Privacy Policy
This policy explains how your personal data is processed when you use the Membah app. In short: your notes are yours; they are never used for ads or sold. To be transcribed and organized they are sent to the AI services named below, and we ask for your permission before that happens, the first time you open the app.
1. Who is responsible
Mehmet Can Sevimdag (Membah). Contact: destek@membahapp.com
2. What we process
- Account: a random device ID created by your phone; if you sign in with Apple, the identifier Apple gives us for you (we don't ask for your email address or name); note and app language, time zone; subscription status.
- Content: your voice notes, what you type, images and links you share, long recordings and their transcripts, and the topics, tasks, routines, people's names and questions that come from your notes.
- Device and security: Apple's device verification results (App Attest, DeviceCheck), push notification address.
- Usage: note and question counts, recording time, the cost of AI processing; error logs (without note content).
The name you enter in the app stays on your phone. We never receive your card details; Apple handles payment.
3. Why we process it
- To provide the service (transcribing and sorting your notes, setting up tasks and reminders, answering your questions, running your account and subscription): performance of our contract with you.
- Sending your content to AI services abroad: your explicit consent, which you give by tapping “I agree” the first time you open the app and can withdraw anytime in Privacy & data.
- Security and abuse prevention (device verification, usage limits, cost tracking): legitimate interest.
- Legal obligations (e.g. requests from authorities).
4. Who receives it
| Recipient | Purpose | Location |
|---|---|---|
| Hostinger | Our server and database | Lithuania (EU) |
| Microsoft (Azure) | Transcribing your voice | Ireland (EU) |
| Anthropic (Claude) | Understanding and sorting notes, reading images, answering questions | US |
| OpenRouter | Connection to the models below (OpenAI, Perplexity, Typesafe); backup route to the same Microsoft speech model (also Azure) if Microsoft doesn't respond | US |
| OpenAI | Writing and organizing topic pages | US |
| Perplexity, Typesafe | Deciding which topic a note belongs to | US |
| Apple | Sign in with Apple, device verification, purchases | US |
| RevenueCat | Verifying your subscription (account ID and purchase info; no note content) | US |
| Expo | Sending notifications (notification address and text) | US |
| Cloudflare | Checking whether a shared link's domain is on a harmful/adult content list; forwarding email you send to our support address | US |
To read a link you share, our server opens that page; only the link itself goes to that site. Your notes are not shared with ad networks or sold. We use the AI services under commercial API terms that say your content isn't used to train their models.
5. International transfers
Some of these services run in the US. Your content is transferred to them only to provide the service and based on your explicit consent. If you don't give consent, or withdraw it, your new notes and questions won't be processed.
6. How long we keep it
- Audio: deleted once transcribed. If transcription fails, it is kept for at most 7 days to retry.
- Notes, images, tasks, questions: until you delete them or your account.
- Trash: deleted items stay for 30 days, then are permanently deleted automatically.
- Long recording transcripts: according to your choice in Privacy & data (always, 30 or 90 days).
- If you delete your account: everything is permanently deleted right away, and removed from nightly backups within 30 days at the latest. If we ever restore from a backup we delete deleted accounts again; for that we keep only the deleted account's ID (no content). Cost records remain as numbers no longer linked to anyone.
7. Security
All connections between the app and our server are encrypted (HTTPS). The server is firewalled and accessible only to authorized people; requests that use AI are accepted only from devices verified by Apple. The system administrator can technically access the database; the content of your notes is looked at only at your request (support), when legally required, or when investigating abuse.
8. Your rights
You can ask whether and how your data is processed, who it was shared with, and have it corrected or deleted. You can delete your account and all your data yourself in the app (Privacy & data › Delete my account). For anything else, write to destek@membahapp.com; we reply within 30 days. If you are in the EU/EEA or UK you also have rights under the GDPR, including the right to complain to your data protection authority.
9. Children
Membah is not intended for children under 13.
10. Changes
If we change this policy we update its date. If the way your data is processed changes materially, we ask for your permission again in the app.