§ 00 - LOADING STACK
◆
LangGraphLangGraph
Azure OpenAIAzure OpenAI
QdrantQdrant
Arize PhoenixArize Phoenix
LLangfuse
MMastra
Next.jsNext.js
SSupabase
LANGGRAPH ◆ AZURE ◆ QDRANT ◆ ARIZE ◆ LANGFUSE ◆ MASTRA ◆ NEXT.JS ◆ SUPABASE ◆ LANGGRAPH ◆ AZURE ◆ QDRANT ◆ ARIZE ◆ LANGFUSE ◆ MASTRA ◆ NEXT.JS ◆ SUPABASE
◆
LangGraph
Next.js
S
§ 00 - LOADING
← Memora

Memora · Privacy

Privacy Policy.

A notice under the Digital Personal Data Protection Act, 2023 (India) and the GDPR. Effective 27 June 2026. Last updated 27 June 2026.

The plain version: the Memora app itself is on-device only. Your audio, transcripts, and journal never leave your phone. The waitlist on this website collects only what you give the form (name, email, iPhone model, optional UDID, optional reason) and uses it to email you when access opens.

1. Two surfaces, two scopes

Memora has two surfaces with very different data postures:

  • The waitlist website (memora.komalvardhan.com). Standard web data collection through the form. Covered by this notice.
  • The Memora iPhone app. All processing is on-device. The app does not communicate with any server I operate. There is no Memora backend.

2. Who runs Memora

Memora is an independent personal product built and operated by an individual ("Operator"). For the DPDP Act, 2023 the Operator is the Data Fiduciary; for the GDPR the Data Controller. Contact: komalsrinivasan.l@gmail.com.

3. Personal data collected through the waitlist

3.1 Required

  • Data: name, email, iPhone model.
  • Purpose: deciding whether a TestFlight build can be provisioned for your device.
  • Lawful basis: consent (DPDP s.6 / GDPR Art. 6(1)(a)).
  • Retention: until access opens for you, or 24 months from sign-up, whichever is sooner.

3.2 Optional

  • UDID: only requested if you choose to give it. Used to add your device to the internal TestFlight distribution. Stored only until access ends; after that, deleted.
  • Reason: free-text. Used only to prioritise who I onboard first.

3.3 Server logs

  • Data: IP, user-agent, requested URL, timestamp.
  • Purpose: security and abuse prevention.
  • Retention: 30 days.

4. The app's data posture (informational)

The iPhone app stores everything in an encrypted SQLCipher database on your device, with the encryption key in iOS Secure Enclave. Recordings, transcripts, journal entries, and chat messages do not leave the device unless you explicitly enable the optional end-to-end-encrypted backup to your own cloud storage (a separate feature with its own consent step inside the app). This privacy notice covers the website. The app's in-product disclosures cover the app.

5. Sensitive personal data

The waitlist does not knowingly collect financial information, biometric data, health data, or any other sensitive personal data. Inside the app, audio and journal contents may incidentally contain sensitive personal data; because all such processing happens on your device, the Operator never receives it.

6. Processors used by the waitlist

  • Vercel Inc. (United States) - hosting.
  • Supabase Inc. (United States, Postgres in us-east-1) - database.
  • Resend, Inc. (United States) - confirmation email.

7. Cross-border transfer

The waitlist data leaves India because the processors above are in the United States. This is permitted under DPDP s.16 and under GDPR Chapter V via the standard contractual clauses these providers operate under.

8. Your rights as a Data Principal / Data Subject

Under DPDP s.11-15 and GDPR Art. 15-22 you can ask the Operator to:

  • Confirm whether your data is held, and give you a copy.
  • Correct inaccurate data.
  • Erase your data.
  • Withdraw your consent at any time, with the same ease you gave it.
  • Nominate another person to exercise these rights on your behalf in the event of your death or incapacity (DPDP s.14).
  • Receive your data in a portable, machine-readable format.

To exercise any of these, email komalsrinivasan.l@gmail.com with the subject DPDP request or GDPR request. Response within 7 days, completion within 30 days.

9. Grievance Officer

Under DPDP s.13:

  • Email: komalsrinivasan.l@gmail.com
  • Location: Hyderabad, Telangana, India
  • Response SLA: acknowledgement within 72 hours; resolution within 30 days.

Unsatisfied? Data Protection Board of India under DPDP s.27, or your local GDPR supervisory authority.

10. Withdrawing consent

Email the Operator to be deleted. Withdrawal does not affect lawful processing already completed.

11. Children's data

Memora is not directed at children. Under DPDP s.9 personal data of a child (under 18) is not knowingly processed without verifiable parental consent.

12. Automated decision-making

The waitlist does not run automated decision-making, profiling, or scoring that produces legal or similarly significant effects on you.

13. Data breach

If a breach affects your waitlist data, the Operator will notify you and the Data Protection Board of India as required by DPDP s.8(6).

14. What Memora does not do

  • Does not sell personal data.
  • Does not share with advertisers or data brokers.
  • The app does not run any analytics, telemetry, or crash reporting.

15. Changes

Material changes will be communicated to current waitlist members and the dates above will be updated.

Terms →Back to Memora