Privacy Policy

1. Who we are

Memento is developed and operated by CHAORAN KANG. This policy covers the Memento mobile app, mementolife.me and support communications. For privacy questions or requests, contact kcr0976@gmail.com.

2. Your moments on your device

Moment titles, dates, notes, selected photos and recorded voice notes are stored in the app’s local database and files on your device. Preferences are also stored locally. You do not need a Memento account. Using the core memory-keeping features does not upload your memory library to the developer.

Selected photos are copied into app storage. Voice notes are recorded and played locally; Memento does not send them to an AI or transcription service. The app does not request access to your contacts or location and includes no advertising or general-purpose behavioral analytics SDK. Purchase analytics are described below.

3. Permissions and optional backups

Photo access lets you choose pictures, and microphone access lets you record a voice note. You can withdraw permissions in your device settings; the related feature may then be unavailable.

You may manually export a backup file or use iCloud on iOS or your chosen WebDAV server. A backup includes your memory database and associated photos and audio. The backup destination receives these files only when you use the feature. These are backups to restore, not automatic cross-device synchronization. Your operating system may also include app data in its own device backups.

WebDAV server details and credentials are stored using platform secure storage, excluded from Memento library backups, and used to connect to your chosen server. The server can process your connection metadata and backup contents. Use a trusted provider and an HTTPS address. Apple processes iCloud data under its own terms and privacy policy. Memento does not operate a cloud service hosting your memories.

4. Purchases and RevenueCat

On iOS, Apple and RevenueCat process information needed to offer, validate and restore Memento Pro purchases. This includes purchase history, transaction or receipt information, products, subscription and entitlement status, a generated anonymous app-user identifier, and technical app, platform and network information needed to deliver the service. This processing may occur when the purchase SDK initializes or refreshes status, as well as when you purchase or restore.

We use RevenueCat for entitlement delivery, purchase support, fraud prevention and purchase/revenue analytics. We do not send your memory titles, notes, photos or recordings to RevenueCat. We do not provide a name or email as a RevenueCat customer attribute. Apple handles payment details; the developer does not receive your full card information.

5. Website and support

Vercel hosts this website and may process IP addresses, browser and request metadata and security logs to deliver and protect it. We do not install advertising trackers or website analytics, and do not intentionally set marketing cookies. Fonts and site images are served with the site.

If you email us, your email address, message and any attachments are processed through our email provider to respond and resolve your request. Please avoid sending private memories, complete backups, passwords or payment details unless a narrowly scoped item is specifically needed and agreed.

6. Purposes, legal bases and sharing

Where data-protection law requires a legal basis, processing is based on providing the features or support you request, our legitimate interests in security and reliable purchase management, compliance with legal obligations, or consent where required. You may withdraw consent without affecting prior lawful processing.

We do not sell personal information or share it for cross-context behavioral advertising. Information is disclosed to the providers described here as needed for their functions, to a backup provider you choose, with your direction, or when required by law. Providers may process data in other countries, including the United States, under their applicable safeguards and policies.

7. Retention and deletion

Local memories remain until you delete them or remove the app’s data. Uninstalling generally removes local app data, but operating-system backups, exports and remote copies may remain. Remove those copies separately from their destinations; deleting a moment does not retroactively remove it from a backup. Restoring an old backup can restore previously deleted content.

We retain support correspondence only for as long as reasonably needed to handle the request, resolve disputes and meet legal obligations. Purchase and infrastructure records follow operational needs, provider retention rules and legal obligations. Contact us to request deletion of records we control; we may need limited information to locate and verify the request. Store transaction records may have to be retained. Deletion does not cancel a subscription.

8. Security and your choices

Memento uses a SQLCipher local database and platform storage controls. This is not a user-password-protected vault: photos and audio files are not separately encrypted by Memento, and exported backups have no additional password protection. Protect your device, accounts and backup files. No storage or transmission method can be guaranteed completely secure.

You can edit and delete moments, export a backup, revoke device permissions and control copies stored with your backup provider. Depending on your location, you may also have rights to access, correct, delete or obtain your data, restrict or object to processing, withdraw consent and complain to a data-protection authority. Contact kcr0976@gmail.com to exercise applicable rights. We cannot access or retrieve a local memory library that you have not provided to us.

9. Children and policy updates

Memento is a general-audience memory-keeping app and is not specifically directed to children under 13. We do not knowingly collect personal information from children under 13 through support or connected services. If you believe a child has provided such information, contact us so we can take appropriate action. A parent or guardian should supervise a minor’s use of purchases and connected services as required by local law.

We may update this policy when the app or its data practices change. The effective date identifies the current version. Material changes will be communicated as required by applicable law.