This is the authoritative version of Memoir's Privacy Policy. The same text is shipped inside the app, accessible from Settings → Legal → Privacy Policy.
Nothing leaves your device by default. Every interview, every chapter draft, every spine answer, your name, your interview-style preference, and your reminder time are stored only on your device using Apple's SwiftData and Keychain frameworks. We run no analytics, no crash reporting, no advertising SDKs, and no marketing SDKs.
If you turn on iCloud sync inside Settings, your sessions are encrypted in transit and at rest by Apple and stored in your private CloudKit container. We never receive a copy. Apple's iCloud privacy disclosures apply.
Monthly interview drafts are encrypted with a per-device AES-GCM key generated by Apple's CryptoKit and stored in the iOS Keychain (kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly). The key never leaves your device, never enters iCloud, and is unrecoverable if you delete the app. Chapter drafts cannot be read inside the app until December 31 of the current memoir year — this is by design.
When you tap the microphone during an interview, we use Apple's on-device Speech framework to transcribe your voice. Audio and transcripts never leave your device. The interview engine that asks the next question runs entirely on-device with a deterministic algorithm — no LLM call, no network round-trip.
If you order the optional printed hardcover ($79), only the rendered PDF, your shipping address, and your payment are transmitted to our print partner (Lulu) under their privacy terms. We retain only the order ID locally so we can show you status.
Memoir is rated 4+ but designed for adult memoir-writing. We do not knowingly collect any data from children under 13.
Email: jasperabundant@gmail.com
Developer: Zhang Jiahao
We will publish any changes to this policy at this URL and update the effective date. Material changes will be surfaced inside the app on next launch.