Privacy Policy

MemoraKeep is provided by SIMPLESPACE LIMITED (“we”, “us”). This policy covers our Windows and macOS applications, website, download services and support services. Local archive processing and information sent to our services are described separately below.

Privacy contact: [email protected]

Postal address: Room 532B, 5/F, Star House, 3 Salisbury Road, Tsim Sha Tsui, Kowloon, Hong Kong.

At a glance

• Your backups and personal archive are processed on your computer. Ordinary backup, import, browsing, search and export operations do not automatically upload archive content to our servers.
• Our services receive technical information when you visit the website, download software, check for updates or use online support. The website installer also reports installation events as described below.
• Sending feedback is optional. Messages, an optional email address and attachments you submit are received by our support service.
• Support records and download/installation statistics have a retention period of three years, as explained below. Hiding a feedback conversation does not delete its server record.

Personal information processed locally

Depending on the sources and features you choose, MemoraKeep accesses backups, messages, contacts, names, telephone numbers, photos, videos, audio, documents, browser records, device details and associated metadata. These records can contain personal information about you and other people.

The app uses this information to perform the operations you request, including backup, import, organization, viewing, search, merging and export. Archive databases, search indexes and associated files are stored on storage you control. The current local archive workflow does not require a MemoraKeep account.

You choose what to import and where to save or export it. Exporting, copying or transferring files makes them available at the destination you select. If you choose a cloud-synced folder or share an exported file, that service or recipient may receive it; this is separate from uploading content to MemoraKeep. Only process or share other people’s information when you are entitled to do so.

Local logs and optional diagnostics

The app writes operational logs and crash information locally. Original logs may contain paths, device details or personal information. Crash files are not automatically sent to our support service.

In client versions whose feedback dialog states that log messages are replaced with ***, diagnostic attachments are prepared on your computer before transmission:

• Free-form log messages are replaced with ***; only recognized, valid timestamps and severity levels are retained.
• Original filenames are replaced with numbered diagnostic filenames.
• Only eligible text logs are packaged. Binary dumps, existing archives and files that cannot be safely decoded are excluded.
• The original local log files are not overwritten by this process.

Issue reports in these versions offer an Attach diagnostics checkbox, selected by default. You can clear it before submitting. Nothing in the feedback attachment is sent until you submit the report. Earlier versions may attach original logs without this protection: check the dialog, update to a version with the redaction notice, or omit diagnostic attachments.

Text, email addresses and images you add yourself are not automatically redacted. Review them before sending; do not include passwords, recovery keys, complete backups or unrelated private content. Files you send separately by email do not pass through the app’s diagnostic redaction process.

Feedback and support

When you submit feedback, we receive its title and message, any email address you provide, app and operating-system versions, and the diagnostic files or images you attach. When you email us, we receive your sender address, message and attachments. We use this information to respond, investigate problems and improve the product.

In-app conversations use a private access key saved in the app’s settings. The service stores a hash of that key to authorize access to the conversation. Conversations are tied to that installation and do not automatically sync between devices. Authorized support staff can view submissions and attachments and reply to you.

Downloads, installation and update checks

Online requests expose an IP address and request metadata to the service receiving them. Our download service records the requested release, operating system, channel, version, filename, time, User-Agent and a salted hash derived from the IP address. Hashing reduces direct exposure of the address in these statistics; it does not make the record necessarily anonymous.

The standalone Windows installer downloaded from our website reports installation, update and uninstall events by default. Reports can include a randomly generated installation identifier, event identifier, operation, result, error code, system, architecture, release channel, version and duration. The server also records an IP hash and User-Agent. These records help us measure distribution and investigate installation failures; they do not include the contents of your archive.

You can disable this installer’s event reporting by launching it with --no-report. This does not prevent the network requests needed to download software or the download service’s statistics. This installer behavior is separate from Microsoft Store installation and update processing. Update checks also contact an online service to obtain release information.

Website preferences and service providers

The website stores theme and language preferences in browser local storage (mk-theme and mk-lang-pref). These preferences are not archive content. You can remove them by clearing site data in your browser. See the Cookie Policy.

Operating the website, downloads, API and email support involves hosting and email service providers that process the requests or messages delivered through their infrastructure. Network requests necessarily expose connection information such as an IP address; server or provider logs may also record technical request details. These providers do not receive your local archive merely because you use the app locally.

If you obtain the app through Microsoft Store, Microsoft processes Store-related information under its own privacy statement. Third-party services you choose to use are also subject to their own policies. This policy does not claim that future account or subscription features are already available; we will update it when such features change our data processing.

Storage and security

Our app’s support and release endpoints use HTTPS. Support conversations are protected by their access key, and administrative access requires authentication. Keep your computer, app settings and access credentials secure.

Local-first storage is not a promise that every local file is encrypted. Protect your archive and logs with suitable device access controls, disk encryption and backups. No storage or transmission method can guarantee absolute security. See our security page for reporting security concerns.

Retention and deletion

Local backups, archives and exports remain on your storage until you delete them. Uninstalling the app does not automatically delete your archive folder. Copies in your own backups, shared folders or third-party storage must be managed separately.

Our retention policy is to keep support conversations, their attachments and support email for up to three years after the last interaction, and download and installation statistics for up to three years after the event. At the end of that period, records are to be deleted or irreversibly anonymized. A valid earlier deletion request can shorten this period. Where applicable law requires a longer period, we limit that retention to the information and time required.

In-app feedback disappears from the client 30 days after creation; subsequent replies do not extend that display period. Deleting a conversation in the client hides it immediately. Neither action deletes the server copy or changes the three-year retention policy.

To request access, correction or deletion of information held by us, email [email protected]. Include enough information to locate the relevant correspondence or conversation, but do not send your private access key or archive. We may ask for proportionate verification before acting. Depending on your location, you may also have rights to object, restrict processing, request portability or complain to the relevant privacy authority. We cannot remotely delete files stored solely on your computer.

Changes and contact

We update the date above when this policy changes. Material changes to what information we handle will be explained before the affected new collection or feature is introduced. For questions or privacy requests, contact SIMPLESPACE LIMITED at [email protected], use our contact page, or write to the postal address above.