
- To ensure security, detect misuse, or prevent fraud
- To comply with laws and regulations, and respond to lawful requests
- To perform backups and maintain service continuity
We do not sell personal information. We do not use your content for training AI models or any secondary purpose.
3. How We Share Personal Information
We do not sell or trade your personal information. We only share data in the limited circumstances described below:
3.1 Service Providers
We share personal information with trusted third-party vendors who assist us in operating the Service, including:
- Google Firebase (authentication and secure user account management)
- Microsoft Azure (cloud infrastructure and data hosting)
- Email delivery providers (for sending revision reminders and account-related notifications)
These providers process your information only to perform services on our behalf and are bound by confidentiality, data protection, and security obligations.
3.2 Legal Requirements
We may disclose personal information if required to:
- Comply with applicable laws, regulations, or legal processes
- Protect our rights, property, or safety
- Investigate fraud, misuse, or security incidents
- Protect the safety of users or the public
3.3 Business Transfers
If Memory Lab undergoes a business transition—such as a merger, acquisition, asset sale, or restructuring—personal information may be transferred as part of that transaction. Any such transfer will remain subject to this Privacy Policy or a policy offering equivalent protections.
3.4 With Your Consent
We may share your information for any purpose not listed above only with your explicit consent.
4. Data Storage and Security
All personal data is stored and processed using Microsoft Azure Cloud Services, currently hosted in Australia (Australia Southeast region).
4.1 International Transfers & GDPR Safeguards
Because we use global cloud providers, some processing may involve transfers outside the European Union. Microsoft and Google comply with the EU General Data Protection Regulation (GDPR) through:
- Standard Contractual Clauses (SCCs)
- EU–US Data Privacy Framework
- Microsoft's Data Protection Addendum (DPA)
- Google's Data Processing and Security Terms
These frameworks provide legally recognized safeguards for international transfers.
4.2 Security Measures
We take appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit and at rest
- Strict access controls and authentication measures
- Use of reputable infrastructure providers (Azure and Firebase)
- Monitoring for security and operational integrity
While no method of storage or transmission is 100% secure, we strive to maintain industry-standard protections.
5. Your Rights
Depending on your location, you may have the right to:
- Access your Personal Information
- Correct inaccurate Personal Information
- Delete your data (including full account deletion)
- Export your data
- Restrict or object to certain processing
- Withdraw consent (where applicable)
- Lodge a complaint with your local data protection authority
You can request these rights by contacting: info@memorylab.co
6. Data Retention
We retain personal data only as long as your account remains active. If you delete your account:
- Your personal information and notes will be permanently deleted from active systems within a reasonable timeframe
- Residual data in encrypted backups will be removed according to Azure's automated backup lifecycle
- Data may be retained longer only where required by law
7. Children's Privacy
Memory Lab is not intended for individuals under 13 years old, and we do not knowingly collect data from children under this age.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website, and significant changes will be communicated to users via email or in-app notice.
9. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at: