Privacy Policy

2.1 Personal Information

When you create a MixMemo account or sign in through a third-party provider, we may collect certain personal information you provide, including:

• Account information: Your name (if provided), email address, and login credentials used for authentication (for Google sign-in, we receive your Google user ID and basic profile details, but we do not receive your password).
• Authentication information: If you use Google OAuth, we may receive your public profile information (such as your name, email address, and profile photo) to create your account and verify sign-in.
• Payment information: If you purchase a subscription or paid services, payments are processed securely by a third-party payment processor. We may store transaction records, but we do not store your full payment card details.
• Communications: The content of your messages when you contact us (for example, support emails or feedback) so we can respond and follow up.

2.2 Usage Information

When you use the Service, we automatically collect certain information about your device and how you interact with MixMemo, including:

• Content and inputs: Notes you create, and any attachments you upload (only when you choose to use cloud-related features such as AI processing or creating an online share link), as well as AI-related inputs and outputs (such as prompts you submit and the results returned).
• Feature usage data: Information about which features you use and how often—for example, how many times you run AI summarization, translation, or image generation.
• Device and log data: Device type, operating system, browser type, IP address, approximate location derived from IP, access times, referrer URLs, and diagnostic logs related to your interactions with the Service.
• Analytics data: We use third-party analytics tools (including Google Analytics and Microsoft Clarity) to collect aggregated and, where possible, de-identified statistics about how people use our website. These tools may use cookies or similar technologies to help us understand usage patterns and improve the Service.

4.1 How AI Providers Process Data

When you use AI features, the text you enter, relevant note content, and/or any images you upload (as needed to fulfill your request) are transmitted securely to third-party AI service providers (such as Gemini for text processing and Z Image Turbo for image generation).

These providers process your request (for example, generating an image or analyzing text) and return results to MixMemo for display to you.

AI providers may temporarily cache inputs for processing, reliability, and abuse prevention. Some providers (including certain image generation services) may retain submitted content and outputs for up to 7 days for debugging and service monitoring, and then delete it automatically from their systems.

Our AI providers do not use your submitted content to train their general-purpose AI models, and they do not share it with other third parties. Your content is used only to fulfill your request and for limited operational purposes such as reliability and safety.

If you would like to request deletion of data submitted to AI providers before any automatic deletion window (for example, 7 days), you can contact us and we will work with the provider to process your request where feasible.

4.2 How We Process and Store Data

Unless you enable cloud-related features, your notes, images, and file attachments are stored locally on your device and are not persistently stored on our servers. We upload data only when you initiate an action that requires server-side processing (for example, using AI features or creating an online share link).

We do not permanently store the original content you submit for AI processing. AI-related text and images are cached only briefly as needed to complete processing and deliver results, and are then deleted from our systems. Generated results may be stored temporarily to transmit them to you, and we recommend saving anything important locally.

We do not use your notes, images, or other user content to train our own AI models or algorithms. We process content only as necessary to provide the Service.

6.1 Technical Safeguards

• Encryption in transit: Data transmitted between your device and our servers, and between our systems and third-party AI providers, is protected using TLS/SSL or similar encryption.
• Secure storage: For data that must be stored on our servers temporarily, we use encryption and access controls designed to protect it from unauthorized access.
• Access controls: We restrict access to user information based on the principle of least privilege—only authorized personnel and vendors who need access to perform their responsibilities may access it.
• Security reviews: We regularly review our security posture and apply updates intended to address vulnerabilities and evolving threats.
• Retention limits: We aim to keep data only as long as necessary for the purposes described in this Policy, unless we are required to retain it for legal compliance or legitimate business needs.

6.2 AI Content Safety Measures

Our AI partners include content safety features designed to detect and block prohibited requests and outputs:

• Model-level safety: Models may refuse to generate content that violates policies, including sexual content, violence, hateful or harassing content, or other prohibited categories.
• NSFW filtering: Our text and image generation systems may automatically reject explicit adult content requests to help keep outputs appropriate for general audiences.
• Harmful content protections: Systems may block outputs that promote discrimination, harassment, self-harm, or other harmful content.
• Responsible AI practices: Our AI providers follow responsible AI practices and routinely update safety measures to improve protection.
• Clear policy boundaries: We describe prohibited content categories in our Terms of Service, and we align our use of AI tools with those policies.

6.3 Payment Security and Compliance

• Payment processing: Our payment flow is handled by third-party processors that maintain industry-standard security practices (such as PCI-DSS). We do not store your full payment card details.
• Content compliance: We enforce the content safety measures described above to support compliance with payment provider requirements and to help ensure the Service remains available.