Privacy policy

memtok turns your TikTok saves into an organized, searchable library. This policy says what we collect, what we make from it, who else touches it, how long we keep it, and how you delete it. If something here is unclear, email hello@jy-labs.com and we will answer.

memtok is operated by JY Labs.

Your account

• Your email address. It is the only way to sign in. We send you a link, you click it, and you are in. Your account has no password.
• Session records. Each time you sign in we store when the session started, the IP address it came from, and your browser’s user agent string, so you can see your active sessions on your account page and sign the others out. A session lasts up to 7 days.
• A count of sign-in requests per IP address per day, used only to stop abuse. We reject sign-ins from disposable email services and cap sign-ins from one network at 20 per day.
• Cookies. We set a sign-in cookie, a cookie that remembers which shared Reveal link brought you here, and a short-lived cookie while you connect an AI assistant. We set no advertising or analytics cookies.

Your TikTok export

You download your data from TikTok and open the file in memtok in your browser. Your browser reads it, not our servers, and the file itself is never uploaded.

From Favorite Videos, Like List, and Favorite Collection we keep the link to each video, the date you saved or liked it, and the names of your collections.

Your browser also reads Watch History and Share History, only to count. It turns them into four numbers: how many different videos you watched, how many days the history covers, how many videos you shared to a person, and how many videos you rewatched without saving. Only those four numbers are sent to us. No video, link, or date from your watch or share history leaves your device.

Nothing else in the export is read. Your direct messages, search history, comments, and profile never leave your device. This is how the importer is built, not only a promise.

memtok for Chrome

Anyone with a memtok account can install the memtok for Chrome extension. Without pairing, a memtok page can ask it to read your TikTok collections for the collection match, to check your Favorites for new saves (Pro), or to fetch one saved video when you ask for Extract Insights. Pro members can also pair it with their account, so it syncs new saves on its own. You pair it from a page on memtok and confirm the pairing in the extension. Pairing gives the extension a device token. The extension keeps it in its own storage, and we store only a one-way hash of it.

The extension talks to TikTok from your browser with your own TikTok login. It reads your Favorites and your Collections: for each saved video its id, caption, creator handle and cover image link, the name of each collection, and which saved videos are in each collection. It sends those to memtok, which keeps them with your saves and copies the cover image to its own storage. To find your lists it reads your TikTok handle and account id from the page, and it does not send them to memtok. It does not read your likes or messages, and your TikTok login and cookies never reach memtok.

Once paired, the extension checks your Favorites and Collections about once an hour. It opens a muted TikTok tab in the background, reads the lists from it, and closes it. The collection match and the favorites check use the same kind of background tab when a memtok page asks for them. Reading the lists takes at most 150 actions on TikTok in any hour, such as opening a page or scrolling a list. Without pairing, the extension never runs on its own. To stop the hourly check, disconnect the browser on your account page, and it stops after its next check, or remove the extension.

When you ask for Extract Insights on a save, the extension can download that video through your TikTok login and upload it to memtok’s private storage. We treat that file like an upload you made yourself (see Media you give us). On a paired browser these downloads wait in a queue, and the extension’s toolbar button can pause it.

Your account page lists each paired browser with when it was last used, and you can disconnect any of them. A token not used for 90 days stops working.

memtok for Chrome’s use of information it receives follows the Chrome Web Store User Data Policy, including the Limited Use requirements. It uses what it reads and downloads from TikTok only to provide the memtok features this policy describes, including the shared transcripts and frames under Derived content. We do not sell that information, use it for advertising, or use it to decide creditworthiness or lending.

Media you give us

When you use Extract Insights on a post and memtok cannot fetch it, it asks you to upload the video file you saved from TikTok, or the extension uploads it for you. We accept MP4 and MOV files up to 500 MB and 15 minutes long. We keep the file only while we process it (see How long we keep things).

Media we fetch

memtok can fetch a public TikTok post on your behalf to make its Insight Card. The fetcher runs on its own server, separate from the main app, and reaches TikTok through a residential proxy service. We send it only the id of the video. It stores the media only while we process it, and never longer than 72 hours.

Payment

If you buy Pro, Stripe handles the payment. We never see or store your card number. We keep a log of the events Stripe sends us (subscription created, renewed, cancelled) with Stripe’s customer and subscription ids, so we know what your account is entitled to and you can manage billing.

Feedback and waiting list

If you join the waiting list or reply to one of our emails, we keep your email address and what you wrote.

memtok is useful because of what it derives from your saves. We create all of the following.

• Public details for each video: title, creator name and handle, and a thumbnail, looked up from TikTok’s public embed service. We copy the thumbnail so your library still shows it after the original expires.
• Whether a video is still available. We re-check saved videos and mark the ones that have gone. For Pro members, Kept lists saves that disappeared after you saved them.
• A category for each video, chosen by a model from the title and creator handle, suggested collections for your saves, and any correction you make.
• Your Reveal, the stats and personality summary built from your library and the four history numbers. If you share it, the share page shows a set of summary stats and your Reveal title, and nothing else. You can revoke a share at any time.
• Transcripts. For extracted posts, the spoken words with timestamps.
• Keyframes. For extracted posts, up to 24 still images taken from the video, chosen where the picture changes or where on-screen text appears. See Frames are kept below for why we retain them.
• Insight Cards. A structured summary of a post (a recipe, a list, a technique) with every claim tied to a moment in the transcript or a frame, plus any edits you make. Collection Briefs combine the cards in one of your collections.
• Search data. Pieces of transcripts and their numeric embeddings, so search works. When you chat with your saves we record the time of each question to enforce the daily limit. We do not store the question.

TikTok posts are public and many people save the same one. When memtok makes a transcript, keyframes, or an Insight Card for a public post, it makes them once and shows the same result to every memtok user who saved that post. This keeps the product fast and cheap, and it means:

• If you upload a video file, or the extension downloads one for you, the transcript and frames made from it will be shown to other users who saved the same public post. The file itself is not shared and is deleted after processing. Your name is never attached to the result.
• If you edit an Insight Card, your edits are yours alone. Other users see the unedited version.
• Nobody can see that you saved a post. What is shared is the derived content for the public post, not the fact that it is in your library.

If you are not comfortable with a file being used this way, do not extract that post. The rest of memtok works without Extract Insights.

You can connect Claude or ChatGPT to your memtok library. You start it from the assistant, sign in to memtok, and approve the connection, or you create a connection token on your account page. Nothing is shared until you do.

Once connected, the assistant can ask memtok for parts of your library when you use it: titles, creators, categories and save dates of your saves, your collection names and the saves in them, matching transcript lines, Insight Card claims, Collection Briefs, your saves that are gone from TikTok, your Reveal summary of your saving habits, and answers to questions about your saves. memtok sends only what each request asks for, and only what your plan includes. It never sends keyframes or video files.

What you share this way is then held by Anthropic (Claude) or OpenAI (ChatGPT) under their own privacy policies. memtok does not control what they keep.

We store a record of each connection: the app’s name and the addresses it may return to, and the access tokens we issued, kept only as one-way hashes. Access tokens last an hour. A connection that goes 30 days unused stops working, and a token you created yourself stops after 90 days unused. Your account page lists each connection with when it was last used, and you can revoke any of them. Signing out everywhere revokes them all. Expired and revoked tokens are deleted 30 days after they end.

• To build and show you your library, Reveal, cards, search, and chat.
• To email you: sign-in links, reminders you asked for, your export link, a confirmation when you delete your account, and, for Pro members, at most one email a week when saves you kept have disappeared from TikTok.
• To bill you if you are Pro.
• To stop abuse and keep costs bounded (the sign-in cap, per-account limits on extraction and chat).
• To improve the product using aggregate numbers. We do not run an analytics script in your browser.

We do not sell your data. We do not use your saves or transcripts to train models.

We run memtok on other companies’ infrastructure and send specific pieces of data to specific services. This is the full list. If we add one, we update this list.

If you connect Claude or ChatGPT, Anthropic or OpenAI receives what you ask for, as described above. They act for you, not for us.

When something breaks in your browser, on our server or in the fetcher, we send the error, its stack trace, the page or request path, and your browser and operating system type to Sentry (sentry.io, United States) so we can fix it. For a sample of page loads and requests we also send how long each step took. Before anything leaves, we remove query strings, request bodies, video ids, share links, account and item ids in addresses, and the page-element labels that hold the titles of what you saved. Reports go out without your cookies, and we ask Sentry not to record your IP address. We do not use Google Analytics, PostHog or any other analytics or tracking script.

If you install memtok for Chrome, it reports its own errors to Sentry the same way: the error and its stack trace, with links, tokens and video ids replaced by placeholders. It reports only from its own background worker, popup and confirm window, never from TikTok or memtok.app pages, and it sends no TikTok data or account details.

Our servers and database are in the United States. We do not offer a choice of region.

While your account is open

• Uploaded and downloaded video files: deleted as soon as processing finishes, and in any case within 72 hours.
• Fetched media: the same rule, deleted after processing, within 72 hours.
• Export zips: 7 days after we email you the link, then deleted.
• Sign-in request counts: each holds an IP address, a day, and a number. They are not linked to your account, and today nothing deletes them.
• Chat question times: kept until you delete your account.
• Paired browsers and AI connections: a disconnected browser’s record stays until you delete your account. AI connection tokens are deleted 30 days after they expire or are revoked.
• Everything else in your library: kept until you remove it or delete your account. Nothing is deleted when a Pro subscription ends. What you already have stays viewable.

Frames are kept

Keyframes from extracted posts are kept for as long as the derived content exists, which can be indefinitely. An Insight Card cites frames the way it cites the transcript: a recipe step points at the frame that shows the ingredient list. If we deleted the frames, the card would cite images that no longer exist and lose the on-screen text the transcript never captured. The frames are reduced stills, at most 24 per post, stored privately and never shown outside memtok. We never keep the video itself.

If a creator or rights holder asks us to remove frames from their post, we remove them. We handle these requests by hand and aim to act within 72 hours. Email hello@jy-labs.com.

Clearing your library

Clear my library, keep my account, on your account page, deletes every item, collection, correction, and your export zip, and leaves your account, subscription, and billing history in place.

Deleting your account

One click on your account page, after you type your email to confirm. Right away, in one database transaction, we delete your account record and everything attached to it: your library items, collections, imports and history counts, category corrections, extraction requests and credits, sessions, paired browsers, AI connections, share links, chat question times, waiting-list entry, and any pending export job. Your export zip is deleted from storage right after. We then email you a count of what was removed. That email is the last thing we send you.

What is not deleted, and why. The transcripts, keyframes, and Insight Cards for public posts are not attached to your account. They are derived from a public video and shown to everyone who saved it. Once your items are gone there is no link from any of that content back to you. We also keep the log of Stripe events, which holds Stripe’s customer and subscription ids but not your email, and a record that an account was deleted, which holds a one-way hash of the account id and the counts.

Our database provider keeps a restore history of 6 hours. After that, deleted data cannot be restored from it. Stripe keeps its own records of past payments, as a payment processor must. Resend keeps its own delivery logs.

• See your data. Your library is your data, and you can browse all of it in the app.
• Take it with you. Pro accounts can export the whole library as a zip of Markdown files and a CSV, with transcripts where they exist. The download link is emailed to you and works for 7 days without signing in, so treat the email like a password.
• Correct it. Categories and Insight Card fields are editable.
• Delete it. Clear the library or delete the account, both self-service and immediate.
• Sign out everywhere. Your account page lists your sessions and lets you revoke the others. This also disconnects every AI connection and every paired browser except the one you are using.
• Disconnect. Paired browsers and AI connections each have a Revoke button on your account page.
• Revoke a share. Any Reveal share link can be turned off from the app.

Depending on where you live you may have more rights under local law, such as the right to ask what we hold or to object to certain processing. Email hello@jy-labs.com and we will respond.

TikTok requires users to be at least 13, and you need a TikTok account to use memtok. We do not knowingly keep an account for anyone under 13.

Traffic is encrypted in transit. Uploaded media, keyframes, and exports live in private storage that the public cannot list or fetch. Thumbnails are public, since they are copies of public images. Sign-in links expire in 5 minutes and are stored hashed. Extension and AI connection tokens are stored hashed. We keep no secrets in our code. No system is perfectly secure, and if we learn of a breach that affects you we will tell you.

When we change it we update the date at the top and, for changes that matter, email you before they take effect.

Questions, requests, and takedowns go to hello@jy-labs.com.