Effective date: August 7, 2026
Memori is a personal memory product. You connect the places your life already lives — email, calendar, files — and Memori turns them into a memory you can see, edit, and use with the AI tools you already choose. That only works if you trust us with the underlying data, so this policy says plainly what we collect, where it goes, how long we keep it, and how you delete it.
Two commitments up front, because they shape everything below:
Account data. Your email address, name, and login credentials (passwords are stored hashed, never in plain text).
Connected-source data. When you connect an account (like Gmail or Google Calendar), we sync content from it into your memory. The next section lists exactly what, per source.
Security and usage logs. Login events (including IP address and browser information) and operational logs that keep the service running and let us investigate abuse. These are about protecting your account, not profiling you.
Website and app analytics. We run no advertising pixels and no behavioral-profiling trackers, and nothing inside your memory is ever sent to an analytics service. We do measure ordinary web traffic: our app and our public website are served by Vercel, which reports page views and performance timings, and our public website (mymemori.app) additionally uses Google Analytics. These see page visits and load times — not your synced content, your memories, or your connected accounts. Our backend service monitoring is self-hosted.
Memori connects to Google services only when you choose to connect them, and only with read access. We request these scopes:
| Scope | What it's for |
|---|---|
gmail.readonly | Reads your email so your memory can answer questions grounded in it ("what did the plumber quote me?"). Read-only: Memori never sends, modifies, or deletes email. |
calendar.readonly | Reads events from your primary calendar so meetings and events anchor your memory timeline. Read-only. |
drive.metadata.readonly | Reads Google Drive file metadata only — names, types, dates, owners — so your memory knows what documents exist and when they changed. This scope structurally cannot download file contents, and we never do. |
userinfo.email | Identifies which Google account a connection belongs to, so you can tell two mailboxes apart. |
What we actually store from Gmail: message bodies, subject lines, sender and recipient addresses and display names (To/Cc/Bcc), labels, message IDs, and timestamps. For attachments we store the filename, type, and size only — never the attachment contents.
From Google Calendar: events on your primary calendar (titles, times, participants, descriptions).
From Google Drive: file metadata only. No file contents.
Your data lives in a database on dedicated servers we operate, hosted with Hetzner in Ashburn, Virginia, United States. Alongside it we run S3-compatible object storage on that same infrastructure, holding files you upload and the data-export archives you request.
Traffic between your browser or app and Memori is encrypted (HTTPS/TLS). Connections between Memori's own internal services run on a private container network on a single host and do not traverse the public internet.
The OAuth tokens that grant access to your connected accounts are encrypted at rest with AES-256-GCM, with per-user keys. Our backups are encrypted at rest.
From your synced content, Memori derives the memory itself: Mems, embeddings (numerical representations used for search), and a knowledge graph of the people, places, and projects in your life. Derived data is treated as your data — it is covered by the same deletion and export rights as the source content.
Your memory and synced content: until you delete it. There is no automatic expiry — a memory product that silently forgets would defeat its purpose. You are in control of deletion (see the next section).
Security logs: login and authentication events are kept for 13 months, then deleted. Operational telemetry (service-health records) is retained on a similar bounded schedule.
These are two different controls, and we want to be exact about the difference:
Disconnecting a source (for example, disconnecting Gmail) revokes Memori's access to that account and stops all future syncing. It does not delete the data already captured — the messages, memories, and connections already in your memory stay there, because deleting your memory every time you toggle a connection would destroy the product you're using. If you want the data gone, use deletion.
Deleting your data is the complete path. You can request deletion of your account (or a single profile) from within the product or by contacting us. After you verify the request by email, we permanently and physically erase your data: synced content, message bodies, derived memories, embeddings, graph data, and stored files. Deletion is not a soft-delete or a flag — the data is removed from our live systems. Once erasure begins it cannot be cancelled, and we give you a receipt you can use to confirm completion even after your login is gone. Residual copies in our encrypted backups roll off as backups expire.
You can request an export of your data at any time. We provide it in machine-readable formats (JSON, CSV). Export and deletion are both available to every user — they are not premium features.
We use a small number of service providers to run Memori. Each receives only what its job requires:
That is the complete list. We add a provider only when the product needs it, and we update this policy when we do. We do not use advertising networks or data brokers, and no provider on this list receives your memory or your connected-source content except OpenAI, which processes it to build your memory as described above.
Memori's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
In practice, for data Memori receives from Google APIs:
Memori staff do not read your content in the normal course of operating the service. A human sees your data only when:
Administrative access to production systems is restricted and logged.
We state this as policy, not marketing: Memori does not sell, rent, lease, or license your data. We do not use your data for advertising or share it with advertising platforms or data brokers. We do not monetize aggregated insights derived from your data. Nothing you store in Memori is shared with anyone unless your settings direct it.
Memori is for adults. You must be 18 or older to create an account.
When we change this policy, we update the date at the top and describe the change. For material changes — anything that expands what we collect or who receives it — we notify you by email before the change takes effect.
Memori is operated by Memori AI, Inc.
Questions, deletion requests, export requests, privacy concerns: privacy@mymemori.app.