Privacy Policy — Memoria

1. Introduction

This privacy policy describes how the Memoria application (“the App”, “we”, “our”) collects, uses, and protects information when you use our mobile application available on iOS and Android.

Memoria is designed with a privacy by design principle. All processing of your photos and videos takes place entirely on your device. We do not have access to your media, your searches, or any content indexed by the App.

2. Publisher

Memoria is published by:

Anas Contact: developer@alias.anasouh.fr

3. Data processed locally on your device

The following data is processed exclusively on your device and is never transmitted to our servers or to any third party:

Photos and videos imported from your photo library
Extracted text from images via optical character recognition (OCR)
Audio transcriptions of videos (via Whisper or Apple Speech / Android speech recognition)
Face data — see section 3.1 below
Object detections and associated labels
Metadata: location (reverse geocoding), camera, file format
Search database (SQLite) stored in the App’s sandbox, excluded from iCloud and iTunes backups
App preferences and settings

We have no technical means to access this data. It resides solely in the App’s private storage space on your device.

3.1 Face data (People feature)

When the People feature is enabled (on by default, can be disabled in Settings > People), the App analyzes photos and videos from your library to detect faces. For each detected face, it computes a compact numerical representation — a mathematical vector derived from the geometry of the face. No face image or crop is ever written to disk; only these numerical vectors are stored.

Purpose: these vectors are used exclusively to group photos and videos featuring the same person within your own library, and to let you search your library by person. The App does not identify who a person is, does not compare faces against any external database or registry, and does not perform any identification beyond grouping within your private library.

What is stored: numerical vectors (one per detected face), bounding box coordinates, and cluster membership. Optionally, a display name you assign to a group (e.g. “Marie”).

What is never stored or collected: face images, crops, biometric templates, or any personally identifiable information derived from a face.

Third parties: face data never leaves your device. It is not transmitted to us or to any third party under any circumstances.

Backup: the App’s database — including all face data — is explicitly excluded from iCloud and iTunes backups. Face data exists solely in the App’s private sandbox on your device.

Retention: face data is retained as long as the App is installed, or until you explicitly delete it via Settings > People > Delete face data, or until you uninstall the App. Uninstalling the App permanently deletes all face data.

User control:

You can disable the People feature at any time in Settings > People. Existing face data is retained but no longer used or enriched.
You can delete all face data at any time via Settings > People > Delete face data, without uninstalling the App.
You can delete all app data by uninstalling the App.

4. Data collected by our servers

4.1 Anonymized analytics data

Memoria collects anonymized usage data for the sole purpose of improving the App and fixing issues. This data is sent to a server that we host and administer ourselves (self-hosted). It is not shared with any third party.

Data collected:

Randomly generated installation identifier (not linked to your identity)
Device type and model
Operating system version
App version
Anonymized usage events (screens viewed, features used, without any search content or media content)
Crash reports (technical stack traces, device state at the time of the error)
Country of origin (inferred from system language, not from geolocation)

Data never collected:

Name, email address, phone number, or any personally identifiable information
Content of your searches
Content of your photos, videos, extracted text, or transcriptions
GPS location data
Advertising identifiers (IDFA / GAID)
IP addresses (not permanently stored by our server)

Legal basis (GDPR): legitimate interest (Article 6(1)(f) GDPR) — improving and fixing the App. You can disable analytics collection in the App’s settings.

Retention period: analytics data is retained for a maximum of 24 months, then automatically deleted.

4.2 Whisper model download

If you enable audio transcription via Whisper, the App downloads an AI model from Hugging Face Inc. servers (huggingface.co). This download is a direct network connection between your device and Hugging Face servers. We do not participate in this connection and do not receive any data from it. Hugging Face’s privacy policy applies to this download: https://huggingface.co/privacy

This download occurs only once per model and is optional.

4.3 In-app purchases

In-app purchases (Memoria Plus) are processed by Apple (App Store) or Google (Google Play). We do not collect or store any payment information. The respective privacy policies apply:

Apple: https://www.apple.com/legal/privacy/
Google: https://policies.google.com/privacy

We do not sell, rent, or share any personal data with third parties. The only network interactions of the App are:

Sending anonymized analytics data to our self-hosted server (section 4.1)
Optional download of Whisper models from Hugging Face (section 4.2)
In-app purchase processing by Apple or Google (section 4.3)

6. Security

Data stored on your device is protected by your operating system’s native security mechanisms (application sandbox, storage encryption). We do not provide an additional application-level encryption layer.

Communications with our analytics server are encrypted via HTTPS/TLS.

Under the General Data Protection Regulation (GDPR) and applicable laws, you have the following rights regarding the analytics data collected:

Right of access: you may ask us what data we hold about you.
Right to erasure: you may ask us to delete your analytics data.
Right to object: you can disable analytics collection in the App’s settings at any time.
Right to data portability: you may request to receive your data in a structured format.

Regarding data processed locally on your device (photos, extracted text, transcriptions, etc.): this data is under your exclusive control. You can delete it at any time by uninstalling the App or by using the database export/import feature in advanced settings.

To exercise your rights, contact us at: developer@alias.anasouh.fr

8. Children

Memoria does not knowingly collect personal data from children under 16. The App does not require any account, and the analytics data collected does not allow us to identify the user’s age.

9. Changes to this policy

We may update this privacy policy. In the event of a material change, we will notify you via an in-app notification or an update to this page. The last updated date is indicated at the top of this document.

10. Contact

For any questions regarding this privacy policy, contact us at: developer@alias.anasouh.fr