# MemoFlow Privacy Policy > Version: v1.0 (Draft for legal review before publication) > Effective date: August 1, 2026 > Operator: Nanjing Junhe E - Commerce Co., Ltd. (南京君合电子商务有限公司) > Contact: service@memoflow8.com ## Important pre-publication notice This draft reflects MemoFlow's current product and service configuration. Before publication, the operator must confirm the production data-processing regions and vendors, verify the account-deletion workflow and retention schedule, and obtain legal review for every launch market. This draft is not a substitute for local legal advice. --- ## 1. Scope This Policy explains how MemoFlow processes information when you use its mobile applications, website, APIs, note and sync services, AI features, meeting recording, live interpretation, OCR, membership, AI Credits, and customer support. Third-party stores, identity providers, websites, and services process information under their own policies. ## 2. Information we process Depending on the features you choose, we may process: - account and identity information, including email address, password hash, verification status, login time, Apple or Google identifiers, profile information, language, and settings; - notes and files, including titles, text, blocks, attachments, exports, versions, and content you select for an AI request; - voice and interpretation data, including recordings, audio segments, transcripts, speaker labels, source and target languages, and saved session results; - OCR input and output. Supported OCR runs on the device, while content you later sync or use with cloud features may be uploaded at your direction; - AI activity, including prompts, selected context, responses, citations, model and provider choices, confirmations, tool activity, and operational metadata; - purchase records supplied by Apple or Google, such as product identifier, transaction status, subscription period, and refund or revocation state. We do not receive your full payment-card number from those stores; - device and operational data, including app version, operating system, network and request metadata, error codes, performance data, security events, and necessary server logs; and - support information you submit, including your reply address, category, message, source page, and request reference. MemoFlow may keep local notes, recordings, pending uploads, models, and caches on your device to support offline work and reliable upload. Clearing a cache does not necessarily delete notes or pending originals. ## 3. Why we process information We process information to provide and synchronize the service; authenticate accounts; complete requested AI, voice, translation, OCR, export, and sharing actions; verify purchases and maintain Credits ledgers; secure and troubleshoot the service; answer support requests; prevent abuse and fraud; comply with law; and improve reliability and user experience where permitted. Where applicable law requires consent, we request it before the relevant processing. You can withdraw consent through the available device, app, or account controls, without affecting processing already lawfully completed. ## 4. AI, voice, and external processing When you choose a cloud AI, transcription, translation, search, or refinement feature, the content required to perform that request may be sent to the configured service provider. MemoFlow is designed to limit a request to the context you select, but you should not submit secrets or information you are not authorized to process. AI output, transcription, translation, and OCR may be inaccurate. Review important names, numbers, decisions, and high-impact information. Before recording or transcribing other people, provide notice and obtain all consent required by local law or policy. ## 5. Service providers and disclosures MemoFlow uses service providers for infrastructure, storage, email delivery, authentication, app distribution and payment, AI models, embeddings, speech processing, and related operations. Current or planned providers may include Tencent Cloud, Cloudflare or compatible object storage, Apple, Google, Resend, OpenAI, OpenRouter and model providers available through it, DeepSeek, and locally deployed or contracted speech and embedding services. We disclose only the information reasonably needed for the requested function, security, payment verification, support, or legal obligation. We do not sell personal information for money. A final production provider list, processing locations, and any legally required transfer mechanism must be confirmed before publication. ## 6. Purchases and AI Credits Apple App Store or Google Play processes payment credentials and store billing. MemoFlow receives transaction information needed to validate entitlements, restore purchases, issue Credits, handle refunds or revocations, and prevent fraud. Credits are service units rather than money; their commercial rules are described in the Subscription Terms. ## 7. Retention and account deletion We retain information only as long as reasonably needed for the purposes described here, including service delivery, security, fraud prevention, accounting, legal compliance, and dispute handling. Different records require different periods. Local device data remains until you remove it, clear app data, or uninstall the application, subject to device behavior and backups. You may start account deletion in MemoFlow Settings or use https://memoflow8.com/account-deletion. Deleting an account does not cancel an App Store or Google Play subscription. The current backend immediately disables the account, revokes sessions, releases identity links, and replaces the original email; complete production release also requires a verified task that deletes or de-identifies associated data except where retention is legally necessary. The final published Policy must state the validated schedule. ## 8. Security We use measures such as encrypted transport, password hashing, access controls, least privilege, private object storage with short-lived access links, token revocation, request references, validation, rate limiting, and log redaction. No system is perfectly secure. Contact us promptly if you suspect unauthorized access. ## 9. International processing The first website and service release targets markets outside Mainland China. Information may be processed in countries or regions where MemoFlow and its providers operate. Before launch in a market, we will confirm required notices, contractual safeguards, consent, or transfer mechanisms. ## 10. Your choices and rights Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You can manage some information in the app or email service@memoflow8.com. We may verify account ownership and may retain or decline information where law permits or requires it. You may also complain to the competent data-protection authority. ## 11. Children MemoFlow is not directed to children under 14. A person below the legal age to consent in their location may use the service only with required parent or guardian authorization and supervision. Contact us if you believe a child provided information without valid authorization. ## 12. Changes and contact We may update this Policy when the product, processing, providers, or law changes. Material changes will receive appropriate notice and a new effective date, and we will request consent where required. Operator: Nanjing Junhe E - Commerce Co., Ltd. (南京君合电子商务有限公司) Registered address: No. 78, Shijiu Hubei Road, Gaochun District, Nanjing, Jiangsu Province, China (江苏省南京市高淳区石臼湖北路 78 号) Business address: No. 78, Shijiu Hubei Road, Gaochun District, Nanjing, Jiangsu Province, China (江苏省南京市高淳区石臼湖北路 78 号) Privacy contact: service@memoflow8.com Privacy Policy: https://memoflow8.com/legal/privacy Account deletion: https://memoflow8.com/account-deletion