This Privacy Policy explains how Zevora, Inc. ("Zevora", "we", "us") collects, uses, and protects information from users of the Memorion app — a cognitive training application available on iOS, Android, and the web.
It applies from the moment you open the app, not from the moment you sign up. The onboarding questionnaire — the questions about your memory, your sleep and your routine — is recorded on our servers as you answer it, before any account exists, and it stays recorded even if you stop halfway and never come back. Section 2 says exactly what is collected there, and section 3 explains why some of those answers deserve extra care.
Memorion is developed and operated by Zevora, Inc., a company incorporated in the United States. For privacy-related questions or requests, contact us at: [email protected]
We collect only what is necessary to operate the app — but that is more than it may look like, so here it is in full:
Onboarding questionnaire — recorded before you have an account
This is the part people are most often surprised by, so we state it first and plainly: your answers are sent to our servers screen by screen, as you give them. You do not have to finish the questionnaire, create an account, give us an email address or pay anything for this to happen. If you answer three questions and close the app, those three answers are already on our servers.
What the onboarding record contains:
Near the end of the onboarding, so it can save your result and let you start training, the app creates an anonymous guest account for you without asking for an email address or a password. If you later give us your email, that account becomes yours.
Your email address is notpart of this record. It is stored separately, and only if you type it in (see "Email leads" below).
Date of birth
Your photo (the selfie in the onboarding)
The onboarding offers to show you what your memory age looks like on your own face. If you add a photo there — or change your picture later in Settings — this is what happens to it:
Account data
Email leads
_fbp, _fbc) present in your browser, so that a completed purchase can be matched back to the ad that brought you. This happens on the web checkout only — the iOS and Android apps do not use itUsage and progress data
Preferences
Push notification token (mobile apps only, opt-in)
We do not collect your device location: the apps never ask for the location permission and no GPS coordinate ever reaches us. We do work out which country you are in, from your IP address, to show prices in your currency — that is described in the IP card below, including the three companies involved. We do not collect your contacts, your health app data, or any biometric identifier, and we do not read anything else from your photo library — only the single image you pick.
Advertising identifier and install attribution (native apps only)
The iOS and Android apps collect an advertising identifier — the IDFA on iOS, the Google Advertising ID (GAID) on Android — together with the Google Play install referrer on Android, your device model, operating system version, language and country. We also record events describing your journey through the app: onboarding steps completed, paywall views, checkout started, and purchases.
This exists for one purpose: to know which marketing campaign brought you to Memorion, and how the app is used in aggregate. It is not used to build an advertising profile of you, and we do not sell it.
On iOS, the advertising identifier is collected only if you allow trackingwhen the system asks. If you decline, no advertising identifier is collected and the app works exactly the same. On Android you can reset or delete your advertising ID at any time in Settings > Google > Ads. The website at memorionapp.com collects no advertising identifier at all.
The only other device-level identifiers we collect are the FCM push token described above, used exclusively for notification delivery, and the random onboarding identifier described in the first card.
About IP addresses
Your IP address is not stored on your account, and it is not part of the onboarding record described above. Most of the time our servers only read it while they are answering the request — to apply rate limits and stop abuse — and nothing is written down. There are three exceptions, and they are the whole list:
In the iOS and Android apps, the onboarding asks eight questions and then runs five short tests. The questions are about how often you forget things, what you forget most (names, where you put things, appointments, passwords, what you were about to say), how your memory compares to five years ago, how many hours you sleep per night, how much screen time you have outside work, how often you do physical activity, and what motivates you to look after your memory. The tests measure verbal memory, visual memory, working memory, attention and reaction speed.
The questionnaire on the website is a different, shorter set: it asks about your mood, your mental energy, what distracts you when you learn, how often you forget important information, what you forget most, which areas you want to work on, your gender, and includes a few short writing, vocabulary and arithmetic exercises.
From those answers and those results, both versions compute a score presented as your "memory age", compare it to your real age, and store both.
We treat this as health-related data
We are not doctors and Memorion is not a diagnostic tool — nothing here is a medical opinion, and a memory-age number is a training score, not a finding about your health. But answers about forgetting, sleep and physical activity, combined into a cognitive score, are close enough to information about a person's health that pretending otherwise would be dishonest. So we treat them as sensitive personal dataunder Brazil's LGPD (art. 5, II) and as a special category of personal data under the GDPR (art. 9).
What we use them for
Two things, and only two. First, to produce the result you came for: your memory age, the breakdown of which skills came out weakest, and the training plan built from them. Second, in aggregate, to understand who our users are and where the onboarding loses people — how the answers are distributed across everyone who takes the questionnaire, not what any one person answered. That second use is why the answers outlive your identity in our database; section 9 explains how.
Legal basis
Our legal basis for these answers is your consent — LGPD art. 11, I and GDPR art. 9(2)(a) — given by taking the questionnaire. Two facts about how that works today, stated plainly rather than buried: the questionnaire is how a new user enters Memorion (the opening screen has a sign-in link for people who already have an account, but there is no way to reach the training without going through the questions), and the app links to this policy and to the Terms of Use on the screens that ask for an email address or create an account, and on the paywall — all of which come after the questions. You can withdraw your consent at any time, and section 8 describes how.
What we never do with them
Your answers about memory, sleep, screen time and physical activity, your test results, your memory age, your scores and your photographs are never shared with advertising networks, analytics providers, data brokers, insurers or employers. They are not used to target ads at you. They are not sold.
Two things do leave us, and neither goes to an advertiser. The first is the gender selected in the website questionnaire, which goes to our attribution provider. The second is part of your result: if you ask for the portrait, the image model is told how old the face should look, and that number isyour memory age. It travels with the photo and with nothing else — no name, no email, no date of birth, not your real age, no answer you gave. We could have hidden the number behind a phrase like "about twenty years older", and we decided not to: the part of our service that talks to the image model is never given your real age — the app sends it the target age and a single up-or-down bit, and nothing else about how old you are — so writing that phrase would mean handing it your date of birth as well. That would be collecting more about you in order to look like we collect less. The full list of companies that receive anything from us, and exactly what each one receives, is in section 7.
We do not use your data for advertising beyond the attribution measurement described in sections 2 and 7, we do not sell data to third parties, and we do not build behavioral profiles for commercial purposes beyond operating the app itself.
When you log in, we create a secure cookie called auth-token. It is:
We do not use advertising cookies or tracking pixels of our own on this website, but the Meta cookies described in section 2 are read from your browser at checkout if they are already there. The native apps embed one third-party analytics SDK — Paywallo, described in section 7 — used for install attribution and product analytics.
Premium subscriptions are processed by RevenueCat in partnership with the Apple App Store (iOS) or Google Play (Android), and by Stripe for purchases made on the website. Zevora does not store or access credit card numbers or any payment instrument details.
What comes back to us from RevenueCat is a notification for each subscription event: which product, which store, the store's transaction identifiers, the country the store reports, and when the period starts and expires. It is identified by your Memorion account number — not by your email address, which we do not send to RevenueCat. We keep each of those notifications as it arrived.
For purchases made on the website, the same role is played by Stripe, and Stripe's version of the event does carry the name and email address you typed at checkout. We keep those events too, as the record of the payment. Section 8 says what happens to both when you delete your account.
To cancel, visit your device's app store subscription settings.
Your data is shared only with the infrastructure providers strictly needed to run the app:
We do not sell your data. The attribution data described above is shared with Paywallo, and through Paywallo with the advertising platform that referred you — for example Meta — for the single purpose of measuring which campaign led to your install or your purchase. Apart from the gender answer noted above, no questionnaire answer, no test result, no memory age, no score and no photograph is ever sent to Paywallo, to Meta, or to any other advertising or analytics company. OpenAI is none of those things, and what it receives — the photo and the age the portrait should look — is spelled out in its entry above. The only company that ever sees your photo is OpenAI, and only to draw the portrait. The three country-lookup services receive an IP address and nothing else.
Regardless of where you live, you may:
Deleting your account, and what that actually erases
In the app: Settings → Danger zone → Delete account, with two confirmations. It takes effect immediately, and you do not have to email anyone to do it.
The moment you confirm, we:
What deletion does not reach on its own, stated so you are not surprised. This list is meant to be complete; if you find something on our side that is not on it, tell us and we will both fix the product and fix this page.
Write to [email protected] and we will erase the lead record and the image files, strip your email address and name out of the stored billing events, and pass the deletion request on to those providers.
EU / EEA users (GDPR)
Our legal basis for processing is contract performance (account and subscription management), legitimate interest (operating, securing and improving the app, and measuring which campaign brought you here), and — for the memory, sleep and activity answers described in section 3 — your explicit consent under art. 9(2)(a). You have the right to lodge a complaint with your local data protection authority. We will respond to verified requests within 30 days.
Brazil (LGPD)
The questionnaire answers are sensitive personal data under art. 5, II, processed on the basis of your consent under art. 11, I. You may at any time ask us to confirm what we hold, to correct it, to anonymize or delete it, to tell you with whom we shared it, and to withdraw your consent — by writing to [email protected].
California residents (CCPA)
We do not sell your personal information. California residents may request disclosure of categories of personal information collected, the purpose of collection, and any third parties with whom it is shared. Submit requests to [email protected].
We retain your account and progress data for as long as your account is active. If you delete your account, the effects are the ones listed in section 8, and they are immediate. If you ask us by email instead, we complete the deletion within 30 days.
Onboarding records: the identity expires, the answers stay
The onboarding record described in section 2 has a retention rule of its own, and it is the rule that lets us keep what is useful without keeping what is risky.
The identity — your name, your date of birth, and the link to your account or to your email lead — is erased from the onboarding records after 90 days. The clock runs from the last time you touched the onboarding, not from when you started it. Just before your date of birth is erased, we save the age band it falls in — 13–17, 18–24, 25–34, 35–44, 45–54, 55–64, 65–74 or 75+ — and a single yes-or-no flag recording whether that person had left an email address or created an account. Neither of those points back at you.
The answers remain, in anonymous and aggregated form, for an indefinite period, for statistical purposes. What is left after 90 days is a row saying that someone in a given age band, on a given platform, in a given language, answered the questionnaire a certain way and stopped at a certain screen. That is what we count, and counting is the entire point: it tells us who uses Memorion and where the onboarding fails people. It no longer tells anyone who you are.
You do not have to wait 90 days, and you can ask for more than this rule gives. Deleting your account strips the record immediately — and, unlike the 90-day rule, it erases your answers as well, because a request to be deleted is not a request to be counted. Section 8 has the details.
One other record keeps a clock of its own: the sign-up fraud log described in section 2 — one line per attempt to create an account, holding the IP address, the user-agent and the email address that was typed into the form. Each line is deleted once it is more than 90 days old, whether or not an account came out of that attempt, and whether or not that account still exists.
We apply the following technical measures to protect your data:
In the event of a data breach that affects your personal data, we will notify affected users by email within the timeframes required by applicable law (72 hours for GDPR, as promptly as feasible for others).
Memorion is intended for users 13 years of age or older, and this is enforced in code rather than merely asserted: our servers accept a date of birth only if it puts the person between 13 and 99 years old. A date outside that range is thrown away — it is never written to your account and never written to the onboarding record.
Refusing the date was not enough on its own, and we say so because the fix is recent. A date of birth arrives on the second screen of the onboarding; the answers arrive over the thirty screens after it. So when the date that arrives says the person is under 13, the onboarding record for that installation stops holding anything personal at all: the name, the questionnaire answers, the age band and the links to an email lead or to an account are removed from it and refused from then on. What is left is the funnel metric — which screen was reached, on which platform, in which language — and one flag remembering that this installation declared an age under 13, which is what makes the refusal hold for the screens that come later. A date of 13 or over declared afterwards lifts it, because the commonest reason for an impossible date is a year typed wrong, and a typo should not silently erase the rest of someone's session.
Being precise about the limits of all this, because it matters: it stops us from storing a child's date of birth, name and answers, but it is not an age gate. It does not stop someone under 13 from using the app, and someone who states an age over 13 passes — after that there is nothing for us to know. We do not knowingly collect personal data from children under 13. If you believe a child has used Memorion or created an account without parental consent, contact us at [email protected] and we will promptly delete the account and the associated records.
Zevora is based in the United States. If you access Memorion from the EU, EEA, UK, or other regions with data protection laws, your data is transferred to and processed in the United States. We rely on standard contractual clauses and other lawful transfer mechanisms to protect data transferred internationally.
We may update this policy periodically. For material changes, we will notify you by email or via an in-app notice. The "Last updated" date at the top of this page always reflects the current version. Continued use of the app after changes constitutes acceptance of the updated policy.