Terms of use & Privacy

memo-memo is a trading name of Heliotrope Atelier Ltd, a company registered in England and Wales (company number 16769882). Our registered office is 167-169 Great Portland Street, 5th Floor, London W1W 5PF. You can reach us at [email protected].

Our terms of use and our privacy policy are both on this page. Last updated 7 October 2026.

Terms of use

1. These terms

memo-memo is run by Heliotrope Atelier Ltd ('we', 'us'). By using memo-memo, whether you make a memo, open one or create an account, you agree to these terms. If you don't agree, please don't use it.

2. What memo-memo is

memo-memo is a memory service for sharing things. You save something, such as a link, a message, an event, a Wi-Fi password or a profile, and get a few everyday words for it, like memo-memo.co/think-mountain-apple. Say the words and anyone can find it again. Think of it as a verbal QR code.

Some memos show their content on our own page. Others lead somewhere else: for those, we show you where the memo goes first and you choose whether to follow it. We never send you anywhere automatically.

3. Your account

You must be 13 or over to use memo-memo.
Use your own email address and keep your password to yourself. You're responsible for what happens under your account.
If you think someone else has got into your account, tell us at once.
You can make some memos without an account, but you can't edit or delete those afterwards, so check before you save.

4. What you can't use memo-memo for

You must not make, save or share anything that:

is illegal, or helps someone break the law
is a scam, phishing or fraud, or pretends to be someone else, including us, a bank or a public body
contains or leads to malware, or anything else that harms devices or data
sexually exploits or abuses children, or is terrorist content
harasses, threatens or bullies anyone, or stirs up hatred against them
shares someone else's personal or private details without their permission
infringes anyone's copyright, trade marks or other rights
is spam or unwanted advertising

And you must not:

try to guess, sweep or collect other people's memos or the words in use
get round our limits, passwords or security, or test them without our written permission
make memos automatically or in bulk, except through tools or an API we provide for that, and within their limits
use memo-memo for commercial purposes without a separate agreement with us (see section 10)
interfere with memo-memo or with anyone else's use of it

5. Your memos

What you save is yours, and you keep any rights you have in it.
You give us permission to store your memos and show them to anyone who opens them, for as long as they're on memo-memo, and to copy them as we need to run and protect the service. This permission is free, worldwide and not exclusive to us.
You confirm you have the right to share everything you save, including other people's details.
Anyone who has a memo's words can open it. The words are hard to guess, but once you've shared them they're not a secret. Don't save anything you wouldn't want a stranger to see unless you lock it with a strong password.
Self-destructing notes, time capsules and predictions hide their content until it's due. Once someone has seen it, they can copy it, screenshot it or pass it on, and we can't stop that.
Once a memo's words have been used, they're never given to anyone else, even after the memo is deleted.

6. Our name and brand

memo-memo, the mm/ sigil, our logos, the finger illustrations and the design of the site are trade marks and copyright of Heliotrope Atelier Ltd. You're welcome to mention memo-memo by name and to share memo links, but you mustn't use our name or brand in a way that suggests you are us, or that we work with or endorse you, without our written permission. This doesn't apply to your memos, which stay yours (see section 5).

7. You're responsible for what you save

You alone are responsible for the memos you make and how you use and share them. We don't review memos before they go live and we don't monitor them. We host what you save; we don't write it, publish it or endorse it.

If someone makes a claim against us because of a memo you made, or because you used memo-memo in breach of these terms, you agree to cover our reasonable losses and costs, as far as the law allows.

8. Links and other sites

Memos can lead to websites and services we don't run. We don't check, control or endorse them, and we're not responsible for what you find there or what happens when you go there. We always show where a memo leads before you follow it, so take a look first.

We check every link against a few rules (for example, we don't accept links to link shorteners, which would hide where a memo really goes), but no check catches everything.

9. Reports and removal

Every memo has a 'Report this memo' link, or you can email us. We look at every report.
If a memo breaks these terms or the law, we'll remove it, and we may suspend or close the account that made it. We may do this without warning.
If we've removed your memo or closed your account and you think we got it wrong, email us and we'll look again. Email us too if you want to complain about how we handled a report.
We may keep removed memos and related records, and pass them to the police or other authorities, where the law requires it or to prevent serious harm or crime.

10. Personal use and the service

memo-memo is free for personal use. That means using it for yourself, your family and friends, and your own non-commercial projects, clubs and causes.

Using memo-memo for commercial purposes needs a separate agreement with us. That includes advertising or selling products or services, sharing links on behalf of a business or shop, and sponsored, affiliate or paid content, such as links shared as part of a brand deal. If you'd like to use memo-memo this way, email us at [email protected].

We may add paid features or plans in future. If we do, we'll show the price and any extra terms before you pay, and you'll never be charged for anything without agreeing to it first.

We work hard to keep memo-memo running and your memos safe, but we provide it as it is. We don't promise it will always be available, that it will be free of errors, or that memos will never be lost, so keep your own copy of anything important.

We may change, add or remove features and limits, or close memo-memo altogether. If we close it, we'll give account holders at least 30 days' notice by email.

11. Our liability to you

Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else the law doesn't allow us to limit. Nor does it affect your legal rights as a consumer.
Apart from that, we're not liable for loss we couldn't reasonably have foreseen, or for loss caused by events outside our control.
If you use memo-memo for business, we're not liable for any loss of profit, revenue, business, data or opportunity.
Our total liability to you for anything to do with memo-memo is limited to £100, or the amount you've paid us in the 12 months before the claim if that's more.

12. Ending

You can stop using memo-memo whenever you like, and delete your account from My account. Deleting your account deletes your memos too. We may suspend or close an account that breaks these terms, or where the law requires us to.

13. Changes to these terms

We may update these terms. We'll change the date at the top of this page and email account holders about important changes before they take effect. If you keep using memo-memo after that, the new terms apply.

14. The law

These terms are governed by the law of England and Wales, and the courts of England and Wales can hear any dispute about them. If you live in Scotland or Northern Ireland, you can also bring a claim in your local courts. If a court decides part of these terms can't be enforced, the rest still applies.

Privacy policy

1. Who looks after your data

Heliotrope Atelier Ltd, trading as memo-memo, is responsible for your personal data (the 'controller') under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact us about your data at [email protected], or write to our registered office.

2. What we collect

When you create an account:

your email address, your name, and your password, which we store only as a one-way hash that can't be turned back into the password
if you sign in with Google, the name, email address and profile photo on your Google account
your settings, such as your display name, whether to show it on your memos, and your personalisation word

When you make a memo:

what you put in it, which may include personal details such as names, phone numbers or email addresses
its words, its type and when it was made, plus its expiry date and password (stored as a hash) if you set them

When you use memo-memo:

your IP address and browser type, stored with your session while you're signed in, so you can see and protect your sign-ins
your IP address, held briefly in memory to limit how fast anyone can make requests and to spot people sweeping for memos. If many addresses seem to be guessing memo words at once, we email ourselves the busiest ones so we can block them.
anonymous visit counts (see Cookies and analytics)

When you report a memo or email us:

which memo you reported and why (we don't record who sent a report)
your emails to us, and our replies

3. Why we use it

To run your account and memos, and to send the emails the service needs, such as confirming your email address or resetting your password. Our legal basis: it's needed to provide the service you've asked for (contract).
To keep memo-memo safe: to prevent abuse, deal with reports and enforce these terms. Our legal basis: our legitimate interest in protecting the service and the people who use it.
To improve memo-memo, using anonymous statistics. Our legal basis: our legitimate interest in understanding how the service is used.
To meet our legal obligations, such as responding to lawful requests from the authorities. Our legal basis: legal obligation.

We don't use your data for advertising, we don't build a profile of you, and we don't make automated decisions about you that have legal or similar effects.

4. Cookies and analytics

We use no tracking or advertising cookies. If you don't sign in, we set no cookies at all. When you do, we set only the cookies that are strictly necessary, so we don't need to ask for your consent:

Session cookie: keeps you signed in. It lasts up to 7 days, is renewed while you use memo-memo, and is removed when you sign out.
Sign-in cookie: set only while you sign in with Google, to protect the sign-in from tampering. It lasts a few minutes.

We count visits with privacy-friendly analytics that use no cookies, don't follow you across other sites and don't identify you.

5. Who we share it with

We never sell your data or share it for marketing. A few trusted providers handle data for us, under contracts that require them to keep it safe and use it only on our instructions:

Cloudflare, which every visit to memo-memo passes through on its way to our server, to protect the service from attacks. It handles your IP address and the addresses of the pages you open, including memo words.
our hosting provider, which runs our server in London
MongoDB, whose Atlas service holds our database on Google Cloud in Belgium
Resend, which sends our emails
Google, only if you choose to sign in with Google

We may also share data where the law requires it, in response to a valid request from the police or a court, or to protect someone's safety. If our business is ever sold or reorganised, your data may pass to the new owner, who must keep to this policy.

6. Where your data is kept

Our server is in London and our database is in Belgium, in the EU, which UK law recognises as protecting personal data adequately. Cloudflare handles each visit at its data centre nearest to you, which may be outside the UK. Some of our providers, such as Cloudflare and Resend, are based in the United States. Where your data leaves the UK, we make sure it's protected by safeguards approved under UK law, such as the UK-US data bridge or the UK's international data transfer agreement.

7. How long we keep it

Your account: until you delete it. Deleting your account deletes your profile, sign-in details and memos straight away.
Your memos: until you delete them. When a memo is deleted, or a self-destructing note is read, we erase its content and keep only its words, so they're never given to anyone else.
Memos made without an account: until they're removed. If you made one and want it gone, email us its words.
Sign-in sessions: up to 7 days after your last visit.
IP addresses used to limit abuse: held in memory for up to an hour. Addresses in a sweep alarm email are kept until we've dealt with the sweep, and no longer than 90 days.
Reports and removed memos: as long as we need to deal with the report and meet our legal obligations.
Backups: we keep a nightly backup for 14 days, so deleted data is gone from our backups within 14 days.

8. Keeping it secure

Every connection to memo-memo is encrypted (HTTPS).
Account and memo passwords are stored only as one-way hashes. We can't read them, and neither can anyone who gets hold of the database.
The access tokens Google gives us when you sign in with Google are stored encrypted.
Our database accepts connections only from our own server.
We limit how often anyone can try a password, look up memo words or make memos.

No system is perfectly secure. If a breach puts your data at risk, we'll tell you, and the Information Commissioner's Office (ICO) where the law requires it.

9. Your rights

Under UK GDPR you have the right to:

see the data we hold about you, and get a copy
have it corrected
have it deleted (you can delete your account yourself from My account)
ask us to limit how we use it, or object to how we use it
get it in a format you can take elsewhere

Email [email protected]. It's free, and we'll reply within a month. We may need to confirm it's you first.

If someone has saved your personal details in a memo without your permission, email us its words and we'll look into it.

If you're unhappy with how we've handled your data, please tell us. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10. Children

memo-memo isn't for children under 13. If we learn we hold data about a child under 13 who has used memo-memo, we'll delete it.

11. Changes to this policy

We may update this policy. We'll change the date at the top of this page and email account holders about important changes.