Memex (“we”, “the app”) is a personal knowledge management application. This policy explains what information we collect, how it is used, and the choices you have. By using Memex you agree to the practices described here.
1. Information we collect
Account information
When you sign in, we store your email address and a Supabase-managed authentication session. We do not store passwords — sign-in is handled via email magic links.
Content you create
Notes, journals, collections, tags, trackables, chat conversations, and any other content you author inside the app are stored in our database so the app can show them back to you. This content is only visible to you.
Google account data (optional)
If you connect your Google account, we request access to your Google Calendar in order to read, create, and update events on your behalf from within the app. Specifically:
- What we access: calendar list and events on calendars you select.
- What we store: the OAuth refresh token (so you do not have to reconnect every session), the calendar IDs you have chosen to surface, and short-lived event data fetched at the moment you ask the assistant about your schedule. We do not maintain a long-lived mirror of your calendar.
- What we do not do: we do not sell, share, or use your Google data for advertising, training generalized AI/ML models, or any purpose other than providing the calendar features you explicitly invoke.
Third-party API keys
If you provide your own API keys (e.g. OpenRouter, Groq), we encrypt them at rest before storing them, and only use them to make the requests you initiate.
Operational data
Standard server logs (IP address, user agent, timestamps) may be recorded by our hosting and database providers for security and debugging.
2. How your data is used
- To authenticate you and keep your session active.
- To store and display the notes, journals, and other content you create.
- To execute the AI assistant features you invoke — including sending relevant context to the language model provider you have configured (e.g. OpenRouter), the search provider (Tavily) when you ask the assistant to search the web, and the fetch provider (Jina) when you ask it to read a URL.
- To call Google APIs on your behalf when you use calendar features.
3. Google API Services User Data Policy
Memex’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for serving advertisements, do not transfer it except as necessary to provide the user-facing features, do not allow humans to read it (except where you have given affirmative agreement, for security investigations, to comply with law, or where the data has been aggregated and anonymized), and do not use it to develop, improve, or train generalized AI/ML models.
4. Data sharing
We do not sell your data. We share data only with the infrastructure and API providers strictly required to operate the app:
- Supabase — database, authentication, and file storage hosting.
- Vercel — application hosting.
- Google — when you use Calendar features.
- Your configured AI/search providers (e.g. OpenRouter, Groq, Tavily, Jina) — when you invoke features that use them.
5. Data retention & deletion
Your content is retained until you delete it or close your account. You can delete individual notes, disconnect Google access (which removes our stored refresh token), or request full account deletion at any time by emailing the address below.
6. Security
Data is transmitted over HTTPS, third-party API keys are encrypted at rest, and access to your content is enforced at the database level via row-level security so that only you can read your own rows.
7. Children
Memex is not directed at children under 13 and we do not knowingly collect personal information from them.
8. Changes
We may update this policy as the app evolves. Material changes will be reflected in the “Last updated” date above.
9. Contact
Questions, requests, or deletion requests: c.cazallas.delfa@gmail.com.