Privacy Policy

1. General

Memmo Learning AB ("Memmo") provides a service that gives users access to course literature in the form of e-books ("The Service"). Memmo values personal privacy and wants everyone who chooses to use the Service, visits Memmo's website, or otherwise interacts with Memmo to feel secure in providing their personal data. Such data will be treated with respect and in accordance with applicable data protection laws. Memmo is the data controller for all personal data processing carried out within Memmo's operations. "Personal data" refers to any information that can be linked to an identifiable living individual.

This Privacy Policy ("Policy") describes how Memmo handles the collection, storage, use, and sharing of personal data. The Policy applies to users of the Service and to all individuals who visit Memmo's website memmo.org, contact Memmo, or otherwise interact with Memmo.

Memmo encourages you to regularly review this Policy to stay informed about how Memmo processes personal data.

2. Purpose of Memmo's Personal Data Processing

Memmo processes personal data to manage relationships between Memmo and its customers and to fulfill contractual or legal obligations. Memmo also processes personal data to improve the Service and its functionality. This includes the use of personal data for market and customer analysis, market research, statistics, business monitoring, and business and method development.

Memmo processes personal data to make the Service, offers, and recommendations as personalized as possible, aiming to minimize the risk of irrelevant marketing.

Personal data related to certain users' preferences, behaviors, education, needs, or lifestyles collected by Memmo may also be used for targeted marketing to potential new customers.

Personal data may also be used for targeted marketing on social media platforms such as Facebook, TikTok, and Instagram, as well as on Google. Additionally, Memmo may analyze and combine personal data with other information about the user available from third parties.

Memmo's processing of personal data is also necessary to uphold Memmo's general terms and conditions and to detect, investigate, and prevent potential prohibited or illegal activities.

3. When Personal Data Is Collected and How It Is Handled

Memmo collects personal data about you when you visit Memmo's website memmo.org, create an account, use the Service, contact customer support, link the Service to social media or other similar third-party services, or respond to surveys or other communications from Memmo.

Memmo may also collect personal data in other cases where it is necessary to manage the relationship between you and Memmo. Memmo collects information through its own cookies and third-party cookies.

Memmo uses additional tracking technologies, such as beacons, tags, and pixels, to log your activities and choices while using the Service or interacting with Memmo. This usage aims to improve Memmo's website, the Service, offers, and marketing, simplify login, remember settings, and provide information on how users access the Service.

Further information about Memmo's use of cookies is available in Memmo's Cookie Policy on its website. Based on the purposes mentioned above, Memmo may collect and process the following personal data:

Basic User Data

First name, last name, user ID, email address, address, phone number, and university. Memmo may also collect personal data about your family, such as names, email addresses, dates of birth, and interests. If you provide such information, you are responsible for ensuring that you have consent from these individuals and that they are informed about our data processing practices.

Payment Information

Information about selected payment methods, such as card type, expiration date, payment history, and details about trial periods and inactive subscription periods. Payment information is collected by Stripe. See Stripe Privacy Policy for more information. Since Memmo collaborates with Stripe, complete payment details (e.g., full credit card numbers) are not stored by Memmo. If you registered as an invoice customer, Memmo may collect and process payment details you provide to enable invoicing through its payment service providers.

Usage History

Search history, clicks on the website and app, selected titles, saved books, ratings of course literature, bookmarks, favorite authors/topics, times and durations of book readings, and connections between education and selected course literature.

Survey and Questionnaire Responses

Customer responses to surveys/questions, which may include personal data.

Email and Notification Interaction

Interactions with emails, in-app messages, and push notifications, such as whether an email was opened or links were clicked, including timestamps and geographic locations.

Technical Data

Unique platform identifiers, device IP addresses, Memmo app version, app settings, language preferences, URLs, encrypted passwords, geographic location, and device type.

Third-Party Data

Data from connected services like Facebook or Instagram, where applicable.

Recordings and transcripts: When you use Memmo's recording feature, the following is collected: the recorded audio, the automatically generated transcript, AI-generated notes, and metadata (time, duration, course association). You decide when recording starts and stops. Recordings are linked to your account and not visible to other users unless you actively share them.

If your recording contains other identifiable individuals, such as lecturers or classmates, you act as data controller for their personal data and are responsible for informing them and obtaining any necessary consent under the GDPR. In that case, Memmo acts as data processor on your behalf for that content.

4. Location Where Memmo Stores Personal Data

Memmo stores personal data on servers located in Sweden and, in some cases, outside the EU/EEA. In such transfers, adequate security measures are applied to protect personal data.

5. Legal Basis for Processing Personal Data

Legitimate Interest

Memmo processes personal data when Memmo or a third party is deemed to have a legitimate interest. Such a situation arises when Memmo's or the third party's right to manage information outweighs the risks posed to the user by the processing of their personal data. For instance, this may occur when the user contacts Memmo for assistance with features in the Service.

Legal Obligation

Memmo may process personal data when necessary to fulfill a legal obligation under national or EU legislation.

Consent

Memmo may process certain personal data based on the user's consent, which the user can withdraw, in whole or in part, at any time. Examples include Memmo accessing personal data from social media platforms such as Facebook.

If a user provides Memmo with personal data about other individuals, such as family members, the user is responsible for ensuring consent from these individuals.

6. Integrity and Data Security

Memmo has implemented various technical and organizational security measures to protect your personal data from unauthorized access, use, and disclosure. Only authorized personnel at Memmo have access to personal data. Additionally, Memmo uses firewalls, encryption, passwords, and antivirus software to secure personal data. Although Memmo regularly evaluates and implements security measures, no system is entirely secure. Memmo encourages you to notify Memmo immediately if you detect any suspicious activity related to the Service or Memmo's website.

7. Disclosure of Personal Data

Memmo may share personal data with third parties that provide services to Memmo, such as payment services (e.g., Stripe), AI and language-model services for transcription and AI notes (Google Cloud — Speech-to-Text/Chirp 2 and Gemini), marketing services, analytics tools, and customer support. Memmo has data processing agreements in place with these parties and ensures that they only have access to personal data to the extent necessary to perform their services. Recorded audio and transcripts are processed within the EU/EEA and are not used to train sub-processors' AI models.

8. External Links and Websites

Information from Memmo may include external links to websites not owned by Memmo. Memmo takes no responsibility for how personal data is processed on these websites and refers you to the privacy information provided on the respective websites.

9. Changes to the Policy

Memmo reserves the right to make changes to this Policy. Information about changes will be communicated in advance via email, SMS, or notices through the Service if they impact Memmo's obligations or your rights. This allows you to consider the new Policy, which will be available on Memmo's website. Memmo may also contact you to obtain new consent if required due to changes.

10. Legal Rights

When Memmo processes your personal data, and this takes place within the EU/EEA or you are located within the EU/EEA, certain statutory rights regarding your personal data apply. You can exercise these rights by contacting Memmo. Note that some of these rights are only applicable under specific circumstances.

Right of Access

You have the right to ask Memmo why, how, and whether Memmo processes personal data about you. You also have the right to request information about the personal data Memmo handles.

Right to Rectification

Memmo has an obligation to amend or supplement incorrect or incomplete personal data at your request to ensure it is accurate.

Right to Erasure

In certain situations, you can request that Memmo delete your personal data.

Right to Restrict Processing

In certain situations, you can request that Memmo restricts the use of your personal data. In such cases, Memmo may only process your personal data in specific circumstances as permitted by law.

Right to Data Portability

In certain situations, you have the right to receive the personal data Memmo processes about you in a structured, commonly used, and machine-readable format. You also have the right to transfer such personal data to another entity.

Right to Object

Under certain circumstances, you have the right to object to Memmo's processing of your personal data. Memmo may then be required to cease processing. For example, you may object to Memmo using your personal data for profiling or marketing in specific situations.

Additionally, you always have the right to file a complaint if you believe Memmo's processing of your personal data violates applicable law. Such a complaint should be submitted to the Swedish Data Protection Authority (Datainspektionen) if you reside and/or work in Sweden or if Memmo's processing took place in Sweden. Otherwise, it should be submitted to the relevant supervisory authority.

11. How to Request Deletion of Your Personal Data

If you would like to request the complete deletion of your personal data collected by Memmo, you can contact us via email at hello@memmo.org with the subject line "Request for Deletion of Personal Data."

Your request should include:

• Your full name

• The email address associated with your Memmo account

• A clear statement that you wish to have your entire personal data deleted

This option is available to all users worldwide, not only those within the EU/EEA.

Once we receive your request, we will process it in compliance with applicable data protection laws and confirm once the deletion is completed.

For any other privacy-related inquiries, you may contact us at hello@memmo.org.

12. Contact Information

If you have questions about Memmo's processing of personal data, please contact Memmo as follows:

Email: hello@memmo.org

Last updated on April 22, 2026.