Once…

We cannot read your memories. They are encrypted on your device with a key that never leaves your devices. What reaches our server is an unreadable sealed envelope — unreadable to us, to our hosting provider, to anyone without your key.

what is stored, and where

Your memories (photos, sentences, voice notes, dates, places) live on your device. A copy is synced to cloud storage (Cloudflare Workers KV) so you can recover them and use several devices — but that copy is encrypted end-to-end (AES-256-GCM) before it leaves your device. The encryption key is created on your device and is never sent to any server. Your cloud record sits at a random, unguessable address.

accounts and tracking

There are no accounts, no sign-up, no email required. The app contains no analytics, no advertising, no trackers, and no third-party scripts except the fonts. Our infrastructure provider (Cloudflare) processes standard technical request logs to operate the service.

what leaves privacy only when you choose

Share cards: when you share a memory as an image, that image leaves the app by the channel you choose (Messages, WhatsApp…) — that act is yours.
Device linking: the link QR/code contains your key. Anyone you show it to can read your memories — show it only to your own devices.
Family circle: memories you deliberately place in a circle are readable by circle members (and still end-to-end encrypted toward the server — the circle has its own shared key, passed between members directly, never through us).

deleting your data

Export your memories any time (Settings → Export). To erase: delete the app's data on your devices; your encrypted cloud record can be deleted from Settings or on request. Without your key, the cloud record is permanently unreadable anyway.

the honest trade-off

End-to-end encryption means we can never recover your memories for you. If you lose all your devices and every export file, the cloud copy stays sealed forever. Keep one export file somewhere safe — it is your recovery key.

contact

Giuseppe Astarita — gastarita@gmail.com

This page will be updated when the app leaves its family beta (last updated 12 July 2026).