Privacy Policy
Version 1.0 · 8 November 2026
This policy explains how Systemorph AG processes personal data when you use the Memex apps
(for iPhone, iPad, Mac and the web) and the MeshWeaver cloud service Systemorph operates (for
example memex.meshweaver.cloud). It is written to meet the Swiss Federal Act on Data Protection
(revFADP) and the EU General Data Protection Regulation (GDPR).
In short. We process what you put into Memex and what you connect to it, to run the service for you. We do not sell personal data, we show no advertising, and neither the apps nor the service track you across other companies' apps or websites. The apps contain no third-party analytics or advertising SDK.
1. Who is responsible
The controller is Systemorph AG, a company incorporated in Switzerland (Canton of Zurich), company identification number CHE-282.912.173 — see the Imprint. For any question about this policy or to exercise your rights, write to info@systemorph.com.
Installations run by an organisation. If you connect a Memex app to a MeshWeaver installation
that your employer or another organisation operates, that organisation is the controller for the data
held there, and its own privacy statement (at /privacy on that installation) applies. The app only
transfers data between your device and the installation you chose.
2. What we process, and why
| Category | What it is | Why |
|---|---|---|
| Account data | Your name, e-mail address and a stable account identifier, received from the sign-in provider you choose (Apple, Microsoft, Google, LinkedIn or another provider an installation offers). With Sign in with Apple you may hide your e-mail address; we then receive Apple's relay address. | To create your account, sign you in and secure it. |
| Your content | What you create, upload or edit: notes, documents, spaces, threads with AI assistants, comments, files and images. | To store it and show it to you and to the people you share it with. |
| Connected mail, calendar and messages | Only if you connect an account (for example a Microsoft 365 or Gmail mailbox, or messages relayed from your own Mac): messages, their senders and recipients, attachments, and calendar entries. Messages are read live from the provider. Once connected, an AI assistant triages each new message in the background and stores a short verdict for it (sender, subject, time, importance, tags and a one-line reason); where the answer is obvious it prepares a reply draft in your mailbox for you to review. Message bodies and attachments are not stored unless you switch on Inbox copies in your settings, which keeps a copy of the last 90 days (body and attachments up to 25 MB each) to make the inbox faster and searchable. What you file, draft or save becomes your content. | To show your inbox and calendar in Memex, to sort what needs your attention, to summarise on request, and to draft replies that you review and send. |
| Voice recordings | Audio you record with the microphone button. | To turn speech into text. The audio is sent to our speech-to-text service, transcribed and then discarded; only the resulting text is kept, as part of your content. |
| Photos and camera images | Images you choose from your photo library or take with the camera inside the app. | To attach them to a note, thread or document you are working on. The app only sees the images you pick. |
| AI requests | The text, files and images you send to an AI assistant, and its answers. | To produce the answer you asked for. See section 4 for model providers. |
| Payment data | When you buy a plan on the web: the plan, amounts and invoices. Card details are entered at our payment provider (Stripe) and never reach us. | To bill you and keep accounting records required by law. |
| Technical and diagnostic data | Server logs of requests to the service: account identifier, time, the address requested, IP address, device and browser type, error details, and the app and service version. | To operate, secure and troubleshoot the service. These logs are not used to build profiles or for advertising. |
Data that stays on your device. The app keeps your sign-in tokens in the device's secure storage (the iOS Keychain), the list of installations you added, and your app settings. If you use an on-device model (Apple Intelligence), that processing happens on your device. If you set up the optional voice assistant for your home, the wake-word recordings for it go to the voice gateway you run on your own home network — not to us.
3. Legal bases
We process personal data to perform our contract with you (Art. 6(1)(b) GDPR) — running your account and the features you use; on the basis of our legitimate interests (Art. 6(1)(f) GDPR) in securing the service and diagnosing faults; to comply with legal obligations (Art. 6(1)(c) GDPR), such as bookkeeping; and with your consent (Art. 6(1)(a) GDPR) where you connect an account or grant the app microphone, camera or photo access — which you can withdraw at any time by disconnecting the account or changing the permission in your device settings. Under the revFADP, the same processing rests on the corresponding grounds of justification.
4. Who receives data
We do not sell or rent personal data, and we do not share it for advertising. We use these processors, each bound by a data processing agreement:
- Hosting — Microsoft Azure, in data centres in Switzerland and the EU/EEA.
- Sign-in providers — the provider you choose (Apple, Microsoft, Google, LinkedIn) processes your login under its own privacy policy.
- Connected accounts — when you connect a mailbox or calendar, we access it through that provider's interface (for example Microsoft Graph or the Gmail API) on your behalf and only with the permissions you grant. Data obtained through Google APIs is used only to provide the features you see, is not used for advertising and is not transferred to others except as needed to provide those features or as required by law.
- AI model providers — the content of an AI request is sent to the model provider configured for that feature (for example Microsoft Azure AI, Anthropic or OpenAI), solely to produce the answer. We use provider offerings under which request content is not used to train their models.
- Payments — Stripe processes payments made on the web.
- Speech-to-text — runs on our own infrastructure; no third party receives your audio.
Within MeshWeaver, content you put in a shared space is visible to the people who have access to that space, and content you publish is visible to its intended audience.
5. International transfers
Your data is stored in Switzerland or the EU/EEA. Where a processor (for example an AI model provider or a sign-in provider) processes data in another country, we rely on an adequacy decision or on standard contractual clauses and their Swiss-recognised equivalents.
6. How long we keep data
- Account data and your content — for as long as your account exists. When you delete your account, your account data and content are deleted within 30 days, except where the law requires us to keep records (for example invoices, ten years under Swiss law).
- Connected mail, calendar and messages — read from the provider when needed. Triage verdicts and prepared drafts stay until you delete them or your account. Inbox copies hold a rolling 90-day window and are deleted entirely when you choose Stop and delete the copies (Settings → Inbox copies) or when you delete your account. What you saved stays until you delete it. Disconnecting an account revokes our access.
- Voice recordings — deleted as soon as the transcription is returned.
- Server logs — a short rolling window of at most 90 days.
- Backups — overwritten within the backup cycle (at most 35 days).
7. Your rights
You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. You can delete your account inside the app (account settings) or by writing to info@systemorph.com. You may complain to a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country of residence.
8. Children
The apps and the service are not directed at children under 16, and we do not knowingly collect their data.
9. Security
Data is encrypted in transit (TLS) and at rest. Access is limited by explicit grants, every node of content carries its own access rules, and administrative access to the platform does not include access to your content.
10. Changes
We may update this policy. The current version is always at this address, with its date at the top; we will tell you in the app before a material change takes effect.