Privacy Policy

This policy explains what Membo collects, how we use it, and the choices you have. Membo is operated by RUNONRICE.

1. What We Collect

• Account data: email address and authentication details you provide when signing up.
• Your Content: notes, documents, decks, and flashcards you create or upload, plus review history used for spaced repetition.
• Usage data: basic logs such as request timestamps, IP addresses, and browser information, used for security and reliability.
• Cookies: strictly necessary cookies for sign-in and session management. We do not use advertising cookies.

2. How We Use It

• Operate the Service and sync your decks across devices.
• Generate flashcards from content you submit.
• Schedule reviews using spaced-repetition algorithms.
• Protect against abuse, fraud, and service disruption.
• Communicate with you about your account or material changes.

3. Where Your Data Lives

Your data is stored on Cloudflare infrastructure (including D1, R2, KV, and Workers), which may route traffic through global edge locations. Cloudflare processes data on our behalf as a sub-processor.

When you use AI features, relevant portions of Your Content are sent to Anthropic to generate flashcards with Claude. Per Anthropic’s API terms, inputs and outputs are not used to train their models.

4. Sharing

We do not sell your personal data. We share data only with:

• Sub-processors that power the Service (Cloudflare, Anthropic);
• Authorities when required by law or to protect rights and safety;
• A successor entity in the event of a merger, acquisition, or asset sale.

5. Retention

We keep Your Content for as long as your account is active. You can delete individual decks or your entire account at any time. Backups are rotated on a rolling basis and purged within 30 days of deletion.

6. Security

Data is encrypted in transit (TLS) and at rest using Cloudflare’s managed encryption. Access is limited to what is necessary to operate the Service. No system is perfectly secure; please use a strong, unique password.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email jay@nguyens.co.

8. Children

Membo is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, please contact us so we can remove it.

9. International Transfers

Because Cloudflare operates a global edge network, your data may be processed in countries other than your own. We rely on the safeguards offered by our sub-processors for such transfers.

10. Changes

We may update this policy. Material changes will be posted on this page with a new “Last updated” date.

11. Contact

Questions about this policy? Email jay@nguyens.co.