Privacy Policy

Last updated: September 5, 2026

Short version: your memories stay on your Mac. Our cloud stores only what it needs to bill you and issue your license — your email, subscription state, license IDs, and device IDs. The app sends no telemetry by default.

1. Scope

This policy covers the Mnem website, our cloud licensing service, and the network behavior of the Mnem desktop application. Barodynamics is the data controller. It explains what data exists, where it lives, and what rights you have over it.

2. What stays on your device (and is never collected)

• Memories and the memory index the app builds from them.
• App settings, including your never-store topics list and capture-mode configuration.
• Access tokens and API keys used to connect your AI tools.
• Captured conversation content from opt-in auto-capture.

There is no server-side memory store. This data is never transmitted to us, and we have no technical means to access it. The app sends no analytics or usage telemetry by default; if the app ever offers crash reporting, it will be strictly opt-in per report.

3. What we store in the cloud

• Account email — for sign-in links, receipts, and license notices.
• Subscription state — plan, status, and renewal dates, synchronized with Stripe.
• License IDs and keys — to issue and verify your license.
• Device IDs and names — a random identifier per activated device, plus the device name shown on your account page, so you can manage your 3 activation slots.
• Activation and license-check timestamps — for enforcing device limits and the offline grace period.
• Business data — for business plans: company name and seat assignments (email addresses).
• Messages you send us — contact-form submissions and support email.

4. Payments

Payments are processed by Stripe. Card numbers never touch our servers; we receive only the subscription state needed to issue your license.

5. Emails we send

We send transactional email only: magic sign-in links, receipts and billing notices (via Stripe), and license or security notices. We do not send marketing email without separate, explicit consent.

6. The website

This website is static and served by Cloudflare. We run no analytics, no advertising, and set no tracking cookies. Forms you submit (contact, sign-in, checkout) go directly to our licensing API.

7. How we use data

We use the cloud data above solely to provide the service: authenticate you, bill you, issue and verify licenses, enforce device limits, prevent fraud and abuse, respond to your messages, and comply with legal obligations.

8. Sharing

We do not sell or rent personal data. We share it only with the processors needed to run the service — Stripe (payments), our transactional email provider, and Cloudflare (hosting) — and when legally compelled. Note that memories cannot be produced in response to legal process directed at us, because we never possess them.

9. Retention and deletion

We keep account data while your subscription is active and for a limited period afterward for tax and accounting obligations. You can request deletion of your account and cloud records at any time by emailing privacy@barodynamics.com. Local data on your devices is under your control; deleting the app's data directory removes it permanently.

10. Security

All traffic to our services uses TLS. We practice data minimization — the strongest protection for your memories is that we never have them. Access to cloud records is restricted and logged, and sign-in tokens are short-lived.

11. Your rights

Depending on where you live (including under GDPR, UK GDPR, and CCPA/CPRA), you may have rights to access, correct, export, delete, or restrict processing of your personal data, and to object to processing. Contact privacy@barodynamics.com to exercise them; we will not discriminate against you for doing so. You may also lodge a complaint with your local supervisory authority.

12. International transfers

Our processors may store data in the United States and other jurisdictions. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.

13. Children

The service is not directed to children under 16, and we do not knowingly collect their data.

14. Changes

We will post updates to this policy here and, for material changes, notify account holders by email before they take effect.

15. Contact

Barodynamics · privacy@barodynamics.com