Memento

Privacy

Privacy Policy

Effective date: November 3, 2026

Memento is a Mac app that records and transcribes conversations on your Mac. This policy explains what information the app and this website handle, where it goes, and what you can do about it. We have tried to make every statement here specific enough that you can check it.

The short version

  • Your recordings, transcripts, speaker names and voice data stay on your Mac. We never receive them.
  • Memento has no account. We do not know who you are unless you write to us.
  • Nothing about your conversations leaves your Mac unless you turn on cloud transcription, which is off until you set it up yourself.
  • Usage and reliability data is off by default. If you turn it on, it contains no audio, text, names or file paths, and you can read exactly what is waiting to be sent.
  • This website uses cookieless analytics that we host ourselves and does not store your IP address.

Who we are

In this policy, "Memento", "we" and "us" mean the maker of the Memento app and this website, who is responsible for the information described here. You can reach us at privacy@meementoo.com.

What stays on your Mac

To do its job, Memento stores the following on your Mac, in its own app data folder or in a recordings folder you choose:

  • audio recordings and audio or video files you import;
  • transcripts, timestamps, the edits you make, summaries and the search index;
  • speaker information: anonymous speaker turns, any names you give to speakers, and voice profiles (numeric "voice embeddings") that let Memento suggest a name the next time it hears the same voice;
  • meeting titles, dates, topics, folders and your settings;
  • downloaded transcription, speaker and search models; and
  • diagnostic files, if you turn on Local Diagnostics.

Summaries and search are computed on your Mac. Memento does not send this information to us, and we have no way to access it. That also means we cannot recover it for you: back it up the way you back up your other files. Anyone who can use your Mac account, its backups or your recordings folder can see this information, so protect them as you would any private document.

Memento asks for microphone access only so it can record. If you open the browser view with Open in Browser, or call Memento from your own scripts, that connection stays on your Mac (it listens only on 127.0.0.1) and requires a session that the app creates.

When information leaves your Mac

Cloud transcription (off by default)

Transcription runs on your Mac by default. You can instead set up a remote transcription provider of your choice, such as OpenAI or any compatible service, and enable Allow cloud processing in Settings.

When it is on, Memento sends the audio of the recordings you choose to transcribe, the selected language, your custom vocabulary and your API key to the address you entered. Transcripts, speaker names and voice data are not sent. That provider, not us, decides how it uses, keeps and deletes what it receives, under its own terms and privacy policy. We do not receive any of it. Your API key is kept in the macOS Keychain. Turning cloud processing off stops new uploads; requests already sent may finish.

Usage and reliability data (off by default)

Settings → Privacy → Diagnostics has three separate choices. All three are off when you install Memento, and each sharing choice asks you to confirm before it turns on.

  • Local Diagnostics keeps short-lived diagnostic files on your Mac only (up to seven days and 10 MB). Nothing is sent.
  • Share Reliability Data sends events such as "the app started", "a recording finished" or "a model failed to load", with timings, memory and CPU use, the model in use and a fixed error code.
  • Share Product Analytics sends events such as "a transcript was opened", "a search completed" (with the number of results, not the query) or "a speaker was reassigned".

Every shared event also carries the app version, macOS major version, processor type and a random Analytics ID. The Analytics ID is created when you first turn sharing on, is not linked to your name, Mac, Apple ID or files, and is deleted when you turn both sharing choices off. It does let us tell that several events came from the same installation, so it is pseudonymous rather than anonymous.

Shared events never contain audio, transcripts, summaries, search queries, speaker names or voice data, titles, file paths, your vocabulary, provider addresses, API keys, error messages or logs. The app only accepts a fixed list of event types and fields and rejects anything else. Use Inspect Pending Data to read the exact events waiting to be sent.

Shared events go to PostHog, an analytics service, in its EU region. Your Mac's IP address is visible to PostHog when the connection is made; Memento does not include it in events, and we configure PostHog to discard IP addresses and not to work out a location from them. We do not create user profiles. PostHog keeps the events for up to one year. Some versions of Memento do not include sharing at all; in that case these settings say sharing is unavailable and nothing is sent.

Memento also keeps a small marker on your Mac, even with diagnostics off, so it can tell whether it closed properly last time. It contains only a time and a process number and is never sent.

Model downloads

Memento downloads the models you choose from Hugging Face (huggingface.co) and, for its speech detection model, from GitHub. Like any download, these services see your IP address and which file you asked for. Your recordings and transcripts are never part of a download.

Updates

Memento checks for updates by requesting a small file from www.meementoo.com. You can defer automatic checks from Settings. The request includes the app version you are running so we can count, per day, how many update checks each version makes. We do not store your IP address, a device identifier or anything else from these requests.

Feedback and support

You can save feedback in Memento and export a support bundle to a file. Both stay on your Mac until you choose to send them to us. A support bundle contains redacted diagnostics and app and model status, not audio or transcripts; please read it before sending. If you email us, we receive your email address and whatever you include, and use it only to answer you.

This website

The site at meementoo.com uses Umami, an analytics tool we run ourselves on our own servers, not a third-party advertising or tracking service. It records page views, the referring site, campaign tags in the link, country, browser, operating system and device type, and clicks on the download button and its outcome. Umami does not use cookies and does not store your IP address. It respects your browser's Do Not Track setting. We keep this data for up to 12 months.

During the beta, downloading Memento requires an invitation code.

  • The code you type is checked against a one-way fingerprint; we never send it to analytics.
  • When a code is accepted, your browser receives a cookie that lets you download the installer for the next 24 hours. It is needed for the download to work and is not used for anything else.
  • To stop people guessing codes, we count failed attempts using a keyed fingerprint of your IP address. These counts are deleted within 24 hours. The IP address itself is not stored.

The server also keeps daily totals of accepted and rejected codes and of downloads, by app version or failure reason only, with no IP address, browser details or identifier.

Like any web host, our hosting provider may briefly keep technical logs, including IP addresses, to run and secure the service.

Who else is involved

We do not sell or rent personal information, and we do not use it for advertising. The only other parties that can receive information described here are:

  • Railway, which hosts this website, the update service and the installer files (servers in the United States);
  • PostHog, which receives shared usage and reliability data, if you turn sharing on (EU region);
  • Hugging Face and GitHub, when you download models;
  • the transcription provider you choose, if you turn on cloud processing; and
  • authorities, if the law requires us to share information.

Railway and Hugging Face are based in the United States. Where information about people in the European Economic Area or the United Kingdom is handled outside it, we rely on the safeguards those companies provide, such as the EU Standard Contractual Clauses.

Why we handle this information

If you are in the European Economic Area or the United Kingdom, these are the legal bases we rely on:

  • Your consent for shared usage and reliability data. You can withdraw it at any time by turning the setting off.
  • Our legitimate interest in running, securing and improving the website and update service, counting downloads and preventing abuse of invitation codes, in ways that do not identify you.
  • Answering you when you contact us.

Memento does not make automated decisions about you.

How long we keep it

  • Information on your Mac: until you delete it. Deleted items stay in Trash for 30 days, then the recordings and everything derived from them are removed. You can also have old recordings deleted automatically.
  • Shared usage and reliability data: up to one year at PostHog.
  • Website analytics: up to 12 months.
  • Failed invitation attempts: up to 24 hours. Download cookie: 24 hours.
  • Daily download and update totals: kept, as they contain no personal information.
  • Emails: as long as needed to deal with your request.

Your choices and rights

You can keep everything on your Mac by leaving cloud processing and sharing off. You can inspect pending data, reset your Analytics ID, delete local diagnostics, and delete recordings at any time.

Depending on where you live, you may have the right to ask what information we hold about you, to correct or delete it, to object to its use, or to receive a copy. Since we have no account for you, the only information we could hold is shared usage data, website analytics without identifiers, and emails you sent us. To ask us to delete shared usage data, copy your Analytics ID from Settings → Privacy → Diagnostics, turn sharing off, and email it to us. Resetting the ID in the app does not delete data already sent.

Write to privacy@meementoo.com and we will reply within 30 days. You can also complain to the data protection authority where you live.

Recording other people

Memento records whoever is speaking near your Mac, and voice profiles are information about those people. Laws on recording conversations differ between countries and states; some require everyone's consent. You are responsible for telling people and getting their permission where the law requires it.

Children

Memento and this website are not directed at children under 16, and we do not knowingly collect information about them.

Security

We designed Memento to keep information on your Mac and to send as little as possible. API keys are kept in the macOS Keychain, models are checked against fixed checksums before use, and connections to our servers, PostHog and model hosts use HTTPS. No software can protect information on a Mac that someone else controls, so keep your Mac, your account and your backups secure.

Changes to this policy

When Memento starts handling information in a new way, we will update this policy before releasing that change and change the effective date at the top. Significant changes will also be noted in the release notes.

Contact

Questions or requests: privacy@meementoo.com.