Privacy Policy

The short version: Memento has no accounts. Your answers, plan, sessions, reflections, and feedback are stored on your device. Every session is written for you, and the request that writes it carries the context that makes it yours, including your answers, your feedback, and the last few lines you wrote at the end of a session. It is sent securely to our generation service and a third-party AI provider. Memento does not persist it, response storage is disabled, and the provider may retain limited API data for abuse monitoring under its configured terms. We do not sell personal information, do not use your content to train models, and do not track you across other companies’ apps and websites.

Information stored on your device

Memento stores your onboarding answers, practice preferences, generated sessions, reflections, feedback, progress, reminder choices, and subscription access state locally on your device. Some limited content is also stored in Memento’s App Group container so the Memento widget can work. Memento does not operate an account database for this information, and none of it is uploaded except as part of the generation request described below.

Personalized session generation

When Memento writes a session, it sends the context needed to create it to a server operated for Memento on Vercel. That server forwards the request to OpenAI’s API and returns the generated session to your device. The request contains: your onboarding answers, including anything you typed in your own words; the subjects, settings and titles of recent sessions, so today’s is different; the feedback you gave on recent sessions, including any note you wrote asking for something different; up to three of the most recent lines you wrote at the end of a session; and any subject you asked Memento to steer around. It does not contain your name, email, or contact details, because Memento never asks for them.

Memento does not save the request or the generated content, does not place either in application logs, explicitly disables response storage for these requests, and does not use any of it to train models. The AI provider may retain limited API data for abuse monitoring under its configured terms unless Zero Data Retention applies. Operational logs contain only status, latency, model configuration, tier, and token counts.

Service data we collect

• Purchases: Apple and RevenueCat process subscription transactions and provide anonymous purchase and entitlement status so premium access, restoration, renewals, refunds, and attribution can work.
• Product interaction, optional: if you opt in, Mixpanel receives anonymous screen and feature events, purchase-source tags, counts, and timings. It never receives text you type, reflections, generated stories, or session content. Automatic capture and session recording are disabled.
• Diagnostics, optional: if you opt in, Sentry receives crash and performance diagnostics needed to keep the app reliable. Memento does not intentionally attach your practice text or generated content to reports.
• Apple Search Ads, optional: if you opt in, Memento requests Apple’s AdServices attribution token on supported Apple devices to understand whether an installation came from an Apple Search Ad. This is not used to track you across other companies’ apps or websites.
• Technical protection: our generation endpoint temporarily processes network information such as an IP address to authenticate requests, prevent abuse, and apply a short-lived rate limit. We do not use it to build a profile.

How we use information

We use the limited information above to provide personalized sessions, unlock and restore subscriptions, send reminders you choose, operate the widget, understand feature performance, attribute Apple Search Ads, prevent abuse, diagnose failures, and improve Memento. We do not use your practice text for advertising and do not permit analytics events to include free text.

Sharing and tracking

We share data only with service providers needed to run Memento: Apple, RevenueCat, Vercel, the AI provider identified above, and, when you opt in, Mixpanel and Sentry. We require service providers to process data only for the contracted services, protect it with safeguards appropriate to the data, and delete or return it under the applicable service terms. We do not sell or rent personal information. Memento does not engage in cross-app tracking and does not request Apple’s App Tracking Transparency permission.

Retention and deletion

Your practice data remains on your device until you delete the app or choose Settings → Privacy & data → Erase everything. Erase Data removes answers, sessions, history, and reminders from the device. Subscription transaction records remain with Apple and RevenueCat as required for purchase administration, fraud prevention, accounting, and legal compliance. Limited service-provider diagnostic and analytics data follows each provider’s configured retention period.

Security and international processing

We use encrypted HTTPS connections and restrict server credentials to the generation service. No system is perfectly secure. Our service providers may process information in the United States and other places where they operate.

Children

Memento is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact support so we can investigate.

Your choices and rights

You can turn optional analytics and diagnostics on or off in Settings → Privacy & data, disable reminders in Memento or iOS Settings, erase local data in the app, delete the app, and manage or cancel subscriptions in your Apple Account settings. Core features and purchases do not depend on optional analytics. Depending on where you live, you may also have legal rights concerning personal information held by our service providers. Contact us to make a request.

Changes and contact

We may update this policy as Memento changes. We will update the date above and provide any notice required by law. Memento is operated by Fulminare Holdings LLC. For privacy or support questions, email thomaswilliamwall23@gmail.com.