Privacy Policy
memoir is a private journaling app developed and operated by Mohammad Elzahaby ("memoir", "we", "us", or "our"). This Privacy Policy explains how memoir handles information when you use the app, app extensions, website, and support pages.
Short version: memoir is designed to keep your journal data on your device and, if you choose to enable iCloud Sync, in your personal iCloud account. The app does not use advertising SDKs, analytics tools or tracking technologies. We do not sell personal data. Website statistics are described below.
1. Data controller and contact
The data controller for memoir is Mohammad Elzahaby, Vienna, Austria. You can contact us at contact@memoiri.app.
2. Information you create in the app
Depending on how you use memoir, the app may store the following information on your device:
- journal titles, descriptions, entries, dates, and writing content;
- moods, prompts, streaks, tags, people, themes, reflection summaries, and search/indexing data generated from your entries;
- photos or images you attach to entries;
- text recognized from attached images using Apple's Vision framework;
- audio recordings and optional transcriptions;
- optional location information saved with entries, such as coordinates and place names;
- app preferences such as font, appearance, haptics, prompt reminders, iCloud Sync, Spotlight indexing, and passcode settings;
- backup files that you export or import.
This information is used to provide the journaling features you choose to use. We do not operate a server that receives or stores your journal entries, photos, audio recordings, transcriptions, locations, or backups.
3. Local storage
By default, memoir stores your journal data locally on your device. If you delete the app or clear app data, locally stored data may be deleted unless you have a backup or iCloud Sync copy.
4. iCloud Sync
If you enable iCloud Sync through memoir+, your journal data may be stored in your personal iCloud account using Apple's CloudKit/iCloud services and synced across your Apple devices. We do not have direct access to your personal iCloud account or your private iCloud journal database.
Apple processes iCloud data according to Apple's own terms and privacy policy. You can manage iCloud settings through your Apple device settings.
5. Photos, camera, microphone, speech, and image text recognition
If you grant permission, memoir can use the camera or photo library to attach images to entries. Attached images are stored as part of your memoir library.
If you grant microphone permission, memoir can record voice notes. If you grant speech recognition permission, memoir can transcribe audio. The app is designed to use Apple speech technologies and on-device recognition where available. Apple system services may be involved in providing speech features depending on your device, language, operating system, and Apple settings.
Image text recognition is performed with Apple's Vision framework on your device.
6. Location
If you grant location permission, memoir can attach your current location to entries and use Apple location and reverse-geocoding services to show a place name. Location is only used for app features you choose to use and is stored with your journal data when saved to an entry.
You can disable location access in iOS settings.
7. Notifications, Spotlight, and device authentication
If you enable prompt reminders, memoir schedules local notifications on your device. Notification settings are handled by iOS.
If Spotlight indexing is enabled, memoir may add searchable entry information to the device's local Spotlight index so you can find entries from iPhone Search. You can disable this in memoir settings.
If you set an app passcode, memoir stores a salted hash of the passcode in the device Keychain. If you enable Face ID, Touch ID, or device passcode unlock, authentication is handled by Apple's LocalAuthentication system. memoir does not receive or store your biometric data.
8. Subscriptions and purchases
memoir+ subscriptions and related purchases are processed by Apple through StoreKit and the App Store. memoir receives information needed to determine whether memoir+ is active, such as product identifiers and transaction entitlement status. We do not receive your full payment card details.
You can manage or cancel subscriptions through your App Store account settings.
9. App Store lookup and external links
memoir may contact Apple's public App Store lookup service to check whether a newer app version is available or to open the App Store review page. This request is made to Apple and may include the app's bundle identifier, but it does not send your journal content to memoir.
The app and website may link to Apple services, email, or other external pages. Those services are governed by their own privacy policies.
10. Website privacy
The homepage and download page can select an available translation using your browser’s language settings. If you choose a language from the menu, the website saves only that language code in your browser’s local storage so it can remember your choice. This preference is not sent to our statistics system and contains no journal content or visitor identifier. You can change it in the language menu or remove it by clearing this website’s browser data.
The website records daily aggregate counts of requests that reach its PHP server, including requested public pages, download-page visits, requests to continue to the App Store, broad referring-source and device categories, preferred browser-language categories, apparent entry pages and aggregate transitions between recognized public pages, missing pages and server processing time. We exclude recognized automated traffic, unrecognized clients and speculative browser loads from new statistics. This filtering is approximate; older aggregate counts remain subject to the same retention period. These statistics help us understand website use and performance. We retain them for 180 days and do not use advertising cookies, tracking pixels or cross-site tracking.
Page transitions use same-site referrers stripped to recognized public page paths. They do not identify people or reconstruct individual browsing sessions. Browser language is not used to infer country, and country data is not collected. Missing referrers and cached pages limit these counts.
The website host or infrastructure provider may process technical server logs, such as IP address, browser information, request URL, and timestamp, for security, troubleshooting, and delivery of the website. We do not use those logs to profile you or track you across websites.
When you continue from the download page to the App Store, we count the request and, when available, the known public page on this website that led to Download, the coarse device category and the primary browser-language code. We retain only daily aggregate totals. We do not identify you, measure installs or attribute a desktop QR scan to the earlier desktop visit. You can also use the direct App Store link.
Our aggregate statistics do not store visitor identifiers, IP addresses, raw browser strings, full referring URLs, URL query strings or form contents. Text, drawings and photos entered into browser tools are not collected by these statistics. We do not measure individual visitors or connect requests into visitor histories.
The private admin area uses an essential session cookie and short-lived email sign-in codes. Admin access is limited to our fixed contact address. Authentication records and statistics are stored outside the public website files.
11. Data sharing
We do not sell your personal data. We do not share your journal content with advertisers or analytics providers.
Data may be processed by Apple or your device operating system when you use Apple-provided features such as iCloud, StoreKit, notifications, location, speech recognition, Vision, Spotlight, App Store review, or device authentication. We may also disclose information if required by law or to protect our rights, users, or the Service.
12. Data retention and deletion
Journal data remains on your device, in your backups, or in your personal iCloud account until you delete it, disable sync, remove backups, clear data, or delete the app. You can delete entries, attachments, journals, backups, or app data from within memoir or through device/iCloud settings where applicable.
Because we do not operate a server that stores your journal content, we generally cannot access, export, or delete journal content for you.
13. Your rights
Depending on where you live, including if you are in the European Economic Area, you may have rights to access, correct, delete, restrict, object to processing of, or receive a copy of your personal data. You may also have the right to lodge a complaint with a data protection authority.
Most memoir data is stored on your device or in your personal iCloud account, so you can exercise many of these rights directly by viewing, editing, exporting, or deleting data in the app or device settings. You can also contact us at contact@memoiri.app.
14. Children
memoir is not directed to children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us.
15. Security
We design memoir to keep journal data private by storing it locally and, if enabled, through Apple's iCloud services. We use platform security features such as the iOS sandbox, Keychain, and device authentication. No method of storage or transmission is completely secure, so you should protect your device, Apple Account, backups, and passcode.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. If changes are significant, we may provide additional notice in the app or on the website.
17. Contact
If you have questions about this Privacy Policy, contact us at contact@memoiri.app.