Privacy Policy

How MMRY AI handles your information.

Effective Date: October 15, 2026  ·  Last Updated: October 15, 2026

Overview

MMRY AI is operated by RICO Technologies, LLC. This policy explains what information we collect when you use MMRY AI, how we use it, who we share it with, and the rights you have over it.

We do not sell your personal information. We do not share your memory content for advertising. We do not use your memory content to train AI models.

If you have questions about anything in this policy, email privacy@mmryai.com.

What we collect

Account information

• Name and email address you provide at signup
• Subscription and billing information (handled by our payment processor; we do not store full card numbers)
• Communications you send us (support requests, feedback, bug reports)

Memory content

The notes, decisions, preferences, project details, and other content you save through MMRY AI. This is the substantive data of the service. It is yours. You can deactivate it at any time, and on a paid plan you can export it as JSON at any time.

Authentication and session data

• Password hashes (we never store passwords in plaintext)
• JWT access tokens, API keys, and OAuth tokens used by external platforms acting on your behalf
• Login timestamps, IP addresses associated with sessions, and basic browser/device information for security purposes

Usage data

• Which API endpoints you call, how often, and from where (the AI assistants and tools you connect to MMRY AI, or our website)
• Error logs and diagnostic information when something goes wrong

Cookies and similar technologies

We use the minimum necessary: a session cookie or token in browser storage to keep you signed in, and the cookies set by the analytics and advertising measurement tools described under Website analytics. Those cookies tell us which pages are visited and whether a visit from an ad led to a sign-up. You can turn them off for your browser with the control under Your privacy choices, and we honor your browser's Global Privacy Control signal as that choice.

Website analytics

We use analytics and advertising measurement to understand how people use our website and service. They tell us which pages people visit, where they arrive from, roughly where in the world they are, what browser and device they use, and whether a visit led to a free trial being started. Before anything is reported, our site removes known credential values, such as security tokens, from page addresses and reduces the referring address to its origin and path. The analytics and advertising measurement providers may also connect visits made from more than one device and report visitor demographics and interests to us in aggregate.

Advertising. We advertise, or may advertise, MMRY AI online and use advertising and analytics tools to measure how people find us and whether a visit from an ad leads to a sign-up. We never use your memory content or account data for advertising. Under California law, this advertising measurement may count as sharing personal information for cross-context behavioral advertising; the opt-out control below turns it off for your browser.

Your memory content is never sent to any analytics or advertising measurement provider.

Signed-in pages. Measurement also runs on the pages you use after signing in, such as your account, records and administration pages, so we can see which of those pages are visited and the paths people take between them. From those pages we report only the page name, the name of the page you came from, the page title and the visit details listed above. Everything else is removed from the page address before it is reported, including memory identifiers, record values, search terms, email addresses and security tokens. We never send your memory content, your records, your email address or any account or user identifier to a measurement provider, and we use no advertising measurement, advertising audiences or remarketing on signed-in pages. The opt-out below applies to signed-in pages in the same way as to every other page.

IP addresses. Measurement requests carry your IP address, as any web request does. Our analytics and advertising measurement providers use it to estimate your general location and handle it under their published policies.

Retention. We keep analytics data for as long as it helps us understand how the site is used, and our analytics and advertising providers apply their own retention limits under their published policies.

Sharing. Our analytics and advertising measurement providers process measurement data under their own privacy policies and terms, so that we can see how the site is used and which ads lead to sign-ups. We do not sell measurement data.

Your privacy choices

Opt out: Opt out of analytics and advertising measurement in this browser. The choice is stored in this browser only, so repeat it in each browser you use. It turns off every measurement tool on the site, analytics and advertising measurement alike, so nothing is sent to them from this browser. You can also block measurement scripts with a content blocker or your browser's tracking protection.

Global Privacy Control. If your browser sends the Global Privacy Control signal, we treat it as a request to opt out of analytics and advertising measurement: nothing is sent to any measurement tool from that browser, on any page of the site, and you do not need to do anything else. Under California law the signal is also a request to opt out of the sharing of personal information for cross-context behavioral advertising, and we honor it as one.

Visiting from the European Economic Area or the United Kingdom. If you appear to be visiting from a region whose law requires your consent before measurement cookies are set, no measurement tool loads until you allow it. You are asked when you first arrive, and you can change your answer here at any time; declining has the same effect as the opt-out above. We judge where you are visiting from using your browser's time zone and language settings, which stay on your device. We do not look up your location with any third party before you have chosen.

These choices apply on every page of the site, including the pages you use after signing in.

How we use it

• To deliver the service: store and retrieve your memories, authenticate you, run the platform-integration flows you initiate
• Billing and account management: charge for subscriptions, send receipts, handle cancellations and refunds
• Communications: respond to support requests, send service notices (security alerts, outage notifications, account and billing notices)
• Product improvement: analyze aggregate and de-identified usage patterns to make MMRY AI better (e.g., which endpoints are slow, which integrations are popular)
• Security: detect abuse, prevent fraud, investigate incidents, satisfy our legal obligations

AI training

We do not train AI models on the content you save in MMRY AI. Your memories are stored to be returned to you, exactly as you wrote them, on demand. They are not used as training data, fine-tuning data, or evaluation data for our models or anyone else's.

When an AI assistant or tool you have connected reads your memories on your behalf through an OAuth-authorized connection, that platform's own privacy policy governs what it does with the content it sees in that session. We disclose which platforms are connected to your account in the dashboard, and you can revoke any platform's access at any time.

Who we share with

We share information only with service providers strictly necessary to run MMRY AI, and only under contractual confidentiality and data-protection obligations:

• Hosting, the cloud infrastructure that runs the service, its database, and its storage
• Payments, payment processing and subscription management
• Email delivery, transactional emails (sign-up confirmations, password resets, billing notices)
• Analytics and advertising measurement, visit and sign-up measurement across the website and service (see Website analytics)

We may disclose information when legally required (subpoenas, court orders, lawful government requests). We may transfer information as part of a corporate transaction (merger, acquisition, sale of assets); if that happens, this policy or a successor policy continues to apply to your data.

We do not sell personal information for monetary or other valuable consideration.

Platform integrations (OAuth)

MMRY AI is designed to be reached from other AI platforms. When you authorize an AI assistant or tool through our OAuth 2.0 flow:

• The platform receives an access token scoped to your account
• The platform calls our public API on your behalf to save, search, and load your own memories
• The platform does not gain access to other users' data
• You can see every connected platform on your account page and revoke access in one click; revocation invalidates the tokens immediately

Each platform you authorize has its own privacy policy that governs what it does with the conversation it has with you. Read it before authorizing.

Security

We use technical, physical, and organizational measures appropriate to the sensitivity of the data:

• All data in transit is encrypted (TLS 1.2 or higher)
• Database storage is encrypted at rest by the cloud provider
• Passwords are hashed with industry-standard algorithms; we never see your plaintext password
• API keys and OAuth tokens are hashed at rest; rotating a credential immediately invalidates the prior value
• Access to production systems is restricted, logged, and reviewed

No system is perfect. If you believe you have discovered a vulnerability, please contact security@mmryai.com.

Retention & deletion

We retain your account and memory content for as long as your account is active. If you cancel your subscription, your memories remain accessible through the end of your current billing period, or through the end of your free trial if your account is on a trial. On a paid plan, you can export your memories as JSON at any time during that window. Downloading all of your memories is available on a paid plan.

After account closure, we delete or de-identify personal information unless we are required to retain it longer for legal, accounting, or fraud-prevention reasons. Audit logs, billing records, and security incident data may persist beyond account closure for as long as required by law.

You can request deletion of your account and data at any time by emailing privacy@mmryai.com.

Your rights

Subject to applicable law and the limits noted above, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and the personal information associated with it
• Export your memory content in a structured, machine-readable format (JSON)
• Object to or restrict certain uses of your information
• Withdraw consent for uses that depend on consent

You can exercise most of these rights from your account dashboard. For anything that requires manual handling, email privacy@mmryai.com and we will respond within 30 days.

International users

MMRY AI is operated from the United States. If you access the service from the European Economic Area, the United Kingdom, Switzerland, or any other jurisdiction with data-protection laws different from those of the United States, please be aware that your information will be transferred to, stored, and processed in the United States.

EEA / UK / Switzerland (GDPR): our legal bases for processing are: (a) contract performance, where processing is necessary to deliver MMRY AI; (b) legitimate interests, including service improvement and security; (c) consent, where you have provided it; (d) legal obligations, where we must process to comply with law. You have the rights described above plus the right to lodge a complaint with your supervisory authority.

U.S. residents (CCPA / state privacy laws): we do not sell personal information. The advertising measurement described under Website analytics may count as sharing personal information for cross-context behavioral advertising under California law. If you are a California resident, you have the right to opt out of that sharing: use the control under Your privacy choices, which turns off analytics and advertising measurement for this browser (repeat it in each browser you use), send the Global Privacy Control signal from your browser, which we honor as the same request, or email privacy@mmryai.com. You have the rights described above and the right to appeal a denied request. To exercise these rights, email privacy@mmryai.com.

Children

MMRY AI is not directed to individuals under 16, and we do not knowingly collect personal information from anyone under 16. If we learn that a person under 16 has provided us with personal information, we will delete it. If you believe a child has provided us with personal information, contact privacy@mmryai.com.

Changes to this policy

We may update this policy from time to time. Changes take effect when we post them on this page, and the effective date at the top shows the current version. Please check this page when you want to confirm the current terms. If you do not agree with the policy as posted, you can stop using MMRY AI and close your account.

Contact