Privacy Policy

Last updated 11 October 2026

Memlore is a private journal. This page explains what the app and this website do with information — and what they never do.

Who we are

Memlore is made by Anh-Thi Dinh. It is an open-source journal app. Questions: contact@memlore.app.

What we do not collect

There is no Memlore server and no Memlore account. The app does not watch you.

  • No telemetry
  • No analytics
  • No advertising
  • No tracking pixels

Your journal on your device

Your journal lives on your device, in an encrypted local database. We cannot read it.

Optional cloud sync

Sync stays off until you turn it on. You pick one place — your Google Drive or your iCloud Drive. There is no Memlore server in between.

Entries, media, and settings are encrypted on your device before they are uploaded. A small sync list and device registry — IDs, timestamps, deletion flags, and your device name, not journal text — are stored as JSON so your other devices know what to pull.

Optional Google Drive sync

If you choose Google Drive, you connect your own Google account. Memlore asks only for the drive.appdata scope. Synced files sit in Google Drive’s hidden Application Data folder — not visible on drive.google.com — and Memlore cannot read your other Drive files.

The refresh token, your Google account email, and your Drive storage quota stay only in the encrypted database on this device, so the app can show which account is connected. They stay until you disconnect, then they are deleted from the local database. The access token stays in memory, is never written to disk, and is gone when the app closes.

Disconnecting in the app does not delete the files already in your hidden Application Data folder. To remove that Google-side copy, open Google Drive → Settings → Manage apps → Memlore → Disconnect from Drive.

Google user data is used only to run the Drive sync you turned on. No human at Memlore reads your Google user data. There is no Memlore server for it to reach. Memlore does not:

  • Sell it, or transfer it to data brokers or information resellers
  • Use it for advertising, including targeted, personalized, or interest-based ads
  • Use it to develop, improve, or train generalized or non-personalized AI or ML models
  • Use it for credit-worthiness, lending, or any other determination unrelated to the app's features
  • Transfer it to third parties, except as needed to operate Drive sync inside your own Google account, or where required by law

Memlore's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Optional iCloud Drive

If you choose iCloud Drive (on a Mac), Memlore writes to a Memlore folder in your iCloud Drive — the same iCloud Drive you already see in Finder.

Memlore does not sign in to Apple for you and does not store an Apple password or iCloud token. It uses the iCloud Drive session already on this Mac.

The same encrypted payloads and JSON sync list described above go into that folder. Apple does not receive your journal in the clear. Apple’s iCloud terms apply.

You can disconnect in the app. Disconnecting does not delete the Memlore folder in iCloud Drive. Remove that folder yourself if you want the cloud copy gone.

Optional AI

AI stays off until you opt in and accept a privacy notice. You choose the provider — local or on-device, or a hosted one.

If you pick a hosted provider, the text you send it goes to that provider. Memlore does not run those services and does not see that traffic.

Optional maps, places, and speech

Maps, geocoding, and speech-to-text run only if you turn them on. They talk to the provider you choose — for example Nominatim/OpenStreetMap, Mapbox, MapTiler, Apple MapKit, or your speech-to-text provider.

App updates

The app may request GitHub release metadata so it can tell you when an update is available. That check is not telemetry.

Memlore Web (web.memlore.app)

Memlore Web is an optional browser companion that lets you read your existing Memlore journal from a web browser and make edits that your desktop app imports.

  • What is stored locally in the browser: Memlore Web stores only an encrypted cache in your browser's IndexedDB. The master encryption keys are kept in WebAssembly memory and are wiped as soon as you lock the vault or close the tab. So that refreshing the page does not ask for your password again, the open tab also keeps a sealed copy of the master key, together with the one-time key that opens it, in that tab's session storage. The app uses it only to reload that tab, until you lock or the auto-lock time passes; locking deletes it. The browser may keep a tab's session storage on disk after the tab closes (for tab restore), and the time limit is enforced by the app, not by the encryption, so anyone who copies the browser profile before you lock could open the journal. Lock the vault before you leave a shared computer. Your journal entries are stored on disk only as AES-256-GCM encrypted ciphertexts; unencrypted text is never stored in browser storage.
  • The Cloudflare Worker: An ephemeral Cloudflare Worker at `web.memlore.app/api/*` handles the OAuth 2.0 PKCE token exchange with Google so client secrets stay protected. The Worker never sees, parses, or logs your master recovery phrase, encryption keys, or journal content, and maintains no persistent database or access logs of tokens.
  • Hosting infrastructure: Memlore Web is hosted on Cloudflare Pages. Like any web server, Cloudflare processes standard HTTP request headers and IP addresses strictly for DDoS mitigation and content delivery.
  • Google Drive scope: Memlore Web connects exclusively to Google Drive's limited `drive.appdata` scope (hidden application data). It cannot view, read, or modify any of your personal Google Drive documents, photos, or spreadsheets.
  • Map tiles (optional, off by default): The web map page first lists your places without contacting any map provider. Only after you turn on map tiles with your own MapTiler API key does your browser load tiles from MapTiler, which then receives the map area you view and your IP address. Your API key is stored encrypted in this browser. You can stop using map tiles at any time.
  • No analytics: Memlore Web contains no analytics trackers, advertising scripts, tracking cookies, or behavioral telemetry.
  • How to delete everything: You can remove all web traces at any time:

1. In your browser's settings, clear the site data for web.memlore.app. This deletes everything Memlore Web stored in that browser (the encrypted cache, unsent edits and the password-wrapped key). The Clear cache button in Memlore Web settings removes cached photos and videos only. 2. In the Memlore desktop app, open Settings → Security → Security actions → Connected devices and remove the web device. 3. Revoke Google Drive access at myaccount.google.com/permissions.

This website

This marketing website does not set analytics cookies and does not collect journal data. The interactive demo uses sample data only.

The Download button is the one exception, and it is worth being precise about. It goes through dl.memlore.app, which counts the download and then sends you on to the file on GitHub. What gets recorded is the time, the app version, and the country Cloudflare infers from the connection. No IP address is stored and no cookie is set. It happens when you download the app, never while you use it — the app itself still sends nothing, ever.

Changes

This policy may change. The date at the top of the page shows when it was last updated.

How to reach us

Privacy questions: contact@memlore.app.