Memorari is a task and reminder app. This policy explains what we collect, why, who processes it, and how you get it back or delete it. It covers the website and the iOS and Android apps, which share one account and one database.
Information you give us
Account. Your email address and password are handled by our authentication provider. We store your email, display name, optional username, optional avatar URL, and your timezone. The timezone is used to send reminders at the right local time.
Your content. Tasks and their notes, links, tags, due dates and repeat settings; Life notes, links and categories; Duet events with their dates, times, locations and notes; and the contacts you add. This is the substance of the app, and some of it is personal by nature. We do not read it to build a profile of you and we do not sell it.
Other people's email addresses. When you assign a task, invite a Duet partner, or share a Life note, you give us the recipient's email address so we can deliver the invitation. Only give us addresses of people who would expect to hear from you.
Information collected automatically
Activity history. The app records what happened to a task — created, edited, completed, snoozed, shared, restored — so shared tasks have a timeline that everyone with access can understand.
Notifications. If you turn on reminders, we store the notification subscription for that device, along with a device label, the browser or app user-agent string, and the device timezone, so reminders reach the right device at the right time.
Analytics — optional, and off until you agree. If you accept analytics, we use PostHog to understand sign-in, task creation, completion and retention. PostHog receives your user ID and your email address, plus the event names listed above. If you decline, no analytics library is loaded at all. You can decline and keep using every feature.
Locked categories
Any category in Life can be locked with a password of your choosing, up to three at a time. A locked category works differently from everything else in Memorari. Its notes, their titles and any links attached are encrypted on your device with a key derived from that password. We receive only the encrypted result.
A locked category can also be hidden, in which case its name is encrypted too and it appears nowhere in the app until you type its password into the Life search box.
We never receive those passwords and never store them. That means we cannot read anything inside a locked category, cannot recover one for you, and cannot reset its password. If you forget it, the only remaining option is to delete the category, which permanently deletes what is inside. Nobody, including us, can undo that.
Locked notes cannot be shared with other people, and they do not appear in ordinary search, notifications, previews or exports. If you delete your account, they are deleted with it.
Connected AI assistants
You can connect an AI assistant (for example ChatGPT or Claude) to Memorari. If you do, we store the connection, the permissions you granted it, and access tokens for it. That assistant can then read and change the data covered by those permissions on your behalf.
Anything the assistant sees is also handled under that provider's privacy policy, not ours. You can revoke a connection at any time in Settings, which immediately invalidates its tokens.
Locked categories are excluded from all of that by default. An assistant can reach one only if you turn that permission on for it and give it that category's password for that request. Even then it receives one narrowing step at a time — note titles, then the single note you name — and the access expires straight afterwards. It cannot list which locked categories you have, or tell whether you have any. We keep a record of which assistant did what and when, never of what it read.
Who processes your data
Supabase — hosts the database, authentication and server functions. All account data and content lives here.
Cloudflare Pages — serves the website and app files.
PostHog — product analytics, only if you accept them.
Apple and Google — deliver push notifications to their devices, and distribute the apps.
We do not sell your personal information or share it for advertising.
Sharing between users
Memorari is partly a shared app, so some things are visible to others by design. A task you assign or share is visible to the people you shared it with, including its notes, links and history. A Duet event is visible to your partner and to anyone you add as an attendee. A shared Life note is visible to the people you shared it with. Sharing is never automatic — it happens only when you choose it, and you can revoke access.
Keeping it secure
Data is encrypted in transit. Access is restricted per-account at the database level, so one account cannot read another's private data. In the iOS and Android apps your sign-in token is stored in the device's secure store — the iOS Keychain or the Android Keystore. If a device's secure store is unavailable, the app falls back to ordinary app-private storage and tells you so in Settings rather than doing it silently.
Locked categories go further: they are end-to-end encrypted, so their contents are unreadable to us and to anyone who obtained a copy of the database without your password.
No service can promise perfect security, and we are not promising it.
Keeping and deleting your data
We keep your account and content until you ask us to delete it. There is no automatic expiry — a note you wrote years ago is still there because you may still want it.
To delete your account and its data, open Settings, then Account, then Delete account. Deletion is immediate and permanent — your account, tasks, Duet events, Life notes and categories, contacts, reminder subscriptions and assistant connections are all removed. If you cannot reach the app, email nurturinglab@gmail.com from your account address instead. Full instructions are on the account deletion page.
Content you shared with another person may remain visible to them where it is also part of their own record — for example a task they now own, or an event they attended.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, to withdraw consent, and to complain to a data protection authority. To exercise any of these, email nurturinglab@gmail.com. You can withdraw analytics consent at any time.
Children
Memorari is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
Changes
If this policy changes in a way that affects you, we will update the effective date above and, for significant changes, tell you in the app.
Contact
Questions about this policy or your data: nurturinglab@gmail.com.