Your data, in plain words.
Last updated 8 October 2026.
Draft. This notice covers the waiting list and the app as it works today. A full privacy policy will be published before the app opens to the public.
Who we are
Memopause is run by [legal name / company name and number], [postal address]. We are the data controller for the information described here. Contact us at [[email protected]].
The waiting list
When you join the waiting list we store your email address, the date you joined and which version of the sign-up wording you agreed to. That's all. We don't store your IP address or use tracking cookies on this site.
We use your email address only to tell you when Memopause opens and to send occasional updates about it. Our lawful basis is your consent. You can withdraw it at any time by using the unsubscribe link in any email or by emailing us, and we'll delete your address.
Your address is stored with Cloudflare, which hosts this site, [and sent through our email provider, [name], when we write to you]. We never sell or share it for marketing. We keep it until you unsubscribe or until [12 months after launch], whichever comes first.
Your account
You sign in to the app with Google or Microsoft (and later Apple). When you do, that company tells us an account number that identifies you to Memopause, and your email address. We store those, the dates you signed up and last signed in, and a scrambled (hashed) copy of the code that keeps your browser signed in. We don't get or keep your password, your name, your photo or your contacts, and we never post anything for you.
We use this only to let you into your account and keep your diary backed up. Our lawful basis is that it's needed to provide the app you asked for (contract). It's stored with Cloudflare, which hosts the app. You can delete your account from the app's settings at any time, and we delete these details straight away.
Information from Google and Microsoft
When you choose "Continue with Google" or "Continue with Microsoft", Memopause asks only for your basic sign-in details (the openid and email permissions). From Google or Microsoft we receive:
- a unique account identifier, which we use to recognise you when you sign in again, and
- your email address, which we show in the app's settings so you know which account you're using, and use to reply if you contact us about your data.
We don't ask for or receive your password, contacts, files, calendar or any other data from your Google or Microsoft account, and we don't keep the access tokens they issue. We use this information only to sign you in to Memopause. We don't sell it, share it with anyone, or use it for advertising, and we don't use it to train AI models.
Memopause's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We keep these details for as long as you have an account. Deleting your account in the app's settings deletes them straight away. You can also remove Memopause's access from your Google account at myaccount.google.com/permissions or from your Microsoft account at account.live.com/consent/Manage.
Your diary
Your diary (symptoms, cycle, medication, blood results, appointments and notes) is kept on your device so the app works offline, and backed up to your account so that clearing your browser, resetting or losing your phone never loses it. Signing in on another device brings it back.
The backup is encrypted before it's stored, with a key for your account alone. That key is itself encrypted with a separate key that is kept apart from the database, so a copy of the database on its own can't be read. Because we hold those keys, we could technically decrypt your diary; we only ever do that to give it back to you when you sign in. Nobody at Memopause reads it, and we never sell it, share it for marketing or use it for advertising.
Information about your health is special category data. Our lawful basis for storing it is your explicit consent, which you give when you start using the app, and you can withdraw it at any time by deleting your account. The backup is stored with Cloudflare, which hosts the app. You can export your diary or delete it from the app's settings at any time. Deleting your account deletes your backup straight away; Cloudflare's short-term recovery copies of the database expire within 30 days.
If we add optional features that share information, such as a partner view, we'll explain exactly what they share and ask before turning them on.
Your rights
Under UK data protection law you can ask for a copy of the data we hold about you, ask us to correct or delete it, and withdraw consent at any time. Email [[email protected]] and we'll reply within one month.
If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Not medical advice
Memopause is a symptom diary. It does not diagnose, treat or give medical advice. If you're worried about your symptoms, speak to your GP or call NHS 111.