Privacy policy

1. Account information

We store an internal account identifier, display name, email address, and the identifiers needed to link your sign-in methods. Google sign-in shares account information needed to authenticate you; TK Memo does not receive your Google password. Email passwords are stored as salted hashes, not readable passwords. Verification and password-reset messages are delivered through Resend, which processes the recipient address and message content.

2. Questions, images, and conversations

When you use AI assistance, we send the question, relevant conversation history, video information and learning materials, and any available reference frame, playback time, and selected-region coordinates to the configured AI provider. Automatic context checks may also send these details to decide whether a question follows an earlier one or refers to the current frame. Selecting a region does not crop away the rest of the frame: the full reference image may be sent. The full video and its audio are not sent by this question-answering workflow. Avoid including sensitive personal information or content you do not have permission to share.

Signed-in users' saved conversations include messages, AI answers, reference frames, timestamps, and selected regions so the conversation can be reopened with the video. They are private to the account rather than publicly displayed. We also record AI usage amounts and cycle times to apply your plan's allowance. If an image-search feature is available and used, the submitted image is processed to recognize the question and find relevant videos.

3. Payments and subscriptions

Paddle handles checkout, payment details, invoices, and subscription billing. If you are signed in, your verified email may be supplied to checkout. We keep Paddle customer, subscription and transaction identifiers and related state, such as plan, billing period, status, and scheduled changes, to provide access and support. TK Memo does not collect full payment-card numbers or security codes through its own forms. Paddle's own privacy policy covers its processing of payment information.

4. Cookies and technical information

The site uses cookies for sign-in, sign-in security, and language preference, and browser storage for preferences such as the theme and player settings. The www and non-www domains use separate sign-in cookies for the same account records. Hosting, video delivery, and security services receive connection information such as IP address, request path, time, and browser details. These details may appear in operational and security logs. Paddle may use its own cookies and technical information for checkout, fraud prevention, and local prices. Blocking necessary cookies can prevent sign-in or checkout from working.

5. Why information is processed

We use information to provide requested features, authenticate accounts, send account emails, save learning history, administer subscriptions and AI allowances, handle support requests, protect the service, and meet legal obligations. Where a legal basis is required, processing relies on performing the requested service or contract, applicable legal obligations, legitimate interests in security and operation where permitted, or consent when required. We do not sell private conversations or publish them as part of the service.

6. Service providers and international processing

Providers involved in the current service include Google for optional sign-in, Resend for account emails, Paddle for billing, Backblaze B2 for video and image delivery, and Alibaba Cloud Model Studio for AI assistance. Hosting and network providers also process information needed to operate and deliver the site. Providers receive the information needed for their role, not unrestricted access to your account. Their own terms and privacy policies may also apply.

These services may process information outside your country. Applicable data-protection requirements still apply. Our AI requests ask the provider not to store the response where the API supports that option; this is not a guarantee that the provider retains no operational data or never uses data under its own terms. Contact us for questions about current providers or international processing. We will update this policy when the providers or their roles change.

7. Retention and deletion

Saved conversations remain associated with your account until deleted. You can delete them through the video's conversation-history menu. Logging out does not delete an account or its history. For account deletion, contact us using the account email so we can verify the request. There is no automatic account-deletion button at present. Account deletion and subscription cancellation are separate requests; cancel renewal through billing management as well.

Account data is kept while needed to provide the account and handle legitimate support or legal requirements. Temporary verification and session records expire; operational logs and provider-held copies may have different retention periods. Some billing or security records may need to be retained for accounting, fraud prevention, disputes, or legal obligations after account deletion. We do not promise that deleting a conversation immediately erases every backup or every provider-held copy. Ask us about your specific deletion request.

8. Your requests and choices

Depending on applicable law, you may be entitled to access, correct, receive a copy of, delete, restrict, or object to processing of your personal information, withdraw consent where processing relies on it, or complain to your data-protection authority. Contact us using the address below; we may need to verify account ownership before acting. You can choose not to sign in or use AI features and still browse public videos. Withdrawal of consent does not affect processing already lawfully carried out.

9. Children and guardians

Learning content may interest younger viewers, but we do not knowingly seek personal information from children below the age at which they can independently consent under applicable law. A parent or guardian should help with account and purchase decisions where required. Contact us if you believe a child has provided personal information without the required authorization so we can investigate and take appropriate action.

10. Policy updates

We will revise this page when our data handling changes and update the date above. Where required, we will notify you of material changes or obtain consent before new processing begins. Contact the TK Memo operator below with privacy questions or requests.