iMemo Privacy Policy
Effective date: October 16, 2026
iMemo (the "App") is a note app made by Choidev (choidev, the "Developer"). This policy explains what information the App handles, where it is kept, and who can access it.
Summary
- The Developer does not run any servers, so we cannot receive or view your notes, to-dos, photos, or attachments.
- All notes are encrypted with AES-256-GCM on your device before they are stored. Only encrypted data is uploaded to Google Drive.
- There are no ads, analytics tools, or usage statistics collection.
Information the App handles
| Information | Where it is kept | Purpose |
|---|---|---|
| Notes, to-dos, folders, photos, attachments, handwriting | On the device (encrypted), or in your app-only folder in Google Drive if you connect it (encrypted) | Providing app features, syncing and backing up across devices |
| Master password | Not stored | Used only to unlock the encryption key; the plaintext is not kept on the device |
| Google Account email address | On the device | Used only to show which account is connected on the settings screen |
| Fingerprint | Not received by the App | Fingerprint verification is handled by the Android system; the App only receives the success or failure result |
| Camera footage | Not stored | The camera is used only when taking a photo, and the captured photo is encrypted immediately and added to the note |
| Notification schedule times | On the device | Used only to trigger to-do reminders. Titles are not included in the schedule information |
Google user data (Google API)
The App may ask you to connect your Google Account for Google Drive sync. The only permission it requests is https://www.googleapis.com/auth/drive.appdata.
- With this permission, the App accesses only the hidden app-specific folder (appDataFolder) in your Drive. It cannot read or change other files and folders you keep in Drive.
- The App writes only data that has already been encrypted on the device to that folder. Without your master password or recovery key, no one can read the contents, including Google and the Developer.
- Information received through Google APIs moves only between your device and your Google Drive. It is not transferred, sold, or shared with the Developer or any other third party. It is not used for advertising, and no humans read it.
- How iMemo uses and transfers information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.
Third-party disclosure
The Developer does not provide your information to third parties. The App uses Google Play services on your device for Google Account sign-in, and Google provides Google Drive storage. Google's processing is subject to the Google Privacy Policy.
Retention and deletion
- Data in the App stays on your device until you delete it. You can erase everything on the device via Settings > Security > Erase All Data.
- You can stop Google Drive sync via Settings > Google Drive > Disconnect. To delete the encrypted copies left in Drive, go to Settings > Manage apps > iMemo > "Delete hidden app data" on the Google Drive website.
- You can revoke the App's access at any time in Google Account > Security > Third-party apps and services.
- The Developer holds no data, so even if you ask the Developer, we cannot view, recover, or delete it on your behalf.
Security
- Notes are protected by a master password strengthened with Argon2id and by the device's hardware-backed security key (Android Keystore).
- Screenshots and recent-app previews are blocked, and Android auto-backup is turned off.
- If you lose both your master password and your recovery key, there is no way to recover the data. This is by design.
Children
The App is not directed at children under 14, and we do not knowingly collect information from children.
Policy changes
When we change this policy, we will post the update on this page with the effective date. Significant changes will also be announced in app update notices.
Contact
For privacy questions: choidev97@gmail.com