Memora
Privacy Policy
- Your notes, timeline and recordings live in an encrypted database on your phone.
- When you ask Memora to sort a note, read a handwritten page or answer a question, that text or photo is sent to our servers and to OpenAI to do it, and is not stored there.
- If you sign in, your promises and workspaces are backed up to your account so they survive a new phone.
- No ads, no selling data, no analytics or tracking SDKs, no recording in the background.
- You can delete single entries, everything on the phone, or your whole account, from the app or from the web.
1. Who we are
Memora is made by Sathish (“we”, “us”), who decides how the data described here is used. Questions and requests go to smewritingagency@gmail.com.
2. What stays on your phone
Everything you capture is saved first on your phone, in a database encrypted with SQLCipher. Its key is random and protected by the Android Keystore. This includes:
- notes you type, the text of what you say, and the text read from handwritten photos;
- your timeline entries, promises, reminders and workspaces;
- voice recordings, but only if you choose to keep them under Settings → Audio retention. By default they are not kept.
- notes typed into the home-screen quick-note bar, which wait in a separately encrypted inbox until Memora files them;
- the hours of the day you tend to open Memora, counted on the phone so reminders for “some time that day” land when you are likely to see them.
Photos of handwritten notes are never saved. The photo is shrunk, has its location and other metadata removed, is sent once to be read, and its temporary copy is deleted.
Android backup and device-to-device transfer are turned off for Memora, so this data is not copied into your Google backup.
Speech recognition
Memora turns speech into text with your phone's own speech recogniser, on the device where Android supports it. On phones without on-device recognition, the recogniser your phone provides (usually Google's) may process the audio under its own privacy policy. Memora itself does not upload your voice.
3. What is sent, and why
Memora sends data off the phone only for the features below, and only when you use them.
| When you… | What is sent | Why |
|---|---|---|
| sort a note (spoken, typed or from the quick-note bar) | The note's text; today's date, the time and your time zone; the names of your workspaces | To pick out timeline entries and promises and to work out dates like “next Friday” |
| snap or pick a handwritten page | The photo (resized, metadata removed), plus the context above | To read the handwriting and then sort it like a note |
| ask your timeline a question | Your question and the entries Memora selects to answer it | To write the answer |
| sign in with Google | What Google shares at sign-in: an account ID, email address, name and profile-photo link | To create your account, keep your AI allowance and back up your promises |
| subscribe | The purchase token Google Play gives the app, and a one-way hash of your account ID | To confirm the purchase with Google Play and apply it to your account only |
Requests go to our Cloud Functions on Google Cloud, which pass the content to OpenAI's API and return the result. We ask OpenAI not to store it (store: false). Under OpenAI's API terms, API data is not used to train its models. OpenAI may keep it for up to 30 days to detect abuse, and then deletes it. Our functions do not store the content or write it to logs.
To stop anyone from abusing the service, the app also sends integrity tokens (Firebase App Check with Google Play Integrity) and a Firebase installation ID. These describe the app and device, not you.
4. Your account and backup
If you sign in, we store the following in Google Cloud Firestore under your account:
- your plan (Free, Gold or Diamond), when it renews or ends, and how many AI uses you have made each month;
- your promises: what was promised, to whom, when it is due, its status, its workspace, and the title and date of the note it came from;
- your workspaces, and two settings: audio retention and whether promise text shows on the lockscreen;
- a record tying each Play purchase (by a hash of its token) to your account;
- any AI answer you report from the Ask screen, with the question you asked, so we can review it. Your notes are not included.
Timeline entries, transcripts, recordings, photos and the exact words a promise was quoted from are not backed up. They stay on the phone. When you delete a promise or workspace, only a marker saying it was deleted stays in your account, so other phones remove it too. The words themselves are removed.
5. Who processes it
| Provider | What for | Where |
|---|---|---|
| Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Secret Manager, App Check) | Sign-in, account and backup storage, running Memora's server code | United States (us-central1) |
| Google Play (Billing, Play Integrity) | Payments and subscriptions, and checking the app is genuine | Google's global infrastructure |
| OpenAI | Sorting notes, reading handwriting and answering questions | United States |
These providers act on our instructions and may use the data only to provide their service to us. Your data may therefore be processed outside your country, including in the United States. Where the law requires it, we rely on the providers' standard contractual safeguards for these transfers.
We do not handle your payment details. Google Play takes the payment, and its own privacy policy applies to it.
6. What we never do
- Sell or rent your personal data, or share it for advertising.
- Show ads, or include advertising, analytics or crash-tracking SDKs.
- Record in the background. The microphone is used only while the screen shows that Memora is listening.
- Use your notes to train AI models.
- Read your notes ourselves. The only exception is when you send them to us for support, or when the law compels us.
7. How long we keep it
- On the phone: until you delete it, delete everything, or uninstall the app. Voice recordings are kept only for the period you choose.
- Content sent for AI: not stored by us. OpenAI may keep it for up to 30 days, as described above.
- Reported answers: kept for review until you delete your account, or sooner if you ask us to delete them.
- Account and backup: until you delete your account. Monthly usage counts are kept with your account so your allowance can be enforced.
- Server logs: Contain your account ID, your plan, and the type of any error, never your content. Kept for up to 30 days.
- Purchase records: deleted with your account. Google Play keeps its own records of your payments.
8. Security
Data on the phone is encrypted (SQLCipher, with Keystore-protected keys). Everything sent to our servers and to OpenAI travels over TLS. Each signed-in user can reach only their own records, and our security rules check every write. The OpenAI key is kept in Google Secret Manager and never ships in the app. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.
9. Your lockscreen
Out of the box, Memora keeps promise text off the lockscreen. You can choose to show it: in reminders, in the “Today” card, or drawn onto your lockscreen wallpaper. If you do, anyone who picks up your locked phone can read it. The lockscreen wallpaper is an image Android stores. If you pick a photo to go behind it, Memora keeps one resized copy of that photo in its private storage on your phone, with its location data removed; it is never uploaded. Turning the option off removes the wallpaper, and Delete everything removes the wallpaper and the photo.
10. Permissions
| Permission | Used for |
|---|---|
| Microphone | Voice notes, only while you are recording |
| Notifications | Reminders and the optional Today card |
| Alarms & reminders | Reminders at the exact minute you set |
| Full-screen notifications | Showing a due reminder over the lockscreen |
| Set wallpaper | The optional lockscreen timeline |
| Run at startup | Re-arming reminders after the phone restarts |
| Internet | AI features, sign-in, backup and subscriptions |
Memora does not ask for camera, storage, contacts or location permissions. Photos come through Android's own camera app and photo picker, which share only the one photo you choose.
11. Your choices and rights
- Delete an entry or promise: from the app, one at a time.
- Delete everything on the phone: Settings → Delete everything.
- Delete your account: Settings → Account → Delete account removes your account, backup, usage and purchase records, and your sign-in. You can also ask on the web. Deleting your account does not cancel a Google Play subscription; cancel that in Google Play.
- Stay local: you can capture and keep notes on the phone without signing in. Only the AI features and backup need an account.
Depending on where you live, you may also have the right to access, correct, export or erase your personal data, to object to or restrict its processing, to withdraw consent, and to complain to a data protection authority. This includes rights under the EU/UK GDPR, India's Digital Personal Data Protection Act 2023 and US state privacy laws. To use any of these rights, write to smewritingagency@gmail.com. We will reply within 30 days. We process your data to provide the service you asked for (contract), with your consent where the law requires it (for example, for AI processing and optional features), and for our legitimate interest in keeping the service secure.
Grievance contact (India): Sathish, smewritingagency@gmail.com.
12. Children
Memora is not directed at children and is meant for people aged 18 or over. We do not knowingly collect children's personal data. If you believe a child has used Memora, contact us and we will delete their data.
13. Changes to this policy
If this policy changes, we will update the date at the top. If the change is significant, we will tell you in the app before it takes effect.
14. Contact
Sathish · Chennai, Tamil Nadu, India · smewritingagency@gmail.com