Memento I Privacy Policy

Last updated: October 21, 2026

Who is responsible

The controller of Memento I's data is Javier Almenara Herrera, with address at C. Piedra Grande and tax ID 43841358T. For any question, or to exercise your rights, write to soporte@mementoi.app.

Summary

Memento I works without an account and, without one, nothing you log leaves your iPhone. Something only leaves it if you turn on a feature that needs it, and each one tells you first.

We don't sell data, there is no advertising or tracking, and Apple Health data is never used for advertising.

You'll find this summary inside the app, in Settings, Help, Privacy.

Data that stays on your iPhone

Everything you log is kept in the app's private storage on your iPhone: habits, tasks, streaks, embers, badges and chests; workouts, routines, records, measurements, weight and progress photos; meals, products, goals and shopping list; journal, letters, money, reading and "days without"; your settings and your profile photo. We don't see or receive any of it.

With an account, the app also keeps on the iPhone the last Friends data it loaded (your profile, friends, groups, chats, stories and the feed, without the photos), so everything stays in place when there's no signal. It's only a cache: it isn't part of the encrypted backup and it's deleted when you sign out or delete your account.

Your iPhone's own backups (iCloud or your computer) may include this data depending on your iOS settings; the app doesn't upload it to iCloud on its own.

Apple Health

If you give permission, the app only reads from Health; it never writes to it.

Health data is never used for advertising or sold, and it isn't sent to our server except inside your encrypted backup, which only you can open. The AI coach only receives the day's Health readings (steps, sleep, heart rate variability and resting heart rate) if you turn on "Include Apple Health readings" when giving it permission or, later, in Settings, Health readings for the AI. It's off unless you turn it on. What is already part of your log, such as weight you imported from Health, is treated like the rest of your data.

You can withdraw permission in the Health app (your profile, Apps, Memento I) or in the app's Settings, Health.

Account, friends, groups and chats

The account is optional and is created with Sign in with Apple. You only need it for the social features.

You can make your profile private or public, leave the league of the week, stop sharing your activity and block anyone: whoever you block can no longer find you, write to you or see your activity. You can see who you've blocked in Settings, Blocked users. Offensive words are hidden in nicknames, names, group names and messages, and messages, photos, profiles, groups and products can be reported from the app.

When you report something, we keep who reported it, the reason and a copy of what was reported (the text or the photo) so we can review it, even if its author deletes it, until it's resolved. If someone breaks the rules, we may remove their content and suspend their account; to stop them from signing up again, we keep the Apple identifier of suspended accounts.

Gym check-in

The check-in is done with the app's camera (never with a photo from the library) and checks that you're at a gym: the iPhone reads your location at that moment, looks up nearby gyms in Apple Maps and checks that the location isn't simulated. Your exact location never leaves the iPhone: only the gym's name, the time, the approximate distance and the photo are stored on it. The gym you choose as yours (from Apple Maps or the place where you are) is stored on the iPhone with its name and coordinates, and is never sent; to find it, the iPhone asks Apple Maps for the gyms around you or for the name you type.

So that the front camera comes out upright, the app looks for your face in the preview with the iPhone's own tools (Vision); it only checks which way it's turned and doesn't store or send anything about your face. The only thing it remembers is how much the image needs to be rotated on your iPhone model.

The check-in photo only leaves the iPhone if you choose to publish it to your Feed or your story, and the gym's name only if you leave "Show the gym" on. Photos from the last 60 check-ins are kept on the iPhone; older ones are deleted automatically.

Encrypted backup

It's optional and only turned on with your explicit consent. It includes all your data, including what was read from Apple Health and your progress photos. It's encrypted on your iPhone with 256-bit AES-GCM before it leaves; the key is stored in your iCloud Keychain and never reaches our server, so we can't read your backup. You can view a recovery code, turn it off and delete the backup from the server whenever you want (Settings, Data, Encrypted backup); it's also deleted when you delete your account.

The app doesn't upload health data to iCloud: the iCloud Keychain only holds the backup's key, which isn't health data. Your iPhone's own backups (in iCloud or on your computer) may include the app's data depending on your iOS settings.

AI coach

The coach is optional and only works if you connect your own API key. Before the first question, the app asks for your explicit permission to send your data to that provider: it tells you what is sent, to which company, and links to its privacy policy.

• Who it's sent to: the company you choose (OpenAI, Anthropic, Google, xAI, Mistral, DeepSeek or OpenRouter), directly from your iPhone and with your account. It doesn't go through our server.
• What is sent: your question and a summary of your data: name, age and sex; weight, height, body fat and measurements; your recovery (sleep, energy, stress and the HRV you log); habits, streaks and "days without"; routines, workouts and records from the last 4 weeks; meals and goals; reading, savings, self-care, tasks and shopping list. The day's Apple Health readings (steps, sleep, HRV and resting heart rate), only if you turn that on. If you describe a meal or ask for a routine with AI, only that text and what's needed to work it out is sent.
• What is never sent: your photos, your journal, your letters and your chats.
• Your key: it's stored in the iPhone's keychain and only used to talk to that provider.

That provider processes the data under its own terms; we have no contract with it and no access to what you send it. You can withdraw permission in Settings, AI data permission, and disconnect the coach in Settings, AI coach.

Barcode scanner and products

When you scan a product, the app looks up its code first in Memento I's shared database and, if it isn't there, in Open Food Facts (openfoodfacts.org), which only receives the code number. If you have an account and save or correct a product, its data (name, brand, calories, macros and serving) goes into the shared database; we keep who made each change so we can undo abuse, without showing it to anyone. What you eat isn't shared. Open Food Facts data is published under the Open Database License (ODbL).

iPhone permissions and notifications

Notifications are never advertising. Reminders are limited to three a day.

Providers involved

Supabase is a US company; any transfers that may take place are covered by the European Commission's standard contractual clauses. If you choose an AI provider outside the EU, your data travels to that country because you decide so when you connect your key and give permission.

How long data is kept and how to delete everything

What's on your iPhone is kept until you delete it (Settings, Data, Delete all data) or delete the app. What's on the server is kept as long as you have an account.

You can delete your account from the app (Friends, Your account, Delete account). Sign in with Apple access is revoked, your encrypted backup is deleted, and your profile, streaks, level, activity, posts, stories, sparks, friendships, chat messages and photos, nudges and devices are deleted. The products you contributed to the shared database remain with no link to you. What's on your iPhone isn't touched. The server's technical logs are kept for a few days for security.

A message, post or story you delete disappears for everyone, except for the copy kept by an open report. Reports are kept for as long as needed to resolve them, and suspensions for as long as they last.

Your rights

You can ask to access your data, correct it, delete it, restrict its use, object to its processing or take it to another service by writing to soporte@mementoi.app; we reply within 30 days at most. You can do almost all of it yourself in the app.

Legal basis: we process your data to provide the features you turn on and, for health data and for sending data to the AI provider, with your explicit consent, which you can withdraw at any time. Reviewing reports and suspending accounts is based on our legitimate interest in keeping the community safe and enforcing the terms of use.

You can lodge a complaint with the Spanish Data Protection Agency (aepd.es) or the authority in your country.

Minors, security and changes

Memento I is intended for people aged 16 and over. If we learn that an account belongs to someone under 16, we delete it.

The app doesn't show ads, doesn't use third-party analytics, doesn't track you across apps or websites and doesn't sell data. Connections are encrypted (HTTPS) and, on the server, each person can only read what belongs to them.

If this policy changes, we'll publish the new version with its date and, if the change is significant, we'll let you know in the app.

This is a translation. If there is any discrepancy, the Spanish version prevails.