Privacy Policy
1. Who operates Memvark
Memvark is operated by Nojus Tumenas in Lithuania, who is the data controller for account and website information. For privacy requests, email [email protected].
2. Information we process
We process your email address and account identifiers for sign-in; subscription status and identifiers received from Paddle; waiting-list email addresses and selected courses when you join a course waiting list; support messages you send; and technical or security data such as IP addresses processed by our hosting provider. We do not receive your complete card details.
3. Learning progress on your device
The current Memvark website stores study progress, review dates and certain preferences in your browser’s local storage rather than syncing them to your account. Clearing your browser data can remove this progress.
4. Why we process information
We use account and subscription data to provide our service (performance of a contract), security information to protect the website (legitimate interests), waiting-list details to send requested course updates (consent), and information needed to meet legal obligations (legal obligation). You may withdraw consent to waiting-list messages by contacting us.
5. Service providers
We use Cloudflare for hosting, database and security; Resend for sign-in emails; and Paddle for checkout, subscriptions, payments, tax handling and refunds. Paddle is the merchant of record and handles purchase information under its own privacy terms. Providers may process data outside the EEA subject to applicable transfer safeguards.
6. Cookies and browser storage
We use an essential session cookie (mv_session) to keep you signed in, as well as browser storage for learning progress and preferences. We do not currently describe any advertising or analytics cookies. Paddle may use its own technologies during checkout. If non-essential tracking is introduced, we will update this notice and provide consent controls where required.
7. Retention
Account and subscription data are kept while needed to provide your account and may be retained longer where necessary for legal obligations or disputes. Sign-in tokens are short-lived. Waiting-list entries are kept until the relevant notification is no longer needed or you ask us to remove them. Technical logs follow the relevant provider’s retention arrangements. Exact retention periods should be reviewed against the deployed systems.
8. Account deletion
To request deletion of your account or other eligible personal information, email [email protected] from your account email. We may verify your identity and will respond within the period required by GDPR, normally one month. Some records may be retained where legally required. Account deletion does not automatically cancel Paddle billing: cancel your subscription separately through Paddle.
9. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing, and withdraw consent where applicable. Contact us by email. You may complain to the Lithuanian State Data Protection Inspectorate (VDAI) or another competent authority.
10. Children
Memvark is not directed at children under 16. Where parental authorization is required by law, it must be obtained.
11. Changes and contact
We may revise this policy and update the date shown above. Data controller: Nojus Tumenas · Memvark · Lithuania · [email protected] · memvark.com.