Privacy policy

Last updated October 17, 2026

MemBraince is a hosted memory service for AI applications, operated by 1001636998 ONTARIO INC. in Ontario, Canada ("we"). This policy explains what we collect when you use the website, the API, the MCP endpoint, and the Claude integrations, and what we do with it.

What we collect

Account

Your email address and sign-in records, handled by our authentication provider. We keep a one-way digest of your account identifier to link your account to its data.

API keys

Only a salted digest of each key, its label, and when it was created, last used, or revoked. We can't show a key again after it is created.

Your content

The events and conversations you send, and the memories, entities, and relationships derived from them. With the Claude Code plugin's automatic saving turned on, this includes the messages you type in a Claude Code session (not Claude's replies or tool output).

Usage

Counts of requests, saves, and input characters per key, used for quotas and billing.

Billing

When billing is enabled, our payment processor handles payment details. We store only its customer and subscription identifiers and subscription status, never card numbers.

Security records

An append-only audit log of security events such as sign-ins, key changes, and revocations, which may include a one-way digest of the client address.

Operational logs

Request method, route, status, and timing. Logs exclude request bodies, credentials, cookies, and raw query strings.

Encryption

Content saved by an encrypted account is encrypted with a key that only that account's API keys, its Claude connections, and its recovery code can unlock. We do not store anything that can unlock it. Plaintext exists only in server memory while a request or a save is being processed. Because of this, we cannot read your stored memories and cannot recover them if you lose every key and your recovery code. Content saved before an account was encrypted remains as it was stored.

How we use it

To provide the service: storing what you send, extracting memories, answering searches, enforcing quotas, billing, preventing abuse, and keeping the service secure. We do not sell your data, show advertising, use advertising trackers or browser analytics, or use your content to train models.

Service providers

Fly.io

Hosts the service and its storage in the United States.

Supabase

Handles account sign-up, sign-in, and email confirmation.

Stripe

Processes payments when billing is enabled.

OpenAI

On the Standard plan only, the content of each save is sent to an OpenAI model to extract memories. The Premium plan does not send your content to any outside model.

How long we keep it

We keep your content until you delete it or close your account. Forgetting a memory removes it from search results right away. When an account is offboarded, access is revoked immediately and live content is purged within 7 calendar days; storage snapshots are kept for 7 days, so purged content may remain in recovery copies until that window ends.

Cookies

The website uses only the cookies needed to keep you signed in and to protect forms against forgery. There are no tracking cookies.

Your choices and rights

You can revoke keys and Claude connections in the portal at any time, and turn off the Claude Code plugin's automatic saving in its settings. Depending on where you live, you may have rights to access, correct, export, or delete your personal information; contact us to use them.

Children

MemBraince is not intended for children under 16.

Changes

We will post changes here and update the date above. Significant changes will be announced to account holders by email.

Contact

Our support email address is being set up and will be listed here.