MemokiMemoki Privacy Policy
Effective 2026-11-01.
Memoki is a flashcard app for learning foreign words and other subjects. This policy explains what data the app collects, why, and how to delete it.
Data controller: Egor Kotlyarov, Thailand. Contact: support@memoki.cards.
Without an account
You can use the app without signing up. Your decks, cards and progress then stay on your device only and are not sent anywhere.
If you create an account
An account enables sync between devices, statistics, friends and shared decks. Our server stores:
| Data | Why |
|---|---|
| Email address | Signing in, confirming sign-up and resetting your password with a code sent by email |
| Password — only as an irreversible hash (bcrypt); we never know the password itself | Signing in |
| Name and username (@username) | Shown to friends and on the leaderboard; friends add you by your username |
| Decks and cards, your progress on them | Sync between devices |
| Training answers: which card, “Got it” or “Repeat”, and when | Statistics, day streak, friends leaderboard |
| Friends, friend requests and blocked users | The Friends section |
| Reports you send | Reviewing violations |
What other users see
- Friends see your name and username, how many cards you remembered this week, how many you have learned in total and your day streak. Friends do not see your cards.
- A deck you share is available to anyone who has its code: its name, cards and your name as the author. Your progress is not included. You can stop sharing a deck at any time.
What is processed on your device only
Automatic translation and Apple Intelligence suggestions (example sentences, suggested answers) run on the device itself using Apple’s frameworks. These texts are not sent to us or to any other company.
Who receives data
We do not sell data, show ads or track you across other apps and websites. Data is shared only with the services Memoki cannot work without:
- the hosting and network providers the Memoki server runs on: Cloudflare, Inc. (USA); the server itself is operated by the developer in Thailand;
- the email service that sends sign-in codes: Gmail (Google) — it receives your email address and the text of the email with the code.
Retention and deletion
- Account data is kept for as long as you have an account.
- You can delete your account in the app: Profile → Delete Account. Your account, decks, cards, statistics, friends and shared decks are deleted from the server immediately. Decks on the device itself stay until you delete the app.
- Email codes are stored only as hashes and expire after 10 minutes.
- You can also ask us to delete your data by writing to support@memoki.cards.
Security
The connection to the server is encrypted (HTTPS). Passwords and codes are stored only as hashes; the sign-in token on your device is kept in the Keychain.
Children
Memoki is not directed at children under 13, and we do not knowingly collect their data. If you believe a child created an account without parental consent, contact us and we will delete it.
Changes
If this policy changes, the new version will be published at this address and the date at the top will be updated. We will announce significant changes in the app.