Privacy is the product.

Memoir collects almost nothing. The app runs entirely on your device. Your memories — text, photos, voice memos, tags, mood, and locations — never touch our servers.

The only data we touch is your email address, and only if you join the waitlist on this site. We use it once, to email you when TestFlight invites are ready. After that, we delete it. We never sell, share, or analyse it.

Each memory is encrypted with AES-GCM-256 before it’s stored on disk. The encryption key is generated on first launch, stored in your iCloud Keychain (Apple’s end-to-end encrypted key vault), and never sent to us or anyone else.

When you eventually sync across devices using your iCloud account, what reaches Apple’s servers is opaque ciphertext. Apple cannot read your memories. We cannot either.

The only thing on our server (memoir-content-service) is your email if you signed up for the waitlist. The server logs incoming requests for one week for diagnostics, then drops them. We do not run any analytics, A/B testing, or telemetry.

We do not use Google Analytics, Facebook Pixel, Mixpanel, Hotjar, or any other tracking tool.

The app uses Apple frameworks (CloudKit, Vision, CoreLocation, etc.) which are all on-device or governed by Apple’s own privacy policy. No third-party SDKs are linked into Memoir.

The landing page is hosted on a static CDN. The CDN sees standard HTTP request logs (IP address, user agent) for routing — these are kept for 30 days and never exported.

You can export everything, on the spot, from inside the app: Settings → Backup & Restore → Export. The output is an encrypted JSON file you control.

You can delete every memory by uninstalling the app — there is no remote copy to clean up.

If you signed up for the waitlist and want your email removed, contact us (see Imprint).