Last updated: April 8, 2026

This Privacy Policy describes how we collect, use, and protect personal data when you visit memvo.ai or use the Memvo macOS application.

We respect your privacy. Memvo is built around a local-first principle: most of your data — including your voice recordings, transcripts, and personal memories — stays on your own Mac and is never transmitted to our servers. This Privacy Policy explains exactly which data leaves your device, why, and who processes it.

1. Controller

The party responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Elwin Nesiris und Oskar Neftels Film GbR Biedermannplatz 10 22083 Hamburg Germany

Email: info@runandgun.agency

The legal representatives of the GbR are Elwin Nesiri and Oskar Neftel.

2. Scope of this Policy

This Privacy Policy applies to the website memvo.ai, the Memvo macOS application, and all related services such as license activation, payment processing, and email communications. It does not apply to third-party websites linked from memvo.ai. Please review the privacy policies of those websites separately.

3. Data That Stays on Your Mac

When you use Memvo, the following data is created and stored only on your local device:

Voice recordings (temporarily stored while being processed, then automatically deleted), transcripts of your dictations, your personal memory database, vocabulary corrections, Quick Paste snippets, lifetime usage statistics such as words spoken and total recording time, and application logs for diagnostic purposes.

We do not have access to any of this data. It never leaves your Mac. We cannot read, retrieve, or delete it from our side. If you delete the Memvo application or its data folder, this data is permanently gone.

4. Data Transmitted to Service Providers

In order to deliver Memvo's core functionality, certain data needs to be processed by external service providers. The following describes which data is transmitted, to whom, and for what purpose.

When you make a recording, the audio is transmitted to Groq, Inc. for speech-to-text transcription. Groq processes the audio and returns a transcript. According to Groq's terms for API customers, audio data is not used to train their models and is not retained beyond the request itself.

The resulting transcript is then transmitted to Google LLC for cleanup, the generation of relevant context blocks from your local memory, the extraction of new facts to be added to your local memory, and the creation of the vector embeddings used for memory search. We use the Google Gemini API on a paid plan. According to Google's terms for paid API customers, your prompts and responses are not used to train Google's models. Data is processed solely to deliver the requested service and is retained only briefly for abuse detection and legal compliance purposes.

When you activate Memvo on your Mac, your license key and a randomly generated device ID are transmitted to our backend for license validation. Your email address is associated with your license at the time of purchase and stored together with your license details in a database hosted on Supabase Inc. servers in Ireland.

When you purchase a license, your email address and payment information are processed by Stripe, Inc. Stripe handles all credit card details directly. We never see or store your credit card data. Stripe sends us a notification with your email address and subscription status, which we store in our license database.

After purchase, we send you a welcome email with your license key and a follow-up email with a Memvo walkthrough. These emails are delivered through Resend, Inc. Resend processes your email address solely for the purpose of delivery.

For each transcription or AI request you make, we record metadata such as a device identifier, the type of request, numerical token counts, and a timestamp. We do not record the contents of your audio recordings, transcripts, prompts, or memories. This metadata is used to monitor service health and to display anonymous, aggregated usage statistics on memvo.ai (such as the total amount of typing time saved across all users).

Our backend infrastructure is hosted by Cloudflare, Inc., which provides routing, security, and file hosting for our service. Cloudflare may temporarily process technical request metadata as part of normal hosting operations.

5. Data Collected When You Visit memvo.ai

The memvo.ai website is hosted by Framer B.V. When you visit the site, Framer may set technical cookies that are strictly necessary for the website to function. We do not use third-party analytics, tracking pixels, or marketing cookies on memvo.ai. Your IP address is processed by Framer's servers for the technical purpose of delivering the website to you. Framer's privacy practices are described at framer.com/legal/privacy.

6. Purposes and Legal Bases

We process your personal data on the following legal bases under Article 6 GDPR.

Providing the core Memvo service, processing payments, sending transactional emails such as your license key and walkthrough, and validating your license are all based on Article 6(1)(b) GDPR — performance of a contract with you.

Logging numerical metadata to monitor service health, displaying aggregated and anonymous usage statistics on memvo.ai, and responding to support inquiries are based on Article 6(1)(f) GDPR — our legitimate interest in maintaining, improving, and marketing our service in a transparent way.

7. Recipients of Personal Data

The following service providers receive personal data on our behalf and are bound by Data Processing Agreements where required by Article 28 GDPR:

Groq, Inc. (United States) for speech-to-text transcription. Google LLC (United States) for text processing and embeddings via the Gemini API. Stripe, Inc. (United States) for payment processing. Resend, Inc. (United States) for transactional email delivery. Cloudflare, Inc. (United States and global) for hosting, routing, and file delivery. Supabase Inc. (Ireland, EU) for license database and metadata storage. Framer B.V. (Netherlands, EU) for website hosting.

8. International Data Transfers

Several of our service providers are located in the United States, including Groq, Google, Stripe, Resend, and Cloudflare. When personal data is transferred to these providers, the transfer is protected by Standard Contractual Clauses approved by the European Commission, in accordance with Article 46 GDPR. Where applicable, additional safeguards such as encryption in transit and provider-specific data protection commitments are in place. Several of our US-based providers are also certified under the EU-US Data Privacy Framework, which provides an additional adequacy decision under Article 45 GDPR. You can review the relevant safeguards on each provider's privacy page.

9. Storage Duration

We retain your personal data only as long as necessary for the purposes described above.

License data, including your key, device ID, email, and subscription status, is retained for the duration of your subscription plus up to 12 months after cancellation for billing reconciliation and legal record-keeping. Usage metadata is retained for up to 12 months and then aggregated, after which the underlying records are deleted. Technical request logs at our hosting provider are retained for a maximum of 7 days according to Cloudflare's standard policy and contain only metadata, not user content. Email communications are retained until you request deletion. Aggregated, anonymous statistics displayed on memvo.ai are retained indefinitely as they no longer constitute personal data.

After the relevant retention period, your personal data is deleted or anonymized. Locally stored data on your Mac is retained until you delete the Memvo application or its data folder yourself. We have no access to it.

10. Your Rights

Under the GDPR, you have the right to access the personal data we hold about you (Art. 15), to request correction of inaccurate or incomplete data (Art. 16), to request deletion of your personal data (Art. 17), to request that we restrict the processing of your data in certain circumstances (Art. 18), to receive your data in a structured and machine-readable format (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing is based on your consent, you may withdraw it at any time. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, datenschutz-hamburg.de.

To exercise any of these rights, contact us at info@runandgun.agency. We will respond within 30 days, as required by Article 12 GDPR.

11. Cookies and Website Tracking

We do not use third-party analytics, advertising cookies, or marketing trackers on memvo.ai. The website uses only strictly necessary technical cookies set by Framer to deliver the site. These cookies do not require consent under § 25(2) TTDSG and the ePrivacy Directive because they are essential for the functioning of the website. You can disable cookies in your browser settings, although this may affect site functionality.

12. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmitted between your device and our service providers is encrypted in transit using TLS. The Memvo application binary does not contain any sensitive credentials. Access to backend systems is restricted to the legal representatives of the company. Each license key is bound to a single device to prevent unauthorized use.

13. Children

Memvo is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will delete it.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our service, providers, or legal requirements. Material changes will be communicated to existing users via email and reflected in the "Last updated" date at the top of this policy. The current version of this Privacy Policy is always available at memvo.ai/privacy.

15. Contact

If you have questions about this Privacy Policy or wish to exercise your rights under the GDPR, contact us at:

Elwin Nesiris und Oskar Neftels Film GbR Biedermannplatz 10 22083 Hamburg Germany

Email: info@runandgun.agency