Privacy Policy.
Last updated 28 September 2026
MEMORIX is a personal vault that reads your documents, emails and notes so it can remind you about what matters. This page explains what we collect, what the AI sees, who helps us run the service and the choices you have. We have tried to write it in plain language.
MEMORIX is run by Sushant ("we", "us"). If you have a question, or want to use any of your rights, email hello@memorix.fyi.
The short version
- Your files and document text are stored encrypted with keys made from your Brain Key. Without that key, the stored copies cannot be opened, even by us.
- To read a document or answer a question, the AI has to see the content. We send it to our AI providers, who process it for us and do not use it to train their models.
- Some information is kept without your key so that reminders and search work while your phone is off: things like the dates, names and document numbers the app finds, titles, reminders and tasks.
- We do not sell your data, show ads or use advertising trackers.
- You can delete your account at any time. Everything is erased 30 days later.
What we collect
Your account
Your name, your email address and how you sign in (Google, Apple or email and password). If you link WhatsApp, your WhatsApp phone number.
What you add
The files, photos, scans, voice recordings and notes you put in your vault, and what you type or say to the assistant.
What the app works out
From what you add, the app works out things like the type of document, a title, dates, names, amounts, document numbers, reminders and tasks. Useful facts from your conversations can be saved so the assistant remembers them next time.
Accounts you connect
Only if you choose to connect them:
- Gmail and Outlook mail: we read your messages to find what matters, such as bills, deadlines and documents, save the attachments you want into your vault and write draft replies. We only send an email when you confirm it.
- Google Drive and Dropbox: we read your files so you can bring them into your vault.
- Google Calendar and Outlook calendar: we read your events.
- WhatsApp: we receive the messages and files you send to the MEMORIX number.
Phone permissions
Only when you allow them:
- Camera: to scan documents.
- Photos: to find photos that look like documents, such as receipts, bills and letters. Each photo is checked on your phone first, and only likely documents are uploaded. You can turn automatic import off.
- Microphone and speech recognition: to record voice memories and talk to the assistant. Your phone's built in speech recognition service turns your speech into text.
- Contacts: if you invite people from your contacts, we only receive the people you pick. We never upload your contact list.
- Notifications: to remind you. We keep a notification token for your device.
- Fingerprint or face unlock: handled entirely by your phone. We never receive your biometric data.
Receipts (optional)
If you turn on Receipts, the receipts you scan are stored readable, not encrypted with your key, so we can show your spending and answer questions about it.
Usage and technical data
How much AI work your account uses (to apply your credits and limits), the plan you are on, and basic technical logs that keep the service secure and help us fix problems.
How we protect your data
- Everything travels over encrypted connections.
- Files and document text in your vault are stored encrypted with AES-256-GCM, using keys made from your Brain Key. The stored copies cannot be opened without your key. If you lose your Brain Key and every device you are signed in on, we cannot open those files for you.
- Information kept without your key (the facts and dates the app finds, titles, reminders, tasks, receipts and account details) is stored on our servers, protected by access controls and encryption at rest. Files that are still being processed, and attachments you send by email, can also be held for a while without your key.
- Through the app, only you and the people you choose to share with can reach your data. We only look at your data when we need to keep the service running, when you ask us to fix a problem, or when the law requires it.
What the AI sees
To read a document, photo, recording or email, to answer a question, or to speak a reply, the app sends the content it needs to our AI providers:
- Google (Gemini) reads documents, photos, recordings and emails, and writes answers.
- OpenAI builds the search index for your memories and turns replies into speech.
They process this content for us under their business terms. They do not use it to train their models, but they may keep it for a short time to detect abuse. Files sent to Google for reading are deleted by Google within 48 hours.
AI can make mistakes. Please check important dates, amounts and details against the original document.
Google user data
MEMORIX's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use data from your Google account only to provide the features you turn on. We do not sell it, use it for advertising, or use it to develop, improve or train general AI or machine learning models. No person at MEMORIX reads it unless you ask us to (for example, to fix a problem), it is needed for security, or the law requires it.
Who we share data with
We only share data with services that help us run MEMORIX, and only what they need:
- Supabase: our servers, database, file storage and sign in. Our servers are in Mumbai, India.
- Google: Gemini AI, Google sign in and notifications. Gmail, Google Drive and Google Calendar only if you connect them.
- OpenAI: the search index and spoken replies.
- Apple: sign in, if you use it.
- Microsoft: Outlook, if you connect it.
- Dropbox: if you connect it.
- Meta: WhatsApp, if you use it.
- Cloudflare: hosts this website.
People in your Trust Network see what you choose to share with them. We may disclose data when the law requires it, or to protect someone from harm. If MEMORIX is ever sold or merged, your data would move with it, and we would tell you first. We never sell your data.
Where your data is processed
Our main servers are in India. Our AI and service providers may process data in other countries, including the United States. When your data leaves the country where it was collected, we rely on our providers' data protection terms to keep it protected.
How long we keep it
- Your vault, facts, reminders and tasks: until you delete them or your account.
- Deleting your account: you have 30 days to change your mind. After that, everything is permanently erased, including your files. Any copies in backups are removed on our backup schedule.
- Receipts: turning Receipts off stops new scans but keeps the receipts you already have. They are deleted with your account, or sooner if you email us.
- Connected accounts: disconnecting stops our access straight away.
- Usage records: kept as long as we need them for billing, security and the law.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it. Email hello@memorix.fyi and we will reply within one month. You can withdraw your consent at any time by disconnecting an account or turning a feature off.
You can also complain to your data protection authority. In the UK that is the Information Commissioner's Office; in India, the Data Protection Board of India.
Our legal basis (UK and EU)
We use your data to provide the service you asked for (contract); for connected accounts, automatic photo import and Receipts, because you turned them on (consent); to keep MEMORIX secure and prevent abuse (legitimate interests); and where the law requires it (legal obligation).
Children
MEMORIX is for people aged 18 and over.
This website
This website does not use advertising or tracking cookies. If you sign in on the web, your browser stores your sign in session so you stay signed in.
Changes to this policy
If we change this policy we will update this page. If a change is important, we will also tell you in the app.