Privacy Policy

Memoecho is a learning app that turns YouTube videos into flashcards and a personal library you can reflect on. This policy explains what data we collect, why, and the choices you have.

For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is [legal entity or your name — to be completed before launch], operating Memoecho at youtubcard.lovable.app. You can reach us at [contact email — to be completed before launch] for any privacy question or request.

• Account data: your email address and, if you sign in with Google, the basic profile information Google shares with your consent (such as your name). We do not ask for a display name or photo inside the app.
• Your library: the YouTube links you submit, the transcripts we generate from them, the flashcards created (including tags, speaker names and timestamps), and the reflections you write.
• Usage data: basic records needed to run the service, such as how many videos you have added in the current day and month, so we can apply plan limits.
• Technical data: a sign-in session token stored in your browser. We do not use advertising or analytics tracking cookies.

• To provide the service you asked for — reading a video you submit, generating flashcards, and keeping your library and reflections (performance of our contract with you).
• To let you sign in securely with Google or email (performance of contract, and your consent when you use Google sign-in).
• To bill the Pro subscription, once payments are available (performance of contract).
• To keep the service safe and prevent abuse (our legitimate interests).

We do not sell your data, and we do not use your library content to advertise to you.

We only share data with providers needed to run Memoecho:

• Hosting and database (Lovable Cloud): stores accounts, libraries and reflections.
• AI processing (Lovable AI): transcribes and translates the videos you submit and generates flashcards. The transcript text of the videos you submit is sent to the AI provider for this purpose.
• YouTube transcripts (Apify): when a video's captions cannot be read directly, we ask a transcription service (Apify) to retrieve the transcript. It receives only the URL of the video you submitted.
• Google: if you use Google sign-in, Google authenticates you and shares your email and basic profile with your consent.
• Payment provider: for Pro subscriptions, once payments are enabled. Payment details are handled by the payment provider; we do not store card numbers.

Some of these providers may process data outside the EU. Where that happens, we rely on the provider's Standard Contractual Clauses or an equivalent safeguard.

Your library — links, flashcards and reflections — is private to your account. It is not visible to other users and is not used to train AI models. If you delete an item, its transcript, flashcards and reflections are deleted with it.

We keep your account and library for as long as your account exists. If you delete your account, or ask us to delete your data, we delete your library, reflections and account data. We may keep minimal records where the law requires it (for example, billing records for the statutory retention period).

You have the right to access, correct, export, restrict or delete your personal data, to object to processing based on legitimate interests, and to withdraw consent (for example, for Google sign-in) at any time. To exercise any right, write to [contact email — to be completed before launch].

If you are in the EU/EEA and believe your rights have been infringed, you can complain to your national data protection authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).

Data is stored in a managed cloud database with encryption in transit, and every account's library is accessible only to that account. No system is perfectly secure, but we design the service so the browser never talks to the database directly.

Memoecho is not directed at children. If you are under the minimum age to consent to data processing in your country, do not create an account without permission from your parent or guardian.

We may update this policy as the service evolves. When we make a material change, we will notify you in the app or by email before it takes effect.

Questions about privacy? Write to [contact email — to be completed before launch].

See also our Terms of Service.