1. Summary
Memora is developed by Haoxian Yan. It keeps your memos, finances and plans on your own device. It has no account system, no ads, no analytics and no cloud service operated by me. I cannot see your notebook and have no mechanism to retrieve it.
Data leaves your device only in specific, documented cases: sync, if you connect a server you choose; AI features, if you add your own key for a provider you choose; on-device recognition features that use Google ML Kit, whose SDK sends diagnostic data to Google; Android's own backup, if you have it turned on; and copies you choose to share or export. Each case is described below.
2. Data I collect
I, the developer, do not receive any of your data. I do not collect your entries, images, files, usage analytics, crash reports, advertising ID or contact details. If you email me, I receive only what you choose to send.
3. Data stored on your device
- Your notebook. Memos, finance records, planner entries and settings live in Memora's app-private storage. On Android they are kept in a database encrypted with SQLCipher; its key is held in Android's Keystore-backed storage and never leaves the phone. Images and files you attach are stored in the same private storage as ordinary files and are not encrypted.
- Vault. Secure notes and AI keys in the Vault are encrypted with AES-256-GCM under your vault password (on a phone, your fingerprint can unlock it too). A working copy of your AI keys stays inside the encrypted app database, so AI features work while the Vault is locked.
- Auto-organize results. Auto-organize (on by default; you can turn it off) stores, for each image, object and scene labels, the number of faces and of QR codes or barcodes, and an image embedding used to find similar images. It never identifies who a person is and creates no face templates. These results are never synced or backed up, and nothing is applied to an entry until you tap a suggestion.
- Reminders. Planner reminders are scheduled as notifications on the device itself.
- App lock. Locking a page or Safe entries uses Android's fingerprint, face or screen-lock prompt. Memora never sees or stores your biometric data or PIN.
4. Device permissions
- Internet and network state: for sync with the server you connect, AI requests to the provider you choose, and downloads of on-device recognition models and translation language packs.
- Notifications and run at startup: to show planner reminders, and to schedule them again after the phone restarts.
- Biometric: to show Android's authentication prompt for App lock and the Vault.
Memora does not request camera, photos, location, contacts or microphone permissions. You pick images with Android's photo picker, and taking a photo opens your camera app. Scanning a code or a document uses Google's scanner from Google Play services, which handles the camera itself; Memora receives only the result. Files you share into Memora from another app open as a new memo.
5. When data leaves your device
5.1 Sync (optional)
Sync is off until you connect a server. Memora then copies your data only to the server address you enter, such as a server you host yourself or the one built into the Memora desktop app, protected by a sync password you set. Vault items travel only as ciphertext. The server stores your data on the machine it runs on; I do not host, monitor or receive anything from it.
The Android app allows plain http:// connections, because most people self-host on
a home network without a TLS certificate. Over plain HTTP, anyone able to observe your
network can read the traffic between the app and your server. On a network you do not
trust, use HTTPS or a VPN. If you make your server reachable from the internet, securing it is
up to you.
5.2 AI features (bring your own key)
Memora has no AI service of its own and includes no AI key. Photo analysis and AI chats are off until you add your own API key in the Vault, for OpenAI, Google Gemini, DeepSeek, Anthropic Claude or another compatible service you enter, or use the AI configured on your own sync server. Then the text and images you send, and the records an AI contact is allowed to read, go to that provider under its own privacy policy and terms. I am not an intermediary and never receive a copy. Nothing an AI suggests is saved until you tap it.
5.3 On-device recognition — Google ML Kit
These Android features analyze your images on your device; your images are never uploaded for analysis:
- Text recognition (OCR), which makes text inside images searchable.
- Auto-organize: image labeling, face detection (counting faces, not recognizing people), code detection and an image-embedding model run by Google Play services, as described in section 3.
- Image tools: barcode and QR code reading, Remove background (subject segmentation), Privacy blur (face and text detection), Scan document, language identification and translation. Translated text is not sent anywhere. A tool's result is saved only when you choose to save it.
- Scanners: Google's code scanner and document scanner from Google Play services.
Google Play services downloads and updates the recognition models, and translation language packs are downloaded from Google once per language. As documented by Google, the ML Kit SDK sends Google the following, over HTTPS, for diagnostics and usage analytics: device and app information (such as device model, OS and app version), a per-installation identifier that is not unique to you across apps, performance metrics, API configuration, feature input/output size, feature version, event type and error codes. Google states it does not transfer this data to third parties. It is handled under Google's Privacy Policy.
5.4 Android system backup and device transfer
The app allows Android backup. If you enable Android backup or device transfer, Android may copy Memora's app-private data to your Google account or new device. The database key is never included, so the entries in that copy open on another phone only with the recovery password you set in Backup & Data. Images and files are copied as they are. I do not turn this on and do not operate the destination. You can turn it off in your device settings.
5.5 Actions you take
Data leaves the app whenever you deliberately share, copy or export it. Backups you export from the app are encrypted (AES-256-GCM) with a password you choose; Memora does not keep it and cannot recover a forgotten password. While Memora is connected to your sync server, Export instead downloads your server's backup as an unencrypted ZIP. When you share an image, Memora may offer to blur faces or text first. Where shared or exported data goes next is decided by you and the app or destination you choose.
6. Retention and deletion
Your notebook stays on your device until you delete it. Deleted entries go to the Recycle Bin and are permanently removed after 30 days. Uninstalling Memora, or clearing its storage in Android settings, deletes everything stored by the app. Copies on your sync server, and backups or files you exported or shared, are outside the app and are not deleted with it. Auto-organize results can be cleared at any time. Diagnostic data collected by ML Kit, and anything you sent to an AI provider, is retained and deleted by Google or that provider under its own policies; I do not hold it and cannot access or delete it.
7. Third-party services
Google ML Kit and Google Play services, as described in section 5.3, and the AI provider you choose, only after you add a key. There are no analytics SDKs, crash reporters, social logins, ad networks or in-app purchases.
8. Children
Memora is not directed at children under 13 and does not knowingly collect personal information from children.
9. Changes to this policy
If the app's handling of your data changes, this policy will be updated along with it, and the date at the top will change.
10. Contact
Haoxian Yan — laplacengan@gmail.com