How privacy works

Privacy Your device Journal Cloud storage AI provider Map tiles Memlore Privacy Your device Journal Cloud storage AI provider Map tiles Memlore

What stays on this device

  • Entries sit in an encrypted database that Memlore cannot open.
  • There is no Memlore account.
  • Writing, search, locks, and the editor work offline.
  • The app has no telemetry, analytics, advertising, or tracking.

What leaves only when you turn it on

  • Sync: encrypted copies plus a readable sync list go to your Google Drive, or iCloud Drive on a Mac.
  • The sync list holds IDs, times, deletion flags, and your device name, not journal text.
  • Drive access is limited to a hidden app folder; iCloud needs no Apple password.
  • Maps and weather: a place search, map pictures, or a location and date. Never your entry text.
  • Fonts: a font file, if you download a Google font.

AI

  • Text you choose to send goes to the hosted provider you pick.
  • A helper on another computer on your network gets your journal text, with no privacy notice.
  • An on-device model runs on this computer, and its download does not include your journal.
  • Memlore does not run a hosted service and cannot see that traffic.

On the web

The Web companion operates under the exact same zero-knowledge, zero-telemetry rules. It talks directly to Google Drive over HTTPS, with no Memlore intermediate server. The Cloudflare Worker handles OAuth token exchange only, never sees your encryption keys or journal data, and keeps no logs.

Update check

  • Opening the app sends a version check to GitHub, not your journal.
  • It is the only path on by default, and you can turn it off.