Privacy Policy

Last updated: 2026-11-05

Who we are and how to contact us

MemoMori is run by Takumi Ito, an individual based in Japan. For privacy questions or to exercise your rights over your data, email hello@memomori.app.

What we collect

  • Account details from Google or GitHub when you sign in: your name, email address, profile picture and account ID. We have no passwords.
  • Your content: notes, drawings, uploaded files, their version history, and a search index we build from your notes.
  • Sign-in sessions: IP address, device and browser type, sign-in time and last activity. Settings shows this list so you can spot a sign-in you don't know. When you open the list, we look up a rough location from each IP address on our own servers. We don't store that location.
  • An activity log of changes in your workspaces, such as creating, moving or deleting a file, with the time, your name and IP address.
  • API keys and connected apps: each key's name, scopes and last use, and for each app you connect (such as an MCP client) its name, address and when you approved it. We store keys and tokens only as hashes.
  • Billing details from Stripe: customer and subscription IDs, plan, status and renewal date. Stripe handles your card, and we never see its number.
  • Your settings, and the web addresses you ask the web clipper to save.

How we use information

We use it to run MemoMori: to store, sync, search and show your content, keep your account secure, find and fix errors, bill you, prevent repeat free trials, and answer you when you contact us. We don't show ads, sell your data, or train AI models on your content. We don't read your content unless you ask us to for support or the law requires it.

If you live in the EEA or UK, we rely on these legal bases: our contract with you to provide the service; our legitimate interest in keeping it secure and reliable, and stopping abuse; and legal duties such as tax and accounting records.

Who receives information

  • Google Cloud hosts this website, the app, database, files and logs. Its request logs record your IP address, browser type and the full web address of each request, which can include file paths and search terms.
  • Stripe and Sold through Link, LLC, a Stripe company, handle payments. We send them your name, email address and user ID.
  • Sentry receives our error reports, timings and server logs, so we can find and fix problems. These hold error messages, the place in our code where an error happened, which kind of request it was (such as "read a file"), and internal IDs. We don't send your notes, file names, web addresses, IP address, name or email, though an error message may now and then quote the input that caused it.
  • Google and GitHub handle sign-in, and see that you signed in to MemoMori.
  • Your browser fetches some assets from third parties, which see your IP address: emoji data from jsDelivr, drawing assets from esm.sh, and any images, videos or pages you embed in a note.
  • Namecheap forwards email you send us to our Gmail inbox, so Namecheap and Google handle those messages.

When you use the web clipper, our server fetches the page you choose, so that site sees our server, not you. We share data with others only when the law requires it, or to protect our users or the service.

Cookies, local storage and tracking

We use three cookies, all needed to run the service: one keeps you signed in for up to 30 days, and two last 10 minutes to guard sign-in and app approval. Your browser also stores your theme, view preferences and unsaved drafts, so you don't lose work. We use no analytics, ads or tracking cookies, and set no third-party cookies. A page you embed in a note may set its own cookies.

Where we process information

We run MemoMori from Japan, and store your data with Google Cloud in the United States (Iowa). Google Cloud may store request logs outside Iowa. Sentry stores error reports in the United States. Stripe, Google, GitHub and Namecheap may process data in the United States and other countries.

Japan's Act on the Protection of Personal Information (APPI) covers the data we send to companies in the United States. We rely on each of them taking measures that meet APPI's standards (Article 28(1)), not on your consent.

  • Who: Google (Google Cloud, and Gmail for email you send us), Stripe and Sold through Link, LLC (payments), Sentry (error reports) and Namecheap (email forwarding).
  • Their measures: each has agreed in its data processing terms to use the data only to serve us, keep it confidential and secure, bind its staff and subprocessors to the same duties, tell us of a breach, and delete or return the data when our contract ends. Independent auditors check their security, for example against SOC 2 or ISO/IEC 27001.
  • How we check: we review each company's terms and audit reports before we use it, then once a year and whenever its terms change. If a company stops meeting these measures and can't fix it, we stop sending it data.
  • The US system: the United States has no general privacy law like APPI. The Federal Trade Commission acts against unfair or deceptive data practices, federal laws cover some fields such as health and finance, and some states, such as California, have their own privacy laws. US law lets the government compel a company to hand over data for law enforcement or national security, including data about people outside the United States.

Email hello@memomori.app and we will send you more detail on these measures, as APPI Article 28(3) provides.

How we protect information

All traffic uses HTTPS. Google Cloud encrypts data at rest, and our database accepts only encrypted connections. We store session tokens, API keys and app tokens as hashes, so a leak of the database would not reveal them. We limit how fast anyone can sign in or call the API. Only the operator can reach production systems. No system is perfect, so if we learn of a breach that affects you, we will tell you.

Retention and deletion

You can delete your account in Settings. It turns read-only at once, and for 30 days you can still sign in, download your data and cancel the deletion. After 30 days, our background job permanently removes your account and the workspaces you own, and deletes your Stripe customer record. To prevent repeat free trials, we keep a normalized form of your email and your original trial expiry for as long as we run MemoMori. Deleting your account does not delete a data export's archive early: it stays in storage until it expires, up to 14 days later.

While your account is open:

  • Files in the trash stay until you delete them.
  • We keep every version younger than 30 days. Past that, we keep the newest 50 versions of each file.
  • We delete expired sign-in sessions daily.
  • We keep the activity log for 180 days.
  • A deleted workspace is purged after 30 days.
  • We delete a data export's archive after 14 days, or sooner when you request a new export, and the record of each export after a year.

Database backups and deleted-file recovery in Google Cloud hold deleted data for up to 7 more days. Google Cloud keeps request logs for 30 days, and Sentry keeps error reports and logs for up to 90 days.

Your rights and choices

  • Access and export: download your files and folders as a ZIP, request a data export of every workspace in Settings โ†’ Account, or ask us for a copy of the rest of your data. A data export holds your workspaces, folders and the current version of each file, with the time it last changed. It leaves out the trash, version history, stars and settings.
  • Correct: ask us to fix anything wrong. Your name and picture come from Google or GitHub.
  • Delete: delete your account in Settings, or ask us to do it.

You may also object to or restrict how we use your data, depending on where you live. Email hello@memomori.app and we will answer within 30 days. You can also complain to your data protection authority; in Japan, that is the Personal Information Protection Commission.

Minors

MemoMori is not for anyone under 18. If we learn that someone under 18 has an account, we will delete it.

Changes to this policy

When we change this policy, we update the date at the top. If a change matters, we tell you by email or in the app before it takes effect.