Privacy Policy

1. Our Foundational Privacy Promise

Memo is built from the ground up on local-first, zero-knowledge principles. Traditional apps upload user data to remote cloud servers. Memo does not. Your voice recordings, transcriptions, patterns, and profiles are encrypted directly in your browser using the standard Web Crypto API (AES-GCM 256-bit) and stored exclusively in your local IndexedDB.

2. Data Storage & Encryption

When you set up a password or pattern lock, Memo derives an AES-GCM 256-bit cryptographic key via PBKDF2 using your input and a device-generated salt.

• All voice notes and transcripts are encrypted before being written to IndexedDB.
• Your encryption key lives only in volatile browser memory while unlocked.
• When you lock Memo or close the tab, your key is immediately cleared from memory.
• We never receive, transmit, or hold your master key or unencrypted entries.

3. AI Transcription & Reflections (Optional)

Memo offers optional speech-to-text transcription and reflective insights powered by Google Gemini.

• Audio is only sent to AI endpoints if you explicitly trigger transcription.
• Audio data sent for transcription is processed ephemerally and is not retained for training.

4. Analytics & Cookies

Memo does not use tracking cookies, advertising identifiers, or invasive profiling. Anonymous performance metrics may be collected solely to detect runtime crashes or optimize load performance via Vercel Speed Insights.

5. Your Data Control & Backups

Because your diary is stored on your device, you are in total control of your data. You can export a password-encrypted backup file at any time from the settings menu, or completely wipe all local data with a single click.