Mementote

Privacy Policy

Last updated: July 15, 2026

Mementote (“we,” “us”) builds Time Machine — a place-based audio app and related web and event experiences. This policy explains what we collect, how we use it, and the choices you have. Questions? Email gv@mementote.co.

The short version

A recording belongs to its place. To make that work we need your location and the audio you record. You choose who a recording is for. We use trusted providers (Google Firebase, Apple, Stripe) to run the service, we don’t sell your data, and you can delete your account and content at any time.

Information we collect

Account information. Your phone number and/or email address, and a display name. If you use Sign in with Apple, we receive the identifier (and name/email) you approve.
Your content. The audio recordings, videos, and notes you create, along with their titles and the geographic location where you leave them. Content is stored so it can be played back at its place and delivered to the people you send it to.
Location. Precise device location — used to place a recording, to unlock recordings when you return to where they were left, and (with your permission) in the background so a recording can notify you when you arrive, even if the app is closed. You control location access in your device settings.
Contacts. If you choose to address a recording to someone, we use the phone number or contact you select to deliver it. We access your address book only when you pick a recipient, and only for the contacts you choose.
Device & notifications. A push-notification token and basic device information, so we can notify you about recordings left for you.
On-device analysis. Some features (for example identifying a song with Apple ShazamKit, or stamping the weather with Apple WeatherKit) run on your device. We store only the result (e.g. a song title or the weather), not your raw audio for these features.
Payments. If you pay us or we invoice you, payment card details are collected and processed by Stripe — we do not store full card numbers. We keep records such as the amount, date, and status.
Newsletter & contact. If you sign up for updates or contact us, we keep the email address and message you provide.
Usage. Basic, aggregate usage and diagnostic information to keep the service reliable.

How we use your information

To provide the core experience: record, leave, return, and play back at a place.
To deliver recordings to the people you choose, and notify you about recordings left for you.
To operate group sessions (“jams”) — shared only with people who explicitly join.
To process payments, send invoices, and keep financial records.
To secure the service, prevent abuse, and comply with law.

How we share information

We do not sell your personal information. We share it only:

With people you choose — the recipients of recordings you send, and participants in a jam you join.
With service providers that run the service on our behalf: Google Firebase (authentication, database, file storage, notifications), Apple (Sign in with Apple, notifications, on-device audio/weather features), and Stripe (payments and invoicing). These providers process data under their own privacy terms.
For legal reasons — if required by law, or to protect the rights, safety, and security of our users and the service.
In a business transfer — as part of a merger, acquisition, or sale of assets, with notice where required.

Payments and financial data

Payments are processed by Stripe; your card data is handled by Stripe and not stored on our servers. Where we use Stripe Financial Connections, it is to connect our own business bank account so we can monitor our company’s balances and spending — this does not involve your personal bank data.

Data retention

We keep your content and account information for as long as your account is active. When you delete a recording or your account, we remove the associated content from our active systems; residual copies may persist briefly in backups before being overwritten.

Your choices and rights

Access & deletion. You can delete individual recordings and your account. To request access to or deletion of your data, email gv@mementote.co.
Location. Turn location access on or off any time in your device settings (some features won’t work without it).
Notifications. Manage push notifications in your device settings.
Newsletter. Unsubscribe any time via the email or by contacting us.
Depending on where you live, you may have additional rights (for example under the GDPR or CCPA), including access, correction, deletion, and portability. Contact us to exercise them.

Security

We use reputable infrastructure (Google Firebase, Apple, Stripe) and access controls to protect your information. No method of transmission or storage is perfectly secure, but we work to protect your data and limit access to it.

Children

Mementote is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

International users

We operate in the United States and our providers may process data there and in other countries. By using the service you understand your information may be processed in the United States.

Changes to this policy

We may update this policy from time to time. We’ll revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.

Contact

Mementote — gv@mementote.co · mementote.co