Legal · privacy

Privacy Policy

This is a courtesy translation provided for convenience. The German version is legally binding.

Last updated: July 11, 2026

1. Controller

The controller responsible for data processing on memra.ch is:
Memra, Switzerland · operator details: see Legal Notice
Contact: hi@memra.ch

2. What data we process

Account data

• E-mail address (for sign-in + important notifications)
• Display name (optional, for audit logs and peer briefings)
• Locale (for language defaults)
• Billing information, insofar as a paid cloud tier is used

Local usage

• Local Studio reads local Memra files, telemetry, and audit logs on your device.
• The Local Inspector is read-only and intended for loopback/local Studio use.
• Local hardware data such as CPU/RAM/swap is evaluated on your device for worker control.

Cloud and sync data

• Memories, settings, project and session metadata when you actively use Cloud Sync.
• Worker/dispatch metadata for audit, quota, billing, and stability.
• Reduced diagnostic and telemetry data, insofar as you enable it or it is required for cloud operation.

AI Gateway and external LLM providers

• When AI Gateway or an external provider is enabled, task, prompt, or context data may be sent to the selected provider.
• Provider configurations use secret references. API keys are not meant to be displayed in the dashboard after saving.
• Local providers such as Ollama remain local, provided they are configured locally and not used via cloud routing.

What we do not collect automatically

• No browser fingerprints, no marketing pixels, no tracking cookies.
• No deliberate cloud storage of complete source code as a standard feature.
• No display of stored secrets in the dashboard after saving.

3. Purpose of processing

We process data to operate the Memra platform: local and cloud-based memory synchronization, worker orchestration, auditability, security, account management, billing, and support. No disclosure to third parties for advertising purposes.

4. Storage location & retention

Local Studio data remains on your device as long as you do not synchronize or export it. Cloud data is processed in the Memra and Cloudflare infrastructure in use at the time. External LLM providers may process data in additional countries; this depends on the selected provider.

Memories, settings, and session metadata are retained for the lifetime of your account or until deletion. Backups and security logs may persist for a limited period insofar as this is required for operation, abuse prevention, or recovery.

5. Encryption

Memra uses technical and organizational measures to protect data and secrets. Secrets are designed to be stored in encrypted form, used only as references, and not displayed again after saving. Local files are additionally subject to the protection mechanisms of your device.

6. Third-party providers

LLM providers

Depending on configuration, Memra may interact with Anthropic, OpenAI, Google/Gemini, Cloudflare Workers AI, local Ollama instances, or other compatible providers. In local direct paths, the request may go from your device to the provider; with cloud or gateway routing, Memra may be involved as a technical intermediary. The terms and privacy notices of the respective provider apply in addition.

Stripe (payments)

Paid cloud tiers may be processed via Stripe. Card data never ends up on Memra servers.

Cloudflare (hosting, CDN, security)

Web traffic and parts of the cloud infrastructure may run through Cloudflare. In the process, technical connection data such as IP address, user agent, and security events may be processed.

7. Automated decisions and AI transparency

Memra uses LLMs and automation primarily for orchestration, recommendations, reports, routing, and local work aids. Decisions with a material effect on accounts, billing, deletion, security locks, or production deployments are not intended to be made without appropriate human oversight.

Where AI features are active, the UI and reports are designed to make it clear whether a feature observes, recommends, requires approval, or acts autonomously.

8. Your rights (Swiss DSG / GDPR)

• Access: find out what we have stored about you (free of charge via Settings → Export)
• Rectification: have incorrect data corrected
• Erasure: account deletion can be performed yourself at any time in Settings
• Data portability: JSON export of all memories
• Objection: object to the processing

Contact for all privacy matters: privacy@memra.ch

9. Cookies and local storage

Memra does not use marketing cookies. Functional cookies and local storage may be required for login, theme, language, UI state, and Local Studio tokens.

• memra:theme — your light/dark preference
• memra_auth — cloud session cookie after login
• window.__MEMRA_STUDIO__ — local Studio configuration in the local build

10. Changes to this policy

In the event of material changes, we will inform all active users by e-mail at least 30 days in advance. The current version can always be found at memra.ch/privacy.

11. Right to lodge a complaint

If you believe that the processing of your data violates the Swiss DSG or the GDPR, you can contact the competent supervisory authority:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC / EDÖB)
• EU: the data protection authority of your country of residence