LABMEMO PRIVACY POLICY
Last Updated: 08/08/2026
1. Introduction
Welcome to LabMemo.
LabMemo (“LabMemo”, “we”, “our” or “us”) is a cloud based platform designed to help researchers, students, laboratory professionals and other scientific users organise research projects, laboratory work and scientific information.
We recognise that information stored within LabMemo may be valuable, confidential, unpublished or commercially sensitive. Protecting your privacy and safeguarding the information entrusted to the Service are important parts of how we design and operate LabMemo.
This Privacy Policy explains what Personal Data we process, why we process it, how it is used and protected, when it may be shared with service providers, how long it may be retained and the rights that may be available to you under applicable data protection laws.
This Privacy Policy applies when you access or use the LabMemo website, web application and any future mobile application or related service that links to this Privacy Policy.
By using the Service, you acknowledge that you have been provided with this Privacy Policy.
2. Definitions
For the purposes of this Privacy Policy:
Account means your registered LabMemo account.
Content means all information, files and materials that you create, upload or store within the Service, including laboratory notes, projects, experiments, protocols, metadata, images, voice recordings, exported reports, CSV files, publications, attachments and other user-generated material.
Personal Data means any information relating to an identified or identifiable natural person as defined under applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the UK GDPR.
Processing means any operation performed on Personal Data, including collection, storage, organisation, use, disclosure, transmission, deletion or any other processing activity as defined by applicable law.
Service means the LabMemo platform and all associated services provided by us.
User, “you” or “your” means any individual using the Service.
3. Who We Are
LabMemo is operated by:
Aziqo
Business Form: Sole Proprietorship
Registered Address:
Varmfrontsgatan 8, Skarpnäck
Sweden
Email:
For the purposes of applicable data protection laws, including the GDPR and the UK GDPR, Aziqo acts as the Data Controller in relation to the Personal Data described in this Privacy Policy.
4. Intended Users
LabMemo is intended for individuals who are at least 16 years of age, unless a higher minimum age is required under the laws of your country.
The Service is intended primarily for researchers, students, laboratory professionals, educators and other individuals engaged in scientific, academic or biotechnology-related work.
If you are using LabMemo on behalf of an organisation, university, research institute or employer, you confirm that you have the authority to use the Service on behalf of that organisation where required.
LabMemo is available only in countries and territories that we currently support. We may use information about your country of residence to determine whether the Service can be offered to you and to support payment, pricing, tax, legal and regulatory requirements.
5. Information We Collect
The information we collect depends on how you use the Service.
5.1 Account Information
When you create an account, we may collect information such as:
- your email address;
- your country of residence and confirmation of your country of residence;
- your account identifier;
- your authentication provider;
- records of your acceptance of our Terms of Service and Privacy Policy, including the versions accepted and the date and time of acceptance.
We collect your country of residence to determine whether the Service may be offered in your jurisdiction, comply with applicable legal and regulatory requirements, and support pricing, payment and other Service functionality where applicable.
Authentication is provided through Supabase Authentication. LabMemo does not store your password, which is managed securely by our authentication provider.
5.2 Subscription Information
If you subscribe to LabMemo, we may process information relating to your subscription, including:
- subscription status;
- billing status;
- free trial eligibility;
- subscription renewal information;
- Stripe Customer ID;
- Stripe Subscription ID;
- invoices or payment status.
Payment card information is processed directly by Stripe. LabMemo never receives or stores your full payment card details.
Stripe may also process information necessary for payment processing, billing, tax compliance, fraud prevention and related payment services in accordance with its own privacy practices.
5.3 Scientific Content
You may voluntarily create, upload or store Content within LabMemo.
Depending on how you use the Service, this may include:
- research projects;
- laboratory experiments;
- experimental methodologies;
- laboratory notes;
- meeting notes;
- protocols;
- images;
- voice recordings;
- CSV files;
- exported reports;
- scientific publications;
- references;
- other files that you choose to upload.
You retain ownership of all Content you create or upload. We process this Content solely to provide and operate the Service.
5.4 Technical Information
To operate, maintain and secure the Service, certain technical information may be processed when you use LabMemo. We do not use this information for advertising purposes or to build marketing profiles.
Information stored by LabMemo
LabMemo itself does not store IP addresses, browser type, device type or operating system information in its application database.
We do store:
- timestamps relating to your account and Content (such as when projects, experiments or log entries are created or updated);
- authentication session information stored locally on your device to keep you signed in until you sign out or clear your application data.
Information processed by our infrastructure provider
LabMemo is hosted on Supabase. As part of operating the Service, Supabase may automatically process certain technical information, including:
- IP address;
- request metadata (such as HTTP method, request path and response status);
- authentication events (such as sign-in, sign-out, registration and password resets);
- authentication session and token activity;
- timestamps relating to authentication and API requests; and
- user agent and similar request headers.
This information is processed solely to authenticate users, maintain security, prevent abuse, diagnose technical issues and ensure the reliable operation of the Service.
Under our current hosting configuration, authentication audit logs are retained for approximately one hour and platform logs for approximately one day before they are automatically removed by Supabase. LabMemo does not maintain its own separate logging system.
We do not use third-party analytics, crash reporting or advertising services that collect technical information about your use of the Service.
Waitlist data is retained until you request its deletion or until you create a LabMemo account, whichever occurs first.
Website pricing and approximate location
On the public LabMemo website, our hosting provider, Vercel, provides LabMemo with a country code derived from your IP address. We use this country code to display pricing in an appropriate local currency where available.
LabMemo does not access or store your raw IP address for this pricing functionality. The selected pricing currency may be stored temporarily in your browser’s session storage so that the website can maintain the appropriate currency during your browsing session.
This information is used for pricing presentation only. Your eligibility to use or purchase the Service is determined separately based on the country of residence that you provide when creating your Account.
5.5 Communications
If you contact us, we may process:
- your name;
- email address;
- correspondence;
- support requests;
- information you voluntarily provide.
This information is used primarily for customer support, responding to enquiries and improving the Service.
5.6 Information We Do Not Intentionally Collect
LabMemo is not designed for the storage of:
- payment card information;
- government-issued identification numbers;
- regulated medical records;
- protected health information subject to healthcare-specific legislation;
- special categories of Personal Data, except where such information is incidentally included in Content that you choose to upload.
If you upload Personal Data relating to other individuals, you are responsible for ensuring that you have a lawful basis for doing so and that your use of the Service complies with applicable law.
6. Legal Bases for Processing Personal Data
Where the GDPR or UK GDPR applies, we process Personal Data only where we have a lawful basis to do so.
Depending on the circumstances, our legal basis may include:
| Purpose | Legal Basis |
|---|---|
| Creating and maintaining your Account | Performance of a contract |
| Authenticating users and managing sign-in sessions | Performance of a contract |
| Providing and operating the Service | Performance of a contract |
| Synchronising and storing your Content | Performance of a contract |
| Generating user-requested exports (such as PDF reports or CSV files) | Performance of a contract |
| Processing subscriptions and Premium access | Performance of a contract |
| Determining free trial eligibility | Performance of a contract |
| Determining whether the Service may be offered in your jurisdiction and complying with applicable legal and regulatory requirements (including use of your declared country of residence) | Performance of a contract and Legitimate interests |
| Processing billing information received from our payment provider (including billing country where applicable) | Performance of a contract |
| Sending password reset, verification and other essential service emails | Performance of a contract |
| Providing customer support | Performance of a contract and Legitimate interests |
| Protecting accounts and preventing fraud, abuse and unauthorised access | Legitimate interests |
| Maintaining security logs and protecting the integrity of the Service | Legitimate interests |
| Improving the reliability, stability and security of the Service | Legitimate interests |
| Displaying pricing in an appropriate local currency based on your approximate country | Legitimate interests |
| Complying with legal obligations | Legal obligation |
| Responding to lawful requests from public authorities | Legal obligation |
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
7. How We Use Your Personal Data
We use your Personal Data only where necessary to operate, maintain and improve the Service.
Depending on how you use LabMemo, we may process your Personal Data to:
- create and manage your Account;
- provide, maintain and secure the Service;
- synchronise and store your Content;
- generate exports and other requested functionality;
- process subscriptions and Premium access;
- provide customer support and send essential service communications;
- detect, investigate and prevent fraud, abuse and unauthorised access; and
- comply with legal obligations or protect our legal rights.
- determine whether the Service may be offered in your country of residence and comply with applicable legal or regulatory requirements;
- display pricing in an appropriate local currency where available;
We do not sell or rent your Personal Data, share it with advertisers or use it for targeted advertising.
8. Your Research Data
One of LabMemo’s primary purposes is to help users organise scientific work.
We recognise that research data may be confidential, unpublished or commercially valuable. You retain ownership of all Content you create or upload, and LabMemo claims no intellectual property rights over it. We process your Content only to provide and operate the Service and do not routinely access it except where necessary to:
- respond to a support request initiated by you;
- investigate technical or security issues;
- comply with applicable law or a valid legal request; or
- protect the rights, safety or security of LabMemo, our users or others.
Administrative database access is restricted to authorised personnel.
8.1 Artificial Intelligence
LabMemo does not use your Personal Data or your Content to train artificial intelligence or machine learning models.
8.2 Responsibility for Uploaded Content
You are responsible for ensuring that your use of the Service complies with applicable law and any contractual or institutional obligations.
Where your Content contains Personal Data relating to other individuals, confidential information or regulated data, you are responsible for ensuring that your use of the Service complies with applicable laws and any contractual or institutional obligations.
LabMemo is not intended for the storage of patient medical records, classified information or other data subject to sector-specific regulatory requirements unless expressly supported by the Service.
9. Payments
Premium subscriptions are processed through Stripe.
When you purchase a subscription, payment and billing information is collected and processed directly by Stripe. LabMemo does not receive or store your full payment card number or security code.
LabMemo receives and stores limited information necessary to manage your subscription and provide Premium functionality, such as:
- Stripe Customer ID;
- Stripe Subscription ID;
- subscription status;
- payment and billing status;
- subscription plan and currency; and
- subscription renewal, cancellation and end dates.
Stripe may process additional information, including billing address, payment method information and transaction information, for purposes such as payment processing, billing, tax compliance, fraud prevention and related payment services.
For further information regarding Stripe’s processing of Personal Data, please refer to Stripe’s own privacy documentation.
10. Email Communications
We use Resend to deliver essential transactional emails, including account verification, password resets, security notifications, subscription updates, trial reminders, service announcements and customer support communications.
These communications are necessary for operating the Service and cannot be opted out of where they are required to provide your Account or comply with legal obligations.
We do not send marketing communications without your consent where required by applicable law.
Should marketing communications be introduced in the future, users will be able to opt out at any time.
11. Security
Protecting scientific information is a core design principle of LabMemo.
We implement technical and organisational measures designed to protect Personal Data and user Content against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
Our security measures currently include:
- encrypted communications using HTTPS and TLS;
- secure authentication and password management through Supabase Authentication;
- Row Level Security (RLS) to isolate user data;
- private cloud storage with time-limited signed URLs for uploaded files;
- access controls based on the principle of least privilege; and
- security monitoring and logging where necessary to protect the Service.
No method of transmitting information over the Internet or storing information electronically can be guaranteed to be completely secure.
Accordingly, while we take reasonable measures to protect your information, we cannot guarantee absolute security.
We regularly review and improve our security measures as the Service evolves.
If we become aware of a Personal Data breach that is likely to result in a risk to the rights and freedoms of affected individuals, we will respond in accordance with applicable law.
Where legally required, we will notify the relevant supervisory authority and affected users within the timeframes prescribed by applicable law.
12. Third-Party Service Providers
To provide the Service, we rely on selected third-party service providers that process Personal Data on our behalf or independently as separate data controllers.
Our current service providers include:
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database and storage |
| Stripe | Payment processing, billing, tax and fraud prevention services |
| Resend | Transactional emails |
| Vercel | Hosting and delivery of the LabMemo website and web application |
These providers process Personal Data in connection with providing their respective services to us and, where applicable, for their own legal and regulatory obligations.
We carefully select service providers based on factors including security, reliability and compliance with applicable data protection laws.
For more information about how these providers process Personal Data, please refer to their respective privacy policies available on their official websites.
13. International Data Transfers
LabMemo is primarily hosted within the European Union using Supabase’s Central EU (Frankfurt, Germany) region.
Personal Data stored in the Service, including account information, research projects, experiments, uploaded files, images and voice recordings, is primarily processed and stored within the European Union.
However, some of our service providers, including Supabase and its authorised subprocessors, may process limited Personal Data outside the European Economic Area (EEA) for purposes such as infrastructure support, email delivery, security operations or technical support.
Where Personal Data is transferred internationally, we use appropriate safeguards where required by applicable data protection law, including where applicable:
- Standard Contractual Clauses approved by the European Commission;
- the UK International Data Transfer Addendum;
- adequacy decisions; or
- other lawful transfer mechanisms recognised under applicable data protection law.
Further information regarding these safeguards is available upon request.
14. Data Retention
We retain Personal Data only for as long as it is reasonably necessary to fulfil the purposes described in this Privacy Policy, including providing the Service, complying with legal obligations, resolving disputes and enforcing our agreements.
In general:
Account information and research Content is retained while your Account remains active. Following the end of your subscription, we may retain your Account and associated Content for up to twelve months to allow you to reactivate your subscription and regain access to your information. After this retention period has expired, we may permanently delete your Account and associated Content, unless continued retention is required or permitted by applicable law.
Subscription and billing information may be retained for as long as necessary to comply with applicable accounting, tax and legal obligations.
Customer support correspondence may be retained for up to 24 months after the matter has been resolved in order to provide consistent customer support and maintain support history.
Security logs may be retained for limited periods where necessary to maintain the security and integrity of the Service.
Where Personal Data is no longer required, we may delete or anonymise it, unless continued retention is required or permitted by applicable law.
If you request permanent deletion of your Account, we will process the request in accordance with Section 17 of this Privacy Policy. Certain information may nevertheless be retained where required or permitted by applicable law or where retained independently by our service providers in accordance with their own legal obligations.
14.1 Backups
LabMemo relies on the backup and recovery capabilities provided by its hosting infrastructure where applicable. Backup systems are intended for disaster recovery purposes and are not designed to provide individual users with restoration of deleted Content.
15. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
- request access to your Personal Data;
- request correction of inaccurate or incomplete Personal Data;
- request deletion of your Personal Data;
- request restriction of certain processing activities;
- object to certain processing activities based on legitimate interests;
- receive a copy of your Personal Data in a structured, commonly used and machine-readable format where applicable;
- withdraw consent where processing is based on consent;
- lodge a complaint with your local supervisory authority.
These rights may be subject to certain legal exceptions and limitations.
To exercise your rights, please contact us using the contact details provided in this Privacy Policy.
We may request reasonable information to verify your identity before responding to your request.
Where required by applicable law, we will respond within the applicable statutory timeframe.
For users in the European Economic Area and the United Kingdom, we generally respond within one month, subject to any extensions permitted by applicable law
16. Cookies and Similar Technologies
LabMemo currently uses only essential cookies, local storage, session storage and similar technologies required to authenticate users, maintain secure sessions, remember essential preferences, display appropriate pricing and operate the Service.
LabMemo does not currently use advertising cookies or similar technologies for targeted advertising.
If analytics or other optional cookies or similar technologies are introduced in the future, this Privacy Policy and any applicable Cookie Policy will be updated before such technologies are deployed where required by law.
17. Account Deletion
Users may permanently delete their Account through the Service or by contacting us. We aim to process verified deletion requests without undue delay.
For security reasons, we may require reasonable verification of identity before processing an account deletion request.
Once an Account deletion request has been completed:
- active access to the Account will be permanently removed;
- Personal Data and user-generated Content associated with the Account will be deleted or anonymised from LabMemo’s active systems, where appropriate;
- user-generated Content will no longer be accessible through the Service; and
- subscription access will end in accordance with applicable billing terms.
Certain information may be retained where required or permitted by applicable law, including information necessary to comply with accounting, tax, legal, fraud prevention or security obligations.
Residual copies may temporarily remain in secure backup systems until they expire or are overwritten in accordance with our providers’ backup and retention processes
18. Children’s Privacy
LabMemo is intended for users aged 16 or older unless a higher minimum age applies under local law. We do not knowingly collect Personal Data from children below the applicable minimum age. If we become aware that such data has been collected, we will delete it as soon as reasonably practicable.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to the Service, our service providers, applicable law or our privacy practices.
Where changes are material, we will take reasonable steps to inform you, such as by providing notice within the Service or by email where appropriate.
Where required by applicable law, we will obtain your consent before applying changes that require consent.
The date at the top of this Privacy Policy indicates when it was last updated.
---
20. Contact Us
If you have any questions about this Privacy Policy, your Personal Data, or the way we process information, or if you wish to exercise any of your privacy rights, please contact us using the details below.
Aziqo
Business Form: Sole Proprietorship
Registered Address:
Varmfrontsgatan 8
128 38 Skarpnäck
Sweden
Privacy Email:
Aziqo.studio@outlook.com
We may request reasonable information to verify your identity before responding to privacy-related requests. Where required by applicable law, we will respond within the applicable statutory timeframes.
Depending on your location and applicable law, you may have the right to lodge a complaint with the competent data protection or privacy authority in your country or jurisdiction. If you are located within the European Economic Area (EEA) or the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority. If you are located in Sweden, you may contact the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY).
We encourage you to contact us first so that we have the opportunity to resolve your concerns directly whenever possible.