Privacy

Effective 10 October 2026. Covers the Memogram app, the service at api.getmemogram.com, and this website.

Memogram is a vault for the facts your AI agents need about you. This page says plainly what we store, what we can and cannot read, who else sees anything, and what you control. Where the current version falls short of the ideal, it says so.

What is stored, and how

• Your memories, your contacts, your Profile, and your categories are encrypted on your phone before they leave it (what agents save is encrypted by our server instead, below), with keys derived on the phone from a vault key that only the phone and your recovery code can reproduce. We store the encrypted form. Each category has its own key.
• Memories: each memory is filed under one topic, Background, Preferences, Plans, Work, Health, Money, or one you create, whether it is about you or about someone in your life, and is encrypted under that topic's key.
• Contacts: each person, organization, pet, place, or thing that lasts in your life is a card; something passing, like a hotel you stay at once, stays in the words of a memory. A card's name, other names, and relationship to you are encrypted under the Contacts key, which every agent you connect receives, and its contact details (phones, emails, addresses, online profiles, a birthday, work, and documents: passports, licenses, visas, traveler, membership, and loyalty numbers, each a label and its fields, such as a number, dates, and an issuer) under a separate Contact details key. A birthday and a document's dates are the only dates on a card; an anniversary is a memory under its topic.
• Your Profile: your name and other names, and your instructions to agents, are encrypted under one key that every agent you connect receives. Each kind of your own details (contact info, meaning your phones, emails, and online profiles together; city and country; full address; birthday; employer and job title; documents) is encrypted under a key of its own.
• Your account: the email address or Apple ID relay address you sign in with, and an account identifier.
• Connections: which agents you connected, when, which categories you allowed them (your contacts' details and your own details among them), whether each may save memories, and when each expires. Allowing a category releases that category's key to our server, sealed so that only the server can open it. The server holds it until you stop sharing that category or disconnect the agent, or the agent disconnects itself; after a connection expires, the server deletes its keys the next time it sees that connection. Every connection also releases, the same way, the key to your name, other names, and instructions to agents, and the Contacts key, to your contacts' names, other names, and relationships.
• What agents save: an agent you allow to save writes memories straight into the categories you shared with it, and creates and updates contacts, encrypted by our server under that category's key: a contact's name, other names, and relationship under the Contacts key, and its contact details under the Contact details key.
• The activity log: which agent called which function, when, for which categories, and how many results it received. The search text, the exact results, and what each save did are sealed to your phone's key; we store them but cannot open them.
• Search vectors for memories in categories you have shared, encrypted under the same category keys.
• Server logs with identifiers, counts, and timings. Memory text, names and details, your instructions to agents, search text, and credentials are never written to logs.

What we can read, and what we cannot

Categories you have never shared with an agent cannot be read by us or by anyone with access to our systems: no key for them exists outside your phone. One exception: a category you create takes its key number from a counter stored on our servers, and someone with access to our systems who turned that counter back could give a new category the same key as one you deleted. If you had shared the deleted category with an agent, that person could already hold its key and so read the new category, although you never shared it.

For categories you have shared, our server decrypts them in memory while it answers a request from that agent, then discards the plaintext. During that moment an operator with access to the server could read those categories, and could copy a shared category's key, which would stay usable after you disconnect the agent: the app cannot yet replace your keys. Someone with access to the server could also add a memory to a category you have shared, and the app could not tell it from one you or an agent saved. Search text, and the memories, contacts, and contact details an agent saves, reach the server unencrypted before being encrypted, and what an agent saves is in a category you shared, so all of the above applies to it from the moment it is saved. We do not describe Memogram as zero-knowledge, because for shared categories it is not.

Your name, other names, and instructions to agents are shared with every agent you connect, so all of the above applies to them while any agent is connected: someone with access to our systems could read them, and could also change them, and agents would then read the changed name or instructions as yours. The same holds for your contacts' names, other names, and relationships, which every agent you connect also reads, and for your own details in a category you share. The app shows your Profile and your instructions as they are stored.

Even without any connection, we can see how many memories you have, which built-in category each belongs to, when they were created and changed, whether each is still current or was forgotten or replaced, how many earlier versions each keeps and when they were written, and their encrypted size. We also see how many contacts you have, and which kinds of details each card holds, never the values: for your own card, which of your detail categories (contact info, city and country, full address, birthday, employer and job title, documents) have something in them, and for each other card, whether it has contact details at all, not which; and when each part of a card was written and its encrypted size, which for your name grows with your instructions to agents. For each save we see which agent made it, when, and which memories and cards it wrote. Categories you define appear to us as opaque identifiers; their names are encrypted.

The activity log is tamper-evident from the first time your phone verifies it: the app keeps the last entry it checked and warns if the log stops connecting to it. It is not yet anchored anywhere outside our systems.

Who else sees anything

• Agents you connect receive, when they ask, your name, other names, and instructions to agents; the memories in the categories you allowed; your own details in the detail categories you left on; the names, other names, and relationships of your contacts, with their contact details only if you shared Contact details. Agents are also told what is in your vault that they were not given, never the values or how much: which of the built-in categories they cannot read (Background, Preferences, Plans, Work, Health, Money) hold any memory, whether your contacts' details hold anything, which of your detail categories have something in them (for example that your full address is set), and, when a search shows a contact whose details they were not given, that the contact has them; so that an agent can ask you to share. Categories you create are never named to an agent you did not give them. They keep whatever they received under their own terms; disconnecting removes their access from that moment but cannot make them forget.
• Google Cloud hosts the service and the database in the United States (us-central1), and provides sign-in. Requests to the service pass through Google's front end before reaching our code.
• Apple handles Sign in with Apple. We send no push notifications.
• Vercel serves this website. The website sets no cookies and runs no analytics.

We do not sell data and we do not use your memories for advertising or to train models.

Cookies

The page where an agent asks for your permission uses a short-lived cookie to complete that sign-in flow. Nothing else sets cookies.

What you control

• An agent you allow to save writes straight into the categories you shared with it, and every agent you shared those categories with can read what it saved at once. Every save names the agent and appears in Activity, where you can edit, forget, or undo it; you see it when you next open the app. You can stop an agent saving at any time.
• An agent cannot save into a category you have not shared with it, or save a contact's details unless you shared Contact details: the save is refused, and the agent can ask you to share that category in the app. An agent you allow to save can create contacts and change their names and relationships.
• No agent can change your Profile. Your name, your details, and your instructions to agents are written only by you, in the app; when an agent sends something for your Profile, the app shows it in Activity for you to add yourself.
• You choose the categories each agent may read, and you can disconnect it at any time. When you connect an agent, every category starts at its default, whatever the agent asked for; untick there what it should not read. Connections expire after ninety days unless renewed.
• A category is shared whole, whoever its memories are about: sharing Health shares what you keep about your family's health too.
• Health, Money (accounts, pay, rent, insurance, taxes), your own documents (passports, licenses, visas, traveler, membership, and loyalty numbers), and Contact details (your contacts' phones, emails, addresses, online profiles, birthdays, work, and documents) start unshared when you connect an agent: it reads them only if you tick them.
• Every agent you connect reads the names, other names, and relationships of everyone and everything in your contacts, though not their contact details; Contacts cannot be unticked. Background (your background and household, and the same for the people in your life: sizes, languages, pets, home, vehicles, anniversaries), Preferences, Plans, and Work start shared.
• Your own details are listed by kind when you connect an agent, and each starts shared but your documents: your contact info (phones, emails, and online profiles, shared together), city and country, full address, birthday, and employer and job title. You can untick any of them for that agent, then or later, and share your address at one of three levels: none, city and country, or full. A detail you add later is read at once by the agents you left its category on for.
• Your name, other names, and instructions to agents are read by every agent you connect; they cannot be unticked.
• An agent can still file a number in another category it can see, or write a contact's detail into a memory's words, where every agent that can read that memory's category sees it; the details of something passing, like a hotel's address, belong in a memory's words. Agents are told to write a relationship as a role ("doctor", never a condition or a specialty), but one could still write a condition there, which every agent reads. The app shows what each agent saved and lets you move or edit it.
• You can export your whole vault as a readable file, and import it into another vault.
• Deleting your account removes your vault, connections, log, and account at once. If you signed in with Apple, we also ask Apple to revoke its token. For disaster recovery the database keeps a seven-day history that only we can restore from, so deleted data can persist in that history for up to seven days; it is encrypted the same way and we keep no other backups.
• Your memories are only as safe as your phone and your recovery code. Losing both loses the vault; we cannot recover it.
• Someone who takes over the account you sign in with cannot open your vault without your recovery code, but through the real app they could delete memories, change your connections, and give an agent of theirs a category you share with one of your agents.

Other people's information

A vault often holds facts about family, friends, and colleagues, filed under the same categories as facts about you, and your contacts' phone numbers, addresses, and birthdays. You are responsible for what you store about others. Every agent you connect reads your contacts' names, other names, and relationships; their contact details start unshared with agents, and export and deletion cover that information too.

Children

Memogram is not directed at children under 13 and we do not knowingly hold accounts for them.

Changes

When this page changes in a way that matters, the app and the effective date above will say so.

Contact

Questions and requests about your data: info@getmemogram.com.