# Memento — Privacy Policy

_Last updated: April 23, 2026_

## Summary

Memento is designed to run entirely on your iPhone. Nothing you capture — voice memos, photos, typed notes, generated transcripts, tags, entities, or recall answers — is sent to any server, cloud service, or third party. There is no Memento account, no Memento backend, and no analytics SDK.

## What Memento stores, and where

All of your data lives inside the app's iOS sandbox on your device:

- **Text, transcripts, tags, entities, recall answers** — stored in a local SQLite database (via Apple's SwiftData) under the app's `Documents/` directory.
- **Voice recordings** — saved as AAC `.m4a` files in `Documents/memories/`.
- **Photos and thumbnails** — saved as JPEG files in `Documents/memories/`.
- **Profile photo** (optional) — saved as `Documents/avatar.jpg`.
- **Scheduled reminders** — registered with iOS via `UNUserNotificationCenter` and delivered locally on your device.

If you have **iCloud Backup** enabled in iOS Settings, your device backup — including Memento's sandbox — is encrypted and stored by Apple under Apple's iCloud terms. To exclude Memento from iCloud Backup, use iOS Settings → [Your Apple Account] → iCloud → Manage Account Storage → Backups → This iPhone → turn off Memento.

Memento itself performs no network sync, upload, or transmission of your data.

## How Memento uses your data

- To render your captured memories on the timeline and in search.
- To transcribe voice memos into text using Apple's on-device `SFSpeechRecognizer`.
- To extract text (OCR) and scene labels from photos using Apple's on-device `Vision` framework.
- To generate tags, entities, intent classification, reminder times, and recall answers using Apple's on-device **Foundation Models** framework (Apple Intelligence).
- To compute semantic embeddings using Apple's on-device `NaturalLanguage` framework.

Every item above runs on your device. None of it sends your data off the phone.

## What Memento does NOT do

- No network calls to any server (Memento has no backend).
- No third-party SDKs (no analytics, no crash reporters, no ad networks, no tracking).
- No advertising identifiers, no fingerprinting, no tracking pixels.
- No user accounts, no sign-in, no login.
- No cross-device sync — memories live on the one device that saved them.

## Permissions Memento asks for

Each iOS permission is used only for the feature named and never for data transmission:

- **Microphone** — to record voice memos on the device.
- **Speech Recognition** — to transcribe recordings (on-device only).
- **Camera** — to photograph memories.
- **Photos** — to let you pick images from your library.
- **Notifications** — to deliver reminders you've set.

You can revoke any of these at any time in iOS Settings → Memento. The app continues to work with reduced capability; for example, denying Microphone disables voice capture but keeps photo and text capture fully functional.

## Children

Memento does not knowingly collect data from anyone under 13. The app is not marketed to children. Because no data leaves the device, there is no data collection to worry about in any user age group.

## Changes to this policy

If we change this policy, the `Last updated` date at the top will reflect that. For any change that would cause data to leave your device (none today), we will surface an in-app notice before the change takes effect and require your confirmation.

## Contact

Questions, concerns, or data-rights requests:
**liyc.stjude@gmail.com**