Privacy by design

Most apps promise to protect your data. MemJog is built so it never has your data to begin with.

No accounts. No servers. No telemetry.

There is no MemJog account to create, no sign-in, no password. There is no MemJog server that receives your data. There is no analytics, no crash reporting, no usage tracking. The app cannot phone home because there is no home to phone.

This isn't a setting you toggle. It's the architecture.

Where your data lives

Your memories — audio recordings, transcripts, and the search index — live in a private database on your device. iOS uses the app's sandboxed container; Android uses app-private storage. No other app can read it. When you delete MemJog, all of it is gone.

Backups are your choice. If you back up to iCloud or Google Drive, your device's system-level encryption applies — MemJog has no involvement. You can also export directly to any destination you choose (a folder, a USB drive, another app) using your phone's file picker. MemJog never sees, stores, or has access to those backup files.

What leaves the device

One thing, once: the AI model download. MemJog transcribes your voice using a small on-device model that ships separately from the app (it's large). That model is downloaded over HTTPS from a pinned content-delivery address the first time you open the app. After that, nothing leaves your device ever.

The download is signed and verified before use. MemJog won't accept a model from anywhere else.

It never makes things up

When you search your memories, MemJog returns what you actually said — verbatim — or it tells you plainly that nothing was saved about that. There is no language model guessing or filling in gaps. This isn't a limitation; it's a design decision. Your memory bank should be a record, not a confabulation.

The business model

MemJog is free. The solo experience — capture, search, backup — has zero marginal cost because there's no server to run. We don't sell data (there is no data to sell). Paid features, when they exist, will be optional convenience: things like a hosted sync relay for people who want it. The core will always be free and fully functional offline.

This page is the plain-language version. The formal privacy policy is also available. Questions: support@memjog.app.