← Back to tMemo

Privacy Policy

Last updated: 2026-10-18

Overview

tMemo keeps your notes on your own device. Nothing you write is uploaded to us, and no note, attachment, tag or link is ever stored on our servers. An account is optional, and it exists for one purpose only: to attach the paid membership to you so the same purchase works on more than one platform. This policy explains every case where data leaves your device, and what our account service stores when it does.

What Stays on Your Device

Your notes, attachments, tags and links are stored locally on your device. If you turn on sync, the same files are written to your own Apple iCloud Drive container or to your own WebDAV server. Both are under your control and subject to their own providers' policies. WebDAV credentials stay on your device too: the account name locally, and the app password in the system keychain on Apple platforms or encrypted with the Android Keystore on Android.

We do not receive, read or hold copies of your notes or attachments. The local index database, sync baselines, diagnostics and preferences also stay on the device. The diagnostics screen in the app reads local files only; it does not upload anything.

Accounts and Membership

You can use tMemo without an account. If you want your paid membership on more than one platform, you can sign in with Apple or Google. Sign-in is used only to identify you for the membership; we do not ask for access to your notes, files, contacts or mail, and there is no password of ours to remember.

When you sign in, our account service stores:

  • an internal account ID we generate, the account status, and creation and deletion timestamps;
  • the identifier your sign-in provider gives us (an Apple or Google account identifier) and the email address that comes with it when the provider reports it as verified. If you use Apple's Hide My Email, that address is Apple's private relay address;
  • your session: we store only a SHA-256 hash of the session token, never the token itself. It expires after 30 days and is revoked when you sign out;
  • membership and purchase records: the product, the store, the store transaction identifier, the environment, and an encrypted copy of the store purchase token where the store requires one;
  • a journal of the purchase events our billing provider sends us, encrypted at rest, so membership can be verified without trusting the client alone.

We do not store your name, your avatar, your contacts, or any note content.

Google User Data

If you choose Google, the sign-in screen requests only the openid and email scopes. We receive your Google account identifier and your verified email address, and we use them solely to sign you in and to attach your membership to that identity. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as needed to run the sign-in and billing features described in this policy, to comply with the law, or as part of a merger or acquisition.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Where Account Data Is Processed

Our account and membership service runs on Cloudflare Workers, with Cloudflare D1 as its database. Provider credentials and purchase tokens are stored encrypted, only hashes of session tokens are kept, and all traffic uses TLS. Billing entitlement is decided by RevenueCat, our billing provider, which we query with your internal account ID; the app never decides membership on its own.

What We Do Not Collect

Specifically:

  • We do not collect the notes, attachments, tags or links you create in tMemo.
  • We do not collect photos you attach to notes.
  • We do not ask for your name, avatar, contacts, address book or any profile beyond the account identifier and email described above.
  • We do not sell or share any data with third parties for advertising or marketing purposes.
  • We do not integrate third-party analytics tools, advertising SDKs or tracking services in the apps.

Third-Party Services

Only the providers below are involved, and only for the parts described in this policy:

  • Apple — Sign in with Apple, iCloud Drive, the App Store, and purchase and refund processing (Apple Privacy Policy).
  • Google — Google sign-in, and Google Play where you use it (Google Privacy Policy).
  • RevenueCat — validating purchases and resolving membership (RevenueCat Privacy Policy).
  • Cloudflare — hosting the account service and its database (Cloudflare Privacy Policy).
  • Your WebDAV provider, if you configure sync — your files go there directly, under your own account.

A billing provider necessarily receives the purchase data it must validate for a transaction. Cloudflare keeps operational logs for the account service for its standard retention period.

Retention and Deletion

You can delete your account inside the app, on the account screen. Deletion revokes the credential we hold with Apple or Google, requests deletion of the billing profile, and erases the identities, sessions, pending sign-in flows and billing events we stored.

What remains afterwards is a minimal record: your internal account ID marked as deleted with the deletion timestamp, and your purchase records without any store purchase token. We keep those for accounting, tax, anti-fraud and support reasons, including restoring a purchase to a new account. They contain no email address, no provider credential and no note content. Copies of deleted records can persist briefly inside encrypted backups and server logs until those rotate, and we cannot delete the purchase records that the stores and the billing provider retain on their own side.

Children's Privacy

tMemo does not knowingly collect personal information from children under the age of 13. An account is optional and only used for the membership. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

Changes to This Policy

We may update this privacy policy from time to time. Any significant changes will be communicated through the app update notes. We encourage you to review this policy periodically.

Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at idtimw@gmail.com.