Privacy Policy for Android

Overview

This policy applies to the Android version of MeMemo ("we", "our", "the app"), published by Shanghai Yuma Technology Co., Ltd. (上海于马科技有限公司). MeMemo is a local-first life journal. You can use it without a MeMemo account and without enabling cloud sync.

Data handled by the app

We do not operate a server that receives, stores, or processes your journal content. The app processes the following data on your device:

• journal summaries, notes, keywords, plans, completion state, stars, deletions, and conflict versions;
• profile choices such as birthday, age calculation, life length, theme color, and fixed icon age;
• device-only settings such as language, appearance, reminders, and app-lock credentials;
• if you enable Google Drive sync, the confirmed Google email address and a SHA-256-derived account key based on Google's stable account identifier.

OAuth access tokens are kept only in process memory. They are not written to the MeMemo database, settings, logs, or sync files.

Optional Google Drive sync

If you choose to enable sync, MeMemo requests openid, userinfo.email, and the non-sensitive drive.appdata scope. The email is shown so you can confirm the account. The stable account identifier is used only to prevent data from different Google accounts from being mixed.

Journal content and the synced profile choices listed above are stored in the hidden, app-specific folder of your Google Drive. Files in this folder do not appear in your normal Drive file list and cannot be shared. Language, appearance, reminders, app-lock credentials, OAuth tokens, and purchase credentials are not put into sync files.

Google API data is used only for Android device-to-device sync, reinstall or device-change recovery, conflict handling, and history recovery. We do not use it for advertising, analytics, credit decisions, AI training, or data brokerage. Our use and transfer of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Developer access and sharing

We cannot read your journal or Google Drive sync files. We have no journal server and do not receive your Google access token. Only the app on a device you authorize can access its own hidden Drive folder during the authorization period.

We do not sell your data. At your direction, synced data is transferred to Google Drive solely to provide sync and recovery. The app contains no third-party advertising, analytics, or tracking SDK.

Google Play and this website

Google Play processes purchases and may provide the app with purchase status and a purchase token so it can determine your entitlement. We do not receive your payment-card details. Google Play and Google Drive are governed by Google's own terms and privacy policy.

This website uses Cloudflare Web Analytics for aggregate page and performance measurement. According to Cloudflare, it uses no cookies, does not track people across sites, and does not collect or use visitors' personal data. It never receives your MeMemo journal.

Retention, disabling, revocation, and deletion

• Delete content in MeMemo: the deletion is synced when sync is enabled. Redundant historical objects are kept for at least 30 days for recovery before they become eligible for permanent cleanup.
• Turn off sync: local data and existing Drive data remain. Turning sync on again with the same account can continue from that data.
• Revoke MeMemo access in your Google Account: syncing stops, but existing hidden Drive data is not deleted.
• Delete or clear the app: local app data is removed, but hidden Drive data is not automatically deleted.
• Delete all hidden Drive data: open Google Drive settings, choose Manage apps, find MeMemo, then choose Options and Delete hidden app data. This deletes the app's entire Drive appDataFolder and cannot be undone. Keep a local copy or export first.

Security and international processing

Data sent to Google Drive uses HTTPS and Google's standard encryption in transit and at rest. MeMemo does not currently claim end-to-end encryption and does not provide a separate sync password or recovery code. Google may process Drive data in the locations described in its privacy documentation.

Children and your rights

MeMemo is not directed at children and does not knowingly collect children's information on our servers. Depending on your location, you may have rights of access, correction, deletion, portability, restriction, objection, or complaint. Because we do not possess your journal, most actions are exercised directly in the app or your Google Drive settings. Contact us if you need help.

Data controller and contact

Changes to this policy

We may update this policy when the app, law, or third-party services change. The updated date and current version will be posted on this page.