Legal

Privacy Policy

Last updated: May 25, 2026 · Effective immediately

한국어

We believe your memory is yours. Here's exactly what we collect, why, and what we never do with it.

What we collect

• Email address — to create your account and send briefings
• Google Calendar data — event titles, times, locations, attendee emails, and links (read-only; see Google section below)
• Notes and documents — text you add, paste, or upload to Mnemonic
• Meeting transcripts — text segments you capture during a meeting (see Live capture below)
• AI-generated content — briefs, summaries, and Ask Mnemonic responses stored in your account
• Usage data — basic product analytics to improve reliability; not sold to advertisers

Live capture, audio, and transcripts

When you use Live capture or Meeting mode in a meeting workspace:

• Mic mode: your browser may use speech recognition (e.g. Web Speech API). We store text segments you save — not continuous raw audio from mic-only mode.
• Tab audio / desktop tray: short audio chunks may be sent to our servers for transcription via AssemblyAI or Deepgram (whichever is configured). We store the resulting text in your account. Audio chunks may be stored temporarily in your private Supabase storage bucket for backup and re-processing, then used only to serve you.
• File uploads: if you upload audio, PDF, DOCX, or text, we process the file to extract text for your memory (Ask Mnemonic, briefs, recaps).

We do not join your video call as a bot. We do not sell recordings. You can delete meetings (transcripts and stored chunks) or your entire account at any time.

Consent: You are responsible for obtaining consent from other participants before recording or transcribing meetings, as required by your local laws.

Mnemonic Desktop tokens

If you use the desktop tray app, you generate a desktop token in Settings. We store only a hash of that token on our servers — not the token itself after display. The token lets the desktop app upload audio chunks to your account on your behalf. Revoke access by deleting the token row in Settings (generate a new token) or deleting your account.

What we never collect

• Slack, Gmail, or other tools — unless you explicitly connect them in the future
• Advertising profiles or sale of your data to third parties
• Anything outside scopes you approved (e.g. read-only Calendar)

How we use your data

• To generate your pre-meeting context briefs
• To send you briefing emails and product updates
• To improve the quality of briefs over time
• To debug issues and provide support

AI processing — not used for training

We use the Anthropic API to generate briefs, summaries, and answers. Under Anthropic's commercial API terms, your content is not used to train Anthropic's models. We do not use your data to train our own models. Prompts and responses are processed to provide the service to you only.

Subprocessors (who processes your data)

We use the following processors to run Mnemonic. They process data only on our instructions, for the purposes listed:

Processor	Location	Purpose
Supabase, Inc.	United States	Database, authentication, row-level security
Anthropic PBC	United States	AI briefs, summaries, Q&A (no model training)
Google LLC	United States	OAuth sign-in and Calendar API (read-only)
Resend, Inc.	United States	Transactional email (briefs, product mail)
Vercel Inc.	United States	Application and website hosting
AssemblyAI, Inc.	United States	Speech-to-text and speaker diarization (when enabled)
Deepgram, Inc.	United States	Speech-to-text fallback (when enabled)
Lemon Squeezy	United States	Payment processing (Merchant of Record) when paid plans launch

We do not sell your data. We do not share it with advertisers. Ever. A living list is maintained at docs/security/subprocessors.md.

Data retention

• Your data is stored for as long as your account is active
• When you delete your account (Settings → Delete account), all data is permanently removed from our systems within 30 days
• You can export a full copy of your data anytime (Settings → Export my data)

Your rights

• Access — request a copy of all data we hold about you
• Correction — ask us to fix inaccurate data
• Deletion — delete your account and all associated data
• Portability — export your data in a machine-readable format
• Objection — opt out of any processing you're uncomfortable with

Google user data

Mnemonic integrates with Google Calendar. When you connect your Google account, we access the following data:

• Google account email and basic profile — for authentication only
• Google Calendar events — titles, times, locations, attendee emails, and links for a rolling window of 30 days in the past through 14 days ahead (scope: calendar.readonly)

We request read-only access to Google Calendar. We do not create, modify, delete, or share your calendar events. We do not access Gmail, Google Drive, or any other Google service.

Calendar data is fetched when you click "Sync Google Calendar," when you open the app (background sync, at most every few hours), or via our scheduled sync job if configured. We do not access Gmail or contacts outside your events.

All Google user data is:

• Stored securely in your private account with row-level security
• Never sold, shared with third parties, or used for advertising
• Never used to train AI models (including Anthropic's models)
• Permanently deleted within 30 days of account deletion

Mnemonic's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Healthcare and regulated data

Mnemonic is not a HIPAA-compliant or medical-device service. Do not use Mnemonic to store protected health information (PHI), patient records, or other data subject to healthcare-specific regulations unless you have obtained appropriate legal review and contractual agreements. For hospital or clinical workflows, contact us before use.

Security

All data is encrypted in transit (TLS) and at rest on our infrastructure providers. Each account's data is isolated with database row-level security (RLS). API keys and secrets are never exposed in the browser. We review access and dependencies regularly. If we discover a breach that affects your data, we will notify you within 72 hours at the email on your account.

Privacy contact (Korea / PIPA)

For privacy inquiries, data subject requests, or complaints under applicable Korean law:

• Privacy contact: hello@mnemonic.fyi
• We respond to access, correction, deletion, and portability requests without undue delay

Changes to this policy

If we make material changes to this policy, we'll email you at least 30 days before they take effect. You'll always be able to find the latest version at mnemonic.fyi/privacy.