Privacy Notice
Last updated: 24 October 2026
This notice explains what personal data Mimory (mimory.space) collects, why, and how it is protected. We aim to keep it short and plain.
1. Who we are
Mimory is an online English-learning platform operated by its founders. Contact: privacy@mimory.space
2. Data we collect
| Data | Why |
|---|---|
| First name, last name, email | Account creation and communication |
| Hashed password | Authentication — the original is never stored |
| Lesson schedule, progress, grades | Core service delivery |
| Payment information (IBAN, amount) | Credit top-ups and receipts |
| Homework you submit for AI checking | Grading and feedback; not used for model training |
| Your voice in a pronunciation check | Sent to Microsoft Azure to score each check and not kept. Stored by us only if you tick “Save the recording”, so you can listen to it again next to the reference |
3. Cookies and local storage
Two kinds of cookies exist here. Strictly necessary ones make the site work at all and are always set. Analytics and advertising cookies are set only if you accept them — and today none are configured, so in practice nothing beyond the table below is stored.
| Cookie | Purpose | Expires |
|---|---|---|
| access_token | Keeps you logged in (JWT) | 30 minutes |
| refresh_token | Renews your session automatically | 14 days |
| NEXT_LOCALE | Remembers your language preference | Session |
4. Local storage
Your browser also keeps a few small values locally. They never leave your device and are not sent to our servers — you can clear them at any time in your browser settings.
| Key | Purpose |
|---|---|
| mimory_cookies_consent | Your cookie decision and its date, so the banner appears once |
| Placement-test progress | Lets you resume the level test where you left it |
5. Legal basis (GDPR)
Processing is based on contract performance (Art. 6(1)(b) GDPR) for account and lesson data, and legitimate interests (Art. 6(1)(f)) for security logging. Payment data is processed to fulfil a contractual obligation. A saved voice recording is kept on your consent (Art. 6(1)(a)), given by ticking the box for that one check; you withdraw it by deleting the check.
6. Data sharing
We do not sell your data. We share it only with sub-processors required to run the service: cloud hosting (EU region), transactional email (Resend), AI responses (Anthropic API — your messages are processed per their data-processing agreement and are not used to train models), and Microsoft Azure AI services (EU region) — Speech for pronunciation scoring and voice-over, Translator for translating words you add.
7. Retention
Account data is kept while your account is active and deleted within 30 days of a verified deletion request. Payment records are retained for 5 years to satisfy legal obligations. A saved pronunciation recording is deleted after 6 months (the check and its scores stay), or earlier together with the check or your account.
8. Your rights
Under GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. To exercise any right, email privacy@mimory.space. We respond within 30 days.
9. Changes
If we make material changes, we will notify registered users by email at least 14 days in advance.