MemoChat Privacy Policy & Terms and Conditions

MemoChat Privacy Policy

This Privacy Policy explains how AnimaTech OÜ processes personal data when you use the MemoChat website and the MemoChat applications for iOS and Android (together, the “Service”).

1. Controller and contact

The controller is:

The competent supervisory authority in Estonia is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), https://www.aki.ee.

2. Data MemoChat processes

Depending on how you use the Service, we process:

• Account and profile data: phone number, username, public MemoChat ID, optional profile photo, account settings, privacy settings, blocked-user and chat relationships. Other users see your username and profile photo and can find you by your phone number or username; your phone number and public ID are shown only to people you have written to. In Settings → Privacy and Security you can stop people finding you by number or username and hide your ID and photo.
• Authentication and security data: verification status, session tokens, Firebase anonymous identifier, device-attestation results, login and security-event metadata, and rate-limit digests. MemoChat does not store your one-time verification code.
• Messaging data: chat membership, sender and recipient identifiers, timestamps, delivery/read state, reply references, emoji reactions, the length and waveform shape of voice messages, encrypted message content, and encrypted media object references.
• Presence data: while you use MemoChat, whether you are online, when you were last online and whether you are typing or recording in a chat. It is kept in Google Firebase so the apps of the people you chat with can show it, and any signed-in MemoChat app can read it; there is no setting to hide it yet.
• Device and diagnostics data: push-notification token, Firebase installation identifier, app version, operating system and device information, IP address received by network services, app-start events sent with crash reports, crash type, stack trace and technical diagnostics. Production application logs are designed to exclude message text, media, phone numbers, email addresses, credentials and encryption keys.
• Support data: email address and the information you choose to include when you contact support or submit feedback.
• Reports: when you report someone, who reported whom, the chat, the reason and the comment you add.
• Purchase data: product, transaction and entitlement information supplied by Apple or Google if paid features are offered and you make or restore a purchase. MemoChat does not receive your full payment-card details. Paid features are not exposed in the current Phase 1 application.
• GIF data: GIF search terms are sent directly from the application to GIPHY when you use GIF search, and the GIF picker loads trending GIFs from GIPHY when you open it. When you send or receive a GIF, your device loads it from GIPHY, which sees your IP address. Selected GIF identifiers and URLs may be kept on your device as recents or favourites and included inside the encrypted message you choose to send.

Camera, microphone, photo-picker and notification access are used only after you choose the related feature or grant the operating-system permission. MemoChat does not upload your address book and does not request continuous or precise location access.

3. Why we process data

We process personal data to:

• create and secure your account;
• deliver messages, media, notifications and real-time updates;
• provide profile, privacy, blocking and account-management features;
• prevent abuse, fraud, account takeover and SMS pumping;
• maintain, debug and improve the reliability of the Service;
• respond to support and legal requests; and
• verify purchases and entitlements when paid features are available.

The legal bases are performance of the user contract, our legitimate interests in operating and protecting the Service, compliance with legal obligations, and consent where the law requires it. You can withdraw consent at any time, without affecting processing already carried out lawfully.

4. Message encryption

Current MemoChat clients encrypt text, voice notes, photos and Saved Messages on the sender’s device before upload. They use X25519 key agreement, HKDF-SHA-256 key derivation and AES-256-GCM authenticated encryption. Context such as the chat, sender, message type and protocol version is authenticated in the current protocol so moved or altered ciphertext fails to decrypt.

The server stores and relays encrypted message content and encrypted media. It does not hold the private device keys required to decrypt current-protocol content. Public identity keys are published through an authenticated key directory so other devices can establish encrypted conversations.

Your private identity key is stored in the operating system’s secure storage. It is preserved across an ordinary logout on the same device so that the same account can decrypt its existing history after signing in again. When account deletion is initiated inside the app, the app attempts to delete that device’s private identity key as part of local cleanup. A server, web or email deletion cannot erase key material from an offline, uninstalled or otherwise unreachable device. Losing or replacing the device may make old encrypted content unavailable if the necessary key is no longer present.

Notifications are delivered through Firebase Cloud Messaging and Apple Push Notification service. They show the sender’s username and the kind of message (“New message”, “Voice message” or “Photo”). So that a message can reach your phone while MemoChat is closed, a notification may also carry the message in its encrypted form and, for a voice message or photo, a link to the encrypted file that works for 10 minutes and the details the server already holds, such as a voice message’s length. The push providers cannot read it. With message previews on, your phone decrypts the text and shows it in the notification; with previews off it shows only the sender and the kind of message. Message plaintext is not supplied to the push provider by MemoChat.

When you check a contact with Verify together, the two phones exchange short handshake messages through MemoChat’s server, which passes them on without storing them, and the other person gets a notification that you want to verify. The emojis you compare are worked out on the two phones from secrets the server never sees.

Legacy messages created by older MemoChat versions may use an older encryption format. MemoChat retains compatibility only as needed to let existing users upgrade; new normal-chat writes fail closed if current encryption cannot be established.

5. Other security measures

Network traffic uses HTTPS/TLS or secure WebSockets. The local message database uses SQLCipher encryption and an account-scoped key held in secure storage. Selected account fields stored by MemoChat’s backend use authenticated AES-256-GCM encryption at rest; older rows may be read through a legacy migration-compatible decryptor. Media uploaded to object storage is encrypted by the client before upload.

No system is perfectly secure. If you believe your account or data has been compromised, contact info@memochat.net.

6. Service providers and international transfers

MemoChat uses service providers to operate the Service, including:

• Amazon Web Services for application hosting, MemoChat’s own real-time message service, databases and encrypted media storage;
• Google Firebase for push delivery, anonymous device authentication, App Check, crash reporting with app-start events and an installation identifier, in-app messages and the public-key/presence directory;
• Apple Push Notification service for notifications on Apple devices;
• Twilio Verify for phone-number verification (Twilio keeps its own records of verification requests under its terms);
• Mailgun for delivering support and feedback email;
• GIPHY for optional GIF search and delivery; and
• Apple App Store and Google Play for application distribution and, when enabled, purchase processing.

These providers receive only the data needed for their function. Some process data outside the European Economic Area. Where required, we rely on an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism. A provider may also process limited technical data under its own privacy terms when you interact directly with its service, such as GIPHY search or an app store.

We do not sell personal data. We may disclose data when required by law, to protect users or the Service, or in a corporate transaction subject to appropriate safeguards.

7. Retention

• Your account and profile remain until you delete your account. MemoChat does not delete accounts only because they are inactive.
• Encrypted messages and media remain while the relevant account or chat exists, unless a user deletes them or an optional expiry setting applies.
• Push tokens and authentication tokens are removed when you delete your account. Logging out also revokes them when your phone can reach MemoChat; a token it could not reach expires on its own.
• Local message rows, decrypted media, drafts and in-memory caches are cleared on logout. The account’s private identity key, with the record of which contacts’ keys you verified, is the exception described in Section 4 and is retained for same-account continuity until account deletion.
• Reports are kept for 12 months, also after either account is deleted, so repeated abuse can be recognised. Feedback you send is kept for 12 months.
• Operational and security records are kept only for the period needed to investigate incidents, prevent abuse and meet legal obligations. Records needed for an active security or legal matter may be retained until that matter is resolved.
• Data in protected backups may remain for the applicable backup cycle. A disaster-recovery restore may temporarily reintroduce earlier data until deletion is reconciled in the restored system, unless retention is required by law.

8. Account and data deletion

You can delete your account inside MemoChat:

1. Open Settings.
2. Tap your profile card to open Edit Profile.
3. Scroll to Delete account and confirm.

When deletion is confirmed inside the app, the app starts local cleanup on that device. An externally verified request cannot remotely erase an offline, uninstalled or unreachable device. The backend removes the active account and profile, authentication and push tokens, settings, subscriptions, relationships, the account’s authored messages, and its Firebase identity-key and presence records. Removal of associated media, provider copies and backup copies may take longer than removal of the active account record. Other people’s own messages are not deleted merely because they previously chatted with you. Information that must be retained for security, fraud prevention or a legal obligation may be isolated and kept only for that purpose.

If you no longer have the app, use the dedicated account-deletion page or email info@memochat.net. We may need to verify that the requester controls the account before completing deletion.

You may also delete individual messages using the available message deletion controls. Deleting a chat “for me” removes it only from your view unless the interface explicitly says the deletion applies to everyone.

9. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent and complain to a supervisory authority. Contact info@memochat.net to exercise these rights. We may ask for reasonable proof of identity and will respond within the period required by law.

10. Children

MemoChat is not directed to children under 16. We do not knowingly permit an under-16 user to create an account. Contact us if you believe a child has provided personal data contrary to this rule.

11. Changes

We may update this policy when the Service, law or our processing changes. The current version and its effective date will be posted on the MemoChat website and made available from the application. Material changes will be communicated when required.

12. Contact

Privacy questions and requests: info@memochat.net.

MemoChat Terms and Conditions

Last updated: 14 August 2026

Welcome to MemoChat. These Terms and Conditions (“Terms”) govern your use of the MemoChat website and the MemoChat mobile application for iOS and Android (collectively the “Platform”). By creating an account or using the Platform, you agree to these Terms.

The Platform is operated by:

1. Eligibility

You must be at least 16 years old to use MemoChat. By using the Platform, you confirm that you meet this age requirement. If you are under 18, you confirm that your parent or legal guardian has reviewed and agreed to these Terms on your behalf.

2. Your account

You are responsible for maintaining the security of your account. You agree to:

• provide accurate information when creating your account;
• keep your login credentials secure and not share them with others;
• notify us immediately if you believe your account has been compromised; and
• not create more than one account per person.

We reserve the right to suspend or terminate accounts that violate these Terms.

3. Acceptable use

You agree not to use MemoChat to:

• send spam, unsolicited messages or bulk messages;
• harass, threaten, intimidate or abuse other users;
• share content that is illegal, harmful, hateful or promotes violence;
• share content that exploits or harms minors in any way;
• impersonate another person or entity;
• distribute malware, viruses or harmful software;
• attempt to access other users’ accounts or data without authorization;
• interfere with or disrupt the Platform’s operation;
• use the Platform for illegal activity; or
• reverse-engineer, decompile or attempt to extract the source code of the Platform.

4. Content and messages

You retain ownership of the content you send through MemoChat. By using the Platform, you grant us a limited license to transmit and temporarily store your content solely to deliver it to the intended recipient.

Current MemoChat clients encrypt supported message content on the sender’s device. MemoChat’s servers store and relay ciphertext and do not hold the private device keys required to decrypt current-protocol messages. Legacy messages created by older versions may use an older format. You are solely responsible for the content you share.

We may remove content or suspend accounts if we receive reports of violations of these Terms, to the extent technically possible given our encryption model.

5. Privacy and encryption

Your privacy is fundamental to MemoChat. Current clients protect supported message content with end-to-end encryption, subject to the legacy-format and key-availability limitations described in the Privacy Policy.

6. Intellectual property

The MemoChat name, logo and all related trademarks, designs and intellectual property are owned by AnimaTech OÜ. You may not use our branding without prior written permission.

The Platform’s software, design and underlying technology are protected by copyright and intellectual-property laws. You are granted a limited, non-exclusive, non-transferable license to use the Platform for personal, non-commercial purposes.

7. Third-party services

MemoChat uses services including Google Firebase, Amazon Web Services, Twilio Verify, Mailgun, GIPHY, Apple App Store and Google Play. Your use of features powered by these services may also be subject to their terms. GIFs provided through GIPHY are subject to GIPHY’s terms and acceptable-use policies.

8. Availability and changes

We strive to keep MemoChat available, but do not guarantee uninterrupted access. We may perform maintenance, update or discontinue features, and change these Terms with reasonable notice. If we make significant changes, we will notify you through the Platform or another reasonable method. Continued use after changes take effect constitutes acceptance of the updated Terms.

9. Limitation of liability

To the maximum extent permitted by law:

• MemoChat is provided “as is” without warranties of any kind;
• we are not liable for indirect, incidental or consequential damages arising from your use of the Platform;
• our total liability for a claim related to the Platform shall not exceed the amount you paid to us in the 12 months preceding the claim; and
• we are not responsible for content shared between users, as current-protocol message content is end-to-end encrypted and inaccessible to us.

10. Account deletion

You may delete your account through the app settings or request deletion through the web pathway described in our Privacy Policy. A verified request starts server-side removal of your account, profile, authentication and push tokens, settings, relationships, and your authored messages. Removal of associated media, provider copies and backup copies may complete later than removal of the active account record.

When deletion is initiated inside the app, the app attempts local cleanup on that device. A web or email request cannot remotely erase an offline, uninstalled or otherwise unreachable device. MemoChat cannot guarantee when or whether that separate local copy disappears; remove local app data and relevant device backups through the operating-system controls for that device. Other users’ own messages are not deleted merely because they previously chatted with you. Limited information may be retained where required for security, fraud prevention or law. Account deletion is irreversible.

11. Governing law and disputes

These Terms are governed by the laws of the Republic of Estonia. Any disputes arising from these Terms or your use of the Platform shall be resolved in the courts of Tallinn, Estonia. Before initiating legal proceedings, we encourage you to contact info@memochat.net to resolve the issue amicably.

12. Severability

If any provision of these Terms is found unenforceable, the remaining provisions will continue in full force and effect.

13. Contact