Privacy Policy
Last updated on May 2026
memori is built on one principle: your moments belong to you. We do not sell your data, we do not advertise to you, and we do not share your personal information with third parties for commercial purposes. This policy explains exactly what we collect, why, and how.
Developer
memori is an iOS application developed by Steven Diep, an independent developer. References to "we," "us," or "our" in this policy refer to the developer of memori. You can reach us at sdiep26@scienceleadership.org.
Data collected & why
We collect only what is necessary to provide the app's core functionality. Here is every category of data we handle:
Account information -> When you create an account, we collect your email address. This is used solely to authenticate you, send email verification links, and allow you to reset your password. We do not use your email address for marketing.
Profile information -> During onboarding, you optionally provide a display name, a unique handle, and answers to a short set of questions (such as how you heard about the app and how your days typically feel). This information is stored in our backend database (Supabase) and is used only to personalize your in-app experience. It is never shared publicly or with third parties.
Your moments -> The core content of memori — your journal entries, mood selections, location names you enter manually, names of people you associate with a moment, and any photos or videos you attach — is stored locally on your device by default. Free tier users' moment content never leaves their device unless they choose to enable cloud backup (a premium feature). Premium users who enable backup have their moment content encrypted in transit and stored in our backend. At no point is your moment content read, analyzed, or accessed by us for any purpose other than delivering the sync and backup service to you.
Media files -> Photos and videos you attach to moments are stored as files in your device's local app storage directory. They are not uploaded to any server unless you are a premium subscriber with cloud backup enabled. We do not process, scan, or analyze the content of your media.
App feedback -> If you choose to submit feedback through the in-app feedback form, we collect the message you write, the feedback type you select, an optional satisfaction rating, and your app version. This is sent to our backend and used only to improve the app. Feedback is associated with your account solely so we can follow up if needed — it is never published or shared.
Diagnostic and usage data -> We do not use any third-party analytics SDK. We do not collect crash reports automatically. We do not track how you use the app, which screens you visit, or how long you spend in it.
Data not collected
To be explicit, we do not collect:
Your precise GPS location. Any location associated with a moment is text you type yourself — the app does not access your device's location services for logging purposes.
Your contacts list
Device identifiers (IDFA, IDFV) for advertising purposes.
Behavioral data, engagement metrics, or usage patterns.
Any data for the purpose of advertising, profiling, or resale.
How we store your data
Local storage -> All moment content — your journal entries, mood data, media, and associated metadata — is stored on your device using Apple's SwiftData framework. This data is protected by your device's built-in security (encryption at rest when your device is locked). We have no access to locally stored data.
Account & profile data -> Your email address, display name, handle, and onboarding responses are stored in our backend, provided by Supabase. Data is encrypted in transit using TLS. You can learn more about Supabase's data practices at supabase.com/privacy.
Important notice -> Your moments are stored only on your device. If you delete the app, lose your device, or do not have an iCloud device backup enabled, your moment data cannot be recovered. We strongly recommend enabling iCloud device backups in your iOS Settings to protect your data.
Permissions requested
Camera -> to capture photos and videos for your moments
Microphone -> to record audio when capturing video
Photo Library -> (if applicable) — to allow you to attach existing photos from your device to a moment
We do not request any permission not listed here. Each permission is requested only when you attempt to use the relevant feature for the first time, and you may revoke any permission at any time in your iOS Settings.
Camera & microphone access
memori requests access to your device's camera and microphone solely to allow you to capture photos and videos directly within the app. Camera access is used only when you actively initiate media capture within a moment. Microphone access is used only when you record video with audio. We do not access your camera or microphone in the background, and neither feed is transmitted to any server unless you are a premium subscriber with cloud backup enabled.
EXIF & embedded metadata -> Photos captured or imported through memori may contain embedded metadata, including GPS coordinates written by your device's camera system. We do not read, extract, or store this metadata. It is retained within the file only as part of your locally stored moment content and is subject to the same storage and transmission rules as all other media.
Apple & Google sign-in
memori offers Sign In with Apple and Sign In with Google as authentication options. When you use these methods, Apple or Google authenticates your identity and provides us with a token. We do not receive your Apple or Google password. If you use Apple's "Hide My Email" feature, we receive and store only the anonymized relay email address Apple provides — we have no access to your real email in that case. Google's privacy practices are governed by Google's Privacy Policy.
Data sharing
We do not sell, rent, or trade your personal information. We do not share your data with advertisers, data brokers, or marketing platforms. The only third-party service that handles your data is Supabase, which acts as our backend infrastructure provider. Supabase processes data only as instructed by us and does not use your data for its own purposes.
We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.
Data retention
Your account and associated profile data is retained for as long as your account is active. If you delete your account, we permanently delete your profile data and any synced moment data from our backend within 30 days. Locally stored data on your device is removed when you delete the app. Feedback submissions are retained for up to 12 months to inform product improvements, after which they are deleted.
Your rights
You have the right to:
Access the personal data we hold about you.
Correct inaccurate profile information, which you can do directly in the app under Settings → Profile.
Delete your account and all associated data by contacting us at sdiep26@scienceleadership.org. Account deletion is permanent and cannot be undone.
Export your moment data (available to Moments+ subscribers via the export feature).
Object to any processing of your data not described in this policy.
If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR or CCPA. We honor all such requests. Contact us at the email above to exercise any of these rights.
Children's policy
memori is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly.
Changes to this policy
We may update this privacy policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the app. Continued use of memori after a policy update constitutes your acceptance of the revised policy. We encourage you to review this page periodically.
Contact
If you have any questions, concerns, or requests regarding this privacy policy or your data, please contact us:
Steven Diep
Developer, memori
sdiep26@scienceleadership.org