Privacy Policy

The short version

Who we are

AideMemo is made and published by Proairos Pte. Ltd., a company registered in Singapore. We are responsible for the handling described on this page, and the ones to hold to it.

What we don't do

• No AideMemo account, and no login to anything of ours.
• No advertising, no advertising identifiers, no cross-app tracking, and nothing given to data brokers.
• No analytics or crash-reporting software in the app. Report App Issue prepares the app's version, a short error log and anything you attach, and hands them to the iOS share sheet: you choose where they go.
• No sale of personal information, under any definition of sale.
• No training of any model on your data, by us or for us.
• Nobody at Proairos reads your library. We don't have it.

On your iPhone

Everything below is stored in AideMemo's own storage on your iPhone. Later sections say when any of it leaves. If you use AideMemo on an iPad, what this policy says about your iPhone holds for your iPad too, apart from the Apple Watch app, which works only with an iPhone.

Your library

• Voice: recordings you make, import or share in, and recordings from your Apple Watch, with their transcripts, summaries and topics.
• Notes, moments and places you save, and files you import: text, email files, PDFs and images, from which AideMemo keeps the text.
• Photos you choose: AideMemo keeps a copy of each, with its details such as the time and location it was taken, a description written on the device and the text recognised in it.
• Descriptions of recent photos in your library, with full Photos access (see Photos, below): the description, the text recognised in the photo, and when and where it was taken, but not the photo.
• What AideMemo writes for you: Chat conversations and your Memory Summary.
• Personal facts you choose to add, such as your birthday or address. They stay on this iPhone: they are not synced, not used in Chat and not shared with assistants.

What AideMemo reads with your permission

Each of these asks first, and you can change it at any time in iOS Settings.

• Photos. AideMemo asks for access to your photo library, and keeps a copy only of the photos you choose. With full access, it also reads the camera photos in your library from today and the 6 days before, and from any day you open in the Journal, to describe each one and recognise its text with Apple's model on your iPhone; a photo kept only in iCloud Photos is downloaded to your iPhone for this. It leaves out screenshots, animations and hidden photos, and saved images unless you turn on Saved Images in Settings › Photos. Your Journal and Chat use these descriptions. Delete Memory on a photo card deletes what was written about its photos, and they aren't described again; it waits in Recently Deleted on your iPhone for 30 days, where you can restore it or delete it at once; to stop the descriptions altogether, limit AideMemo's Photos access in iOS Settings. With limited access, AideMemo reads only the photos you choose.
• Location. With Always access, AideMemo records the places you visit and a rough route for the day from the low-power location signals iOS provides, and watches up to 20 frequent places you choose, never a hospital or pharmacy. AideMemo uses Apple Maps to name places you stay at often, to check whether a frequent place is a hospital or pharmacy, to find places you save or that your events name, to name where a group of your photos was taken, to name the places of your visits and photos when a model on your iPhone answers in Chat, and to draw maps, so Apple receives those coordinates and searches. Names found this way are kept only while AideMemo runs, apart from text the model writes with them. To show each day's weather in your Journal, AideMemo looks up the area of the places recorded that day, and for the hours to come the place a timed event or a location reminder names, each as a map cell about 5 km across, with the dates. Today and the days ahead come from Apple Weather, asked from your iPhone and not stored; days that have ended come from Open-Meteo, through our weather service, and are kept with the day. Turn it off with Show weather in Journal, in Settings › Location & Motion › Weather.
• Journaling Suggestions. If you pick one of Apple's Journaling Suggestions, AideMemo saves only its places: their names, city, coordinates and date.
• Health and Motion. Steps, walking and running distance, workouts and their routes from Health; and from Motion, your activity (walking, running, cycling, driving or still) and steps, to tell how you travelled between places and to confirm visits. AideMemo only reads; it writes nothing to Health.
• Calendar and Reminders. AideMemo keeps a copy of your events and reminders from 7 days back to 31 days ahead, with their titles, notes, locations, links, organisers and attendees' names and email addresses. If you allow it, AideMemo can also create, change, complete or delete items in the calendars and lists you choose, when you run a request or a standing instruction you set up.
• Contacts. AideMemo uses your own contact card to greet you, and looks through your contacts on the iPhone to recognise people in your calendar events, without keeping them. Matches you make yourself are saved.
• Microphone and speech recognition, to record and transcribe.
• Notifications, for reminders scheduled on the iPhone, and for the AI assistant connections described below.

Siri, Spotlight and Apple Watch

• AideMemo adds your notes, moments and the names of your places to your iPhone's Spotlight index, which stays on the device, and to Siri and Shortcuts. Voice transcripts are added only if you turn that on. Photos, location, Health, calendars and email are never indexed.
• The Apple Watch app records audio and sends each recording to your iPhone. It has no network connection of its own.

AI and transcription

On your iPhone, by default

AideMemo answers in Chat, summarises recordings and writes your Memory Summary with a model on your iPhone: Apple Intelligence on iPhones that support it, or a model you download. Apple's speech recognition transcribes your recordings on the iPhone. AideMemo never falls back to the cloud on its own. Your Memory Summary and personal facts are only ever processed on the iPhone.

Downloadable models come from Hugging Face (huggingface.co), so a download reaches Hugging Face like any download; the model then runs on your iPhone. Apple's speech languages download from Apple.

Online text models, with your own key

You can add an online model from Anthropic, Google (Gemini), DeepSeek, Moonshot (Kimi), Zhipu, MiniMax, OpenRouter, SiliconFlow, OpenAI, Groq, Alibaba (Qwen), ByteDance (Doubao) or an endpoint you enter, with your own API key. Your key is kept in the iPhone's Keychain, on this device only. Settings shows what choosing one means before you switch.

When you choose an online model, AideMemo sends that company text:

• your question and the recent answers in the conversation;
• the text of the records relevant to it: notes, transcripts, places and visits, calendar details including attendees, email files you imported, and the descriptions and recognised text of photos, with when they were taken and, for photos you chose, where (the descriptions of library photos written with full Photos access included);
• Health and Motion values (your steps, walking and running distance, workouts and motion activity), only while you allow it for that provider: AideMemo asks when you choose an online model, and when you turn on Health or Motion while one is chosen. The allowance covers one provider at a time, and Send Health data to the provider, under Online Text Model in Settings › Health, turns it off at once; workout routes are never sent.

Never sent to an online text model: mail and activity from your connected accounts, YouTube, your Memory Summary, personal facts, and image or audio files. A copy you save into your memories yourself is treated like your other memories. The provider handles what it receives under its own terms and your account with it.

Cloud transcription, with your own key

You can add a transcription service from OpenAI, ElevenLabs, AssemblyAI, Deepgram, Speechmatics, Soniox, Gladia, Google Cloud, Microsoft Azure, Groq, Alibaba (Qwen), MOSI, ByteDance (Doubao) or an endpoint you enter, with your own API key. When you choose one and transcribe a recording, AideMemo uploads that recording's audio to it. Nothing is transcribed automatically: a recording is uploaded only when you ask for it to be transcribed. Where a service keeps uploads until they are removed, AideMemo asks it to delete what it created once the transcript arrives. The service handles the audio under its own terms.

iCloud and backups

iCloud sync — off until you turn it on

When you turn on Sync with iCloud, AideMemo keeps your library in your own private iCloud database, under your Apple Account, so your devices share it. We cannot read your private iCloud database.

• What syncs: notes, moments and places; voice recordings with their audio and transcripts; the photos you chose, with their details; visits, daily routes and frequent places; the weather of days that have ended, kept for your Journal; files you imported; the memories kept from Trakt and Bangumi, as their sections below describe; your settings for each source; a record of each of your devices (its name, type, and system and app versions); and which items you hide from the Journal, each as an identifier, never its title or content.
• What never syncs: Health and Motion, and the copies of your calendars and reminders, apart from the identifier of an item you hide from the Journal; anything else from connected accounts, the descriptions of library photos, Chat conversations, your Memory Summary and personal facts, keys and sign-ins, and downloaded models.
• Optimize recording storage, off by default, removes older audio from the iPhone once its iCloud copy is confirmed, and downloads it again when you play it.

AideMemo doesn't add encryption of its own to what it syncs. Whether your iCloud data is end-to-end encrypted depends on your iCloud settings, such as Advanced Data Protection. Pausing sync keeps what is already in iCloud; see Deleting your data for removing it.

Your iPhone's backups

If you back up your iPhone to iCloud or a computer, the backup includes AideMemo's data like any other app's: your library, what AideMemo has read from Health, Motion, Location and your calendars, your personal facts, and Chat answers and Memory Summary written from connected accounts. What AideMemo downloads from connected accounts is excluded from backups, apart from the recent Threads, Trakt and Bangumi records that are kept as your memories, and records you choose to share with an assistant. Backups are kept under your own Apple Account or on your own computer.

Friends

You can share a day with people you invite, through iCloud sharing: only the people you invite can see it, read-only, with no public link. You choose which of the day's records to share. Photos and recordings are shared as their original files, with details such as when and where a photo was taken. Days friends share with you are kept on your iPhone.

Health, Motion and connected accounts' activity are never shared; a day that depends on them can't be shared. You can stop sharing a day, or disconnect entirely; editing or deleting a shared record withdraws that day.

Connected accounts

AideMemo reads an online account only after you connect it. It talks to the provider directly from your iPhone, except that signing in to Threads and Bangumi passes through our sign-in service (see Services we run). Sign-in tokens are kept in the iPhone's Keychain. What AideMemo downloads from an account is never shared with friends, and never sent to an online text model or to us. It stays on your iPhone and is not synced by AideMemo, apart from the memories kept from Trakt and Bangumi, which are also in your iCloud while Sync with iCloud is on. It is excluded from backups, with two exceptions that are kept as your memories: Threads, Trakt and Bangumi records from the past 7 days, and the handful of recent Trakt or Bangumi records you choose to share with an assistant. Each account below says what it reads and how to disconnect it.

Email by server settings, and email files

• You can add an email account by its server settings. AideMemo currently checks that the sign-in works and does not download your mail. The app password is kept in the iPhone's Keychain, on this device only.
• Email and text files you import yourself become part of your library: they sync if iCloud sync is on, and their text can be sent to an online model if you choose one.

AI assistants and servers you add

AI assistants you connect

You can let an AI assistant, such as Claude, search and read the memories you choose to share. Nothing is shared until you create a connection and choose what it may read. See AI assistants for how it works.

• What can be shared: the kinds of memories you pick — notes, moments, voice, places, calendar, reminders, photos, location — where photos, with full Photos access, include the descriptions AideMemo writes of recent photos in your library, never the photos themselves; and, while one is connected, Trakt or Bangumi records (titles, dates, statuses and your comments, with links; for Bangumi, private entries and tags included), chosen for each connection. AideMemo keeps its copy of those records with your shared memories, and deletes it when you disconnect the account or no connection shares it any more. For a period you choose, from the last 7 days to all time. Health, Motion and email are never offered.
• How: the assistant calls AideMemo's relay, the relay wakes your iPhone with a notification, and your iPhone answers from its own copy of what you shared, which is included in its backups. The question and the answer pass through the relay only while the request is answered; it keeps neither.
• Connecting from the assistant: the relay holds the connection request for at most 5 minutes while it waits for you to approve, and for at most 10 minutes after you approve, while the assistant finishes connecting. Then it deletes it. While it waits, the request holds the assistant's name, the requesting browser and device, an approximate place from its network address and a keyed hash of that address, which can't be matched to an address without a key only the relay has. When you approve or decline, the relay erases the browser, device, place and hash; after you approve, it holds the connection's encrypted token until the assistant collects it. Cloudflare, which hosts the relay, keeps a recovery history of the relay's storage, documented as 30 days, and a deleted request may remain in it. AideMemo never reads or restores that history.
• The assistant's company keeps what its assistant reads under its own terms: for Claude, Anthropic. AideMemo names the company before you create the connection.
• Control: every access shows a notification, and Recent Access lists the searches on your iPhone. You can pause or delete a connection at any time; deleting it makes its address stop working. What an assistant already read stays with its company.

Servers you add

If you add a connector server yourself, AideMemo sends it only what you enter when you run one of its tools.

Services we run

AideMemo runs no server that stores your library. It uses three small relays, all hosted by Cloudflare:

• The sign-in service (aidememo-oauth.leto-72d.workers.dev) completes Threads and Bangumi sign-ins: it exchanges a one-time code for a token, returns it to the app and keeps nothing. Its logs are turned off.
• The assistant relay (mcp.aidememo.com) passes requests between assistants and your iPhone as described above, using Apple's push service to reach your iPhone. It keeps nothing once a request is done, and its logs are turned off.
• The weather service (api.aidememo.com) looks up the weather of days that have ended, for your Journal; forecasts come from Apple Weather directly. It receives only a map cell about 5 km across and a range of dates, with no identifier, and asks Open-Meteo, which answers without seeing your network address. It keeps nothing, and its logs are turned off.

Cloudflare processes connection data, such as IP addresses, to run these services, under its own policies. This website sets no cookies, runs no analytics and loads nothing from anyone else; it is hosted by Vercel, which handles requests to it in the same way.

The other companies AideMemo connects to are Apple (iCloud, push notifications, Maps, Weather, Apple Music and speech downloads), Hugging Face for model downloads, Open-Meteo for the weather of past days, through our weather service (it keeps its own logs, with the map cell and dates but nothing that identifies you, for up to 90 days), and the providers and accounts you choose, as described above.

Deleting your data

• A record: delete it in the app. If sync is on, it is deleted from iCloud too; if it was shared with friends, that day is withdrawn. A memory you delete waits 30 days in Settings › Memory › Recently Deleted, on that iPhone only, where you can restore it or delete it at once; after that it is deleted for good.
• A connected account: turn off its use, or delete the connection, as its section above describes. Removing access at the provider may also be needed.
• A memory kept from Threads, Trakt or Bangumi: Delete Memory on its card; it is not kept again unless you restore it from Recently Deleted within 30 days. Trakt and Bangumi memories stay after you disconnect, until you delete them.
• Threads through Meta: if you ask Meta to delete your data, Meta tells our sign-in service, which holds nothing about you; delete the connection in AideMemo to remove what is on your iPhone.
• Health data: Delete Imported Health Data, at the end of Settings › Health, deletes everything AideMemo imported from Health at once, with the Chat answers written from it. The Health app is unchanged.
• An AI assistant connection: delete it in AideMemo.
• iCloud: in iOS Settings, open your name › iCloud › Manage Storage, choose AideMemo and delete its data.

What deleting the app does not reach: AideMemo's data in your iCloud, days shared with friends, access you granted at providers that AideMemo does not revoke itself (such as Microsoft, Bangumi and Threads), connection addresses saved in assistants, and your iPhone's existing backups until they are replaced. Nor can deleting anything in AideMemo recall what an online model, a transcription service or an assistant already received; removing it there is a request you make to that company. AideMemo has no single button yet that deletes everything at once.

Children and teenagers

AideMemo is for people aged 13 and over.

Where a law requires an age check, AideMemo asks Apple for your age range: today in Texas, and from 2027 also in California and Alabama (1 January), Utah (6 May) and Louisiana (1 July). It asks when the app opens, and at most once a day after that; Apple shows its own prompt when it needs to. AideMemo receives only an age range (under 13, 13 to 15, 16 to 17, or 18 and over), never your date of birth. Everywhere else, it asks nothing and treats you as an adult.

• Under 13: AideMemo can't be used.
• If your age can't be confirmed where the law requires the check, AideMemo stays closed until it can be.
• Aged 13 to 17: you can use AideMemo, with these limits. Health and Motion data is never sent to an online AI model. AI assistant connections are unavailable, and existing ones are paused. When you share a day with friends, locations (places, visits, and where photos were taken) are left out unless you include them for that share.
• What AideMemo keeps, on your iPhone only: a minor's age group (never an adult's), when the check last succeeded, which updates it has already handled, and the last App Store age rating it saw for AideMemo. It is not backed up, never synced, and never sent to us, to friends, to assistants or to any AI model.
• Significant updates: where the check applies, a parent or guardian may be asked, through Apple, to approve a significant update before a teenager keeps using AideMemo. Adults may see Apple's notice of the change.
• Withdrawing consent: a parent or guardian can withdraw consent through Apple, and Apple then stops AideMemo from opening.

Recording other people

AideMemo records what you choose to record. Laws on recording conversations differ by country and state, and in many places recording another person requires their knowledge or consent. Complying with the law where you are is your responsibility; the app does not and cannot check it for you.

Your rights

Because there is no AideMemo account and our services keep nothing, we usually hold nothing that identifies you, and requests to see or erase your data are answered by the controls on this page. Wherever you live, you can write to us with a question, a correction or a complaint, and we will answer.

If you live in Washington or Nevada, our Consumer Health Data Privacy Policy describes your rights over consumer health data, how to use them, and how to appeal.

Changes

We will post changes on this page and update the date at the top. If a change widens where your data goes, the app will tell you and ask, rather than relying on this page alone.

Contact

Write to leto@proairos.com about anything on this page. It reaches the people who build the app rather than a queue.

Apple, Apple Music, iPhone, Apple Watch, iCloud and Apple Intelligence are trademarks of Apple Inc., registered in the U.S. and other countries. AideMemo is an independent app and is not affiliated with or endorsed by Apple, Google, Microsoft, Meta, X, Trakt, Bangumi, Tencent, Hugging Face, Anthropic or any other company named on this page.