Privacy Policy

1. Who we are

Memento is developed and operated by CHAORAN KANG. This policy covers the Memento mobile app, mementolife.me and support communications. For privacy questions or requests, contact kcr0976@gmail.com.

2. Your moments on your device

Moment titles, dates, notes, selected photos and videos, generated video cover images and recorded voice notes are stored in the app’s local database and files on your device. Preferences are also stored locally. You do not need a Memento account. Using the core memory-keeping features does not upload your memory library to the developer.

Selected photos and videos are copied into app storage. Video information and cover images are processed locally, and voice notes are recorded and played locally. Memento does not send this content to an AI or transcription service. The app does not request access to your contacts or device location and includes no advertising or general-purpose behavioral analytics SDK.

3. Permissions and optional backups

Photo-library access lets you choose photos and videos, and microphone access lets you record a voice note. You can withdraw permissions in your device settings; the related feature may then be unavailable.

You may manually export a backup file or back up to iCloud on iOS, Google Drive or your chosen HTTPS WebDAV server. A backup includes your memory database and associated photos, videos, video covers and audio. The destination receives these files only when you start or continue a backup. These are restoration copies, not automatic cross-device synchronization or library merging. Your operating system may also include app data in its own device backups.

If you connect Google Drive, Google Sign-In provides an account identifier and email address for the connection and account label. Memento requests the limited drive.file scope and creates an app-specific Memento/repository folder. Google processes authentication, connection metadata and the backup files stored in your Drive. Authorization credentials are managed through the Google SDK and platform storage; the account identifier is also used locally to keep backup state separate. Signing out disconnects the app but does not delete backups already stored in Drive.

WebDAV server details and credentials are stored using platform secure storage, excluded from Memento library backups, and used to connect to your chosen server. The server can process connection metadata and backup contents. Use a trusted provider and an HTTPS address. Apple and Google process iCloud and Drive data under their own terms and privacy policies. Memento does not operate a cloud service that hosts your memory library.

4. App-store purchase processing

Where an in-app purchase feature is available, the applicable app store and RevenueCat process information needed to present, validate and restore purchases. This can include purchase history, transaction or receipt information, product and entitlement status, a generated anonymous app-user identifier, and technical app, platform and network information needed to provide the service. Processing may occur when the purchase SDK initializes or refreshes status, as well as when you purchase or restore.

RevenueCat is used for entitlement delivery, purchase support, fraud prevention and purchase analytics. Memento does not send your moment titles, notes, photos, videos or recordings to RevenueCat and does not set your name or email as a RevenueCat customer attribute. The app store handles payment details; the developer does not receive your full card information.

5. Website and support

Vercel hosts this website and may process IP addresses, browser and request metadata and security logs to deliver and protect it. We do not install advertising trackers or website analytics, and do not intentionally set marketing cookies. Fonts and site images are served with the site.

If you email us, your email address, message and any attachments are processed through our email provider to respond and resolve your request. Please avoid sending private memories, complete backups, passwords or payment details unless a narrowly scoped item is specifically needed and agreed.

6. Purposes, legal bases and sharing

Where data-protection law requires a legal basis, processing is based on providing the features or support you request, our legitimate interests in security and reliable connected services, compliance with legal obligations, or consent where required. You may withdraw consent without affecting prior lawful processing.

We do not sell personal information or share it for cross-context behavioral advertising. Information is disclosed to the providers described here as needed for their functions, to a backup provider you choose at your direction, or when required by law. Providers may process data in other countries, including the United States, under their applicable safeguards and policies.

7. Retention and deletion

Local memories remain until you delete them or remove the app’s data. Uninstalling generally removes local app data, but operating-system backups, exported files and remote copies in iCloud, Google Drive or WebDAV may remain. Remove those copies separately from their destinations; deleting a moment does not retroactively remove it from an existing backup. Restoring an old backup can restore previously deleted content.

We retain support correspondence only for as long as reasonably needed to handle the request, resolve disputes and meet legal obligations. Connected-service and infrastructure records follow operational needs, provider retention rules and legal obligations. Contact us to request deletion of records we control; we may need limited information to locate and verify the request. We cannot delete files held in a backup account that you control.

8. Security and your choices

Memento uses a SQLCipher local database and platform storage controls. This is not a user-password-protected vault: photos, videos, video covers and audio files are not separately encrypted by Memento, and exported or cloud backup contents have no additional Memento password protection. Protect your device, connected accounts and backup files. No storage or transmission method can be guaranteed completely secure.

You can edit and delete moments, export a backup, revoke device permissions, disconnect connected services and control copies stored with your backup provider. Depending on your location, you may also have rights to access, correct, delete or obtain your data, restrict or object to processing, withdraw consent and complain to a data-protection authority. Contact kcr0976@gmail.com to exercise applicable rights. We cannot access or retrieve a local memory library or user-controlled backup that you have not provided to us.

9. Children and policy updates

Memento is a general-audience memory-keeping app and is not specifically directed to children under 13. We do not knowingly collect personal information from children under 13 through support or connected services. If you believe a child has provided such information, contact us so we can take appropriate action. A parent or guardian should supervise a minor’s use of connected services as required by local law.

We may update this policy when the app or its data practices change. The effective date identifies the current version. Material changes will be communicated as required by applicable law.