1Scope and data controller
This Privacy Policy explains how Memento Daily collects, uses, shares and retains personal data when you use the service, including its assistant and personal memory, Calendar, Messages, hotel bookings, flight search and Memento Support.
Memento Technologies, registered with RCS Paris under number 109 078 113, with its registered office at 10 rue de Penthièvre, 75008 Paris, France, is the controller for the processing described in this policy.
For privacy enquiries and requests to exercise your rights, contact support@mementodaily.com or write to our registered office.
2Personal data we process
We process information you provide, information generated through your use of the service, and information received from users or external services with which you interact. The categories depend on the features you use.
- Account and profile: email address, sign-in method (email, password, Google or Apple), name or pseudonym, @handle and its previous versions, profile picture, language, time zone and preferences.
- Content and personal memory: messages, photos and attachments, memory files (including your taste card and Memento’s private notes on your tastes), pages Memento writes for you, conversation summaries, saved places and hotels, calendar activities and rituals.
- Social activity: friends, blocked users, your personal invitation code, invitations, group membership, and the messages, reactions and content you share with other users.
- Location: places you enter and, when you allow access, your device’s position, which may be precise. Memento also keeps the town and neighbourhood where it last saw you, with the time, so a later message, such as a morning note, can speak about your weather and surroundings; each new position replaces it, and it never contains coordinates.
- Billing: the charges you hold and how each was obtained (welcome, reward, invitation, booking, goodwill or purchase), a keyed fingerprint of your email address and of your Apple or Google account identifiers recorded with a welcome or invitation charge, payment and receipt references, payment status, the record of your acceptance of the Terms of Service and of the request for immediate supply and acknowledgement of the loss of the right of withdrawal given at checkout on the website, and billing information received from Stripe. For a purchase in the iOS or Android application: the store’s transaction or order reference, the product and quantity bought and, for the App Store, the price paid and its currency, as received from Apple or Google, and any refund the store reports. Payment-card details are collected by Stripe, Apple or Google; Memento does not store full card numbers or security codes.
- Travel: your hotel and flight searches and their history, the hotels and flights you heart, your travel conversations, your hotel bookings (the stay, prices, booking and payment references, the booking’s status, changes, cancellations and refunds, the hotel’s check-in instructions) and the flights you tell us you booked on an airline’s website, with the airline’s reference if you add it. To make a hotel booking, the lead guest’s name and email address are transmitted to Nuitée. A request to change a hotel guest’s name keeps the name and email address requested. When you open an airline’s website from Memento, the link carries only the trip (its airports, dates, cabin and the number of travellers of each age) and your language, never your name or contact details; the airline’s own privacy policy then applies. The country you give to see prices may be saved to your profile.
- Support: your conversations with the Memento Support assistant, the requests you send to our team, which are emailed to them with your email address so that we can reply, your feedback and the ratings you give to answers. Memento may keep short notes about your support history in your memory folder.
- Invitation integrity: when you open your own invitation code or use someone else’s, a keyed, irreversible fingerprint of a random identifier kept in your browser or app. It is used only to detect duplicate or fraudulent invitations; the identifier itself is not stored for this purpose.
- Technical and operational data: account and session identifiers, connection and device information, errors, usage, provider costs and execution records. Diagnostic records may include conversation content, model inputs and outputs and tool results.
- Optional integrations and notifications: Google Calendar information and access credentials, Apple Calendar information read by the iPhone app, the private address of your calendar feed, synchronisation status and browser notification subscriptions.
3Purposes and legal bases
We use personal data for the following purposes and on the corresponding legal bases:
Account information and the data needed to fulfil a request are necessary to provide the relevant service. Optional profile details, integrations and device permissions are not required to create an account; declining them may prevent the related feature from working.
- Performance of the contract: account management, assistant responses and actions, personal memory, requested or configured background tasks, calendars, social features, travel searches and bookings, support and the administration of your charges and purchases.
- Legitimate interests: maintaining security and reliability, preventing abuse, diagnosing incidents, accounting for provider costs and understanding service use. These interests must be balanced against your rights and reasonable expectations.
- Consent: optional access to device location, microphone or camera, and other processing for which consent is required. You may withdraw consent at any time without affecting the lawfulness of earlier processing.
- Legal obligations: accounting and tax records and responses to binding legal requests.
4Personalisation and sharing
The assistant uses conversations, memory files and relevant information from your Memento environment to personalise responses and carry out tasks. It may infer interests or preferences and organise memory after a conversation. You can inspect and manage memory files in the application.
Messages and content you share are visible to their recipients or to the members of the relevant group or event. When the assistant takes part in a group conversation, it processes the conversation and relevant member context to respond and organise shared activities. Your private memory and your personal or synced calendars may inform a relevant suggestion, but they are not shared with other members by default: the assistant must explain its suggestions without revealing private facts or availability. Event details may be discussed when they are shared with all recipients. Automated checks review responses before they are posted; generated responses can still contain errors.
An edited message is marked as edited. Unsending a message erases what it said, its pictures and its reactions; the conversation only shows that a message was unsent.
Some information is visible beyond your friends. Signed-in users can find you by your @handle and see your name and profile picture. Anyone who opens your invitation link or QR code sees your name, @handle and profile picture. Anyone with an event’s share link sees the event and its host’s profile card. Anyone who holds your calendar feed address can read the activities it contains, so keep that address private.
Deleting a memory file does not automatically delete the conversation or other source from which it was created. Those sources must be managed separately. Content already copied or received by another person may remain in that person’s possession.
We do not sell personal data or use it for targeted advertising.
5Calendar connections
Connecting Google Calendar is optional and separate from signing in. After you approve Google's permissions, Memento reads event names, start and end times, all-day dates, locations and availability from your primary calendar. It does not retrieve event descriptions or attendee lists through this integration, and it does not edit your primary-calendar events.
These details appear in Memento Calendar and in your personal agent's calendar context, so it can answer calendar questions and plan around your commitments. The agent can read a date range beyond the usual sync window. Calendar context is sent to the AI provider that runs your agent, Anthropic (OpenAI when it stands in), to produce these personal planning responses, including when relevant calendar context accompanies a conversation.
Memento stores a local copy of synced event details in its database, together with connection and sync status. OAuth credentials are encrypted and used by the backend to refresh access while you remain connected. Our hosting and AI processors handle this information to provide these features, as described below.
With the separate permission for calendars created by the app, Memento maintains a secondary Google calendar that mirrors your Memento Calendar activities, such as their title, time, place and booking references. This allows Memento to create, update and remove these entries without changing the original events in your primary calendar.
Disconnect in Settings to stop further reads and remove the saved connection credentials and synced-event cache. Memento also attempts to remove its secondary Google calendar and revoke Google's grant. You can revoke access directly in your Google Account. Disconnecting does not erase calendar information already included in your conversations or memory files; those remain subject to your account's deletion controls described below.
You can also subscribe to Memento Calendar from Apple Calendar or another calendar application through a private feed address. That application then fetches your activities, with their title, time, place and booking references; anyone who holds the address can read them.
In the iPhone app, you can connect Apple Calendar instead. Once you allow the app to access your calendars in iOS, it reads event names, start and end times, all-day dates, locations and availability from the calendars on your device (for example iCloud), except subscribed and birthday calendars, and sends them to your account, where they are used as described above for Google Calendar. Event notes and attendee lists are never sent. The app also keeps a calendar named Memento on your device with your Memento Calendar activities. Both are refreshed only while the app is open. Removing the connection in Settings deletes the synced copy and, on that device, the Memento calendar; you can withdraw the app's calendar access at any time in iOS Settings.
We use Google Calendar data for your calendar and personal planning features. We do not sell it, use it for advertising or use it to train general-purpose AI models. Memento's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
6Artificial intelligence and attachments
To generate responses and perform tasks, Memento sends conversation content and relevant context, such as memory, calendar information, your recent position and tool results, to Anthropic, whose Claude Haiku model runs the assistant for every account. When Anthropic is unavailable, OpenAI’s GPT-6 Luna model can run it instead, and receives the same content. The provider running the assistant also performs the web searches and page reads it asks for. OpenAI provides memory search and the transcription of voice dictation.
To rank options, Memento sends the options and a filtered summary of what you are looking for and of your tastes to Jev, TypeSafe’s ranking model, through OpenRouter; if that route fails, the same request goes to OpenAI.
When the assistant needs a website, it uses an anonymous cloud browser run by Browserbase: the sites see that browser rather than your device, and receive what it types. When you take over that browser to finish a step, what you type there is also processed by it. Your language and recent position may be used to show local results. Pages the assistant reads directly are fetched through Exa, which receives the page address.
What you write and attach, including any names, contact details or document numbers it contains, is sent to the AI provider running the assistant as it is: Memento does not filter it first. Please do not share details you do not want processed, such as payment-card numbers or passwords.
Memento does not itself use your conversations to train general-purpose AI models. Anthropic and OpenAI process requests under their commercial API terms and data controls; API data is not used for model training by default.
7Service providers and other recipients
Personal data is processed by Memento and the providers needed to deliver the features you use. Depending on the service and purpose, a provider may act as a processor on our behalf or as an independent controller, particularly for its own payment, fraud-prevention or legal obligations.
Data may also be disclosed to the recipients you choose and to competent authorities where required by law. External sites you visit through links process information under their own privacy policies.
- Supabase: database, authentication, sign-in emails and file storage.
- Google Cloud: hosting of the assistant backend, in the European Union.
- Vercel: web hosting and web audience measurement.
- Stripe: payment for charges, and receipts.
- Nuitée Travel Limited (Ireland), which operates LiteAPI: hotel searches and bookings, their payment, changes, cancellations, refunds and support, and flight searches. Its payment form, provided by Stripe, is loaded by your browser or the application. Nuitée acts as an independent controller for the bookings it sells and passes the necessary details to the hotel.
- Resend: delivery of receipts, booking emails, notification emails and support requests.
- Anthropic: AI processing for the assistant (Claude), with its web searches and page reads.
- OpenAI: AI processing when it stands in for the assistant, memory search, transcription and the fallback route for ranking.
- OpenRouter and TypeSafe: the ranking of options by Jev.
- Browserbase: the anonymous web browser used by the assistant.
- Exa: reading web pages from their address.
- Apple: Sign in with Apple, and the App Store’s in-app purchase of charges in the iOS application, with its receipts and refunds.
- Google: sign-in with Google, Google Play’s in-app purchase of charges in the Android application, with its receipts and refunds, Google Calendar, and Google Maps Platform for place search and directions and for the place cards your browser loads from Google, which receives your IP address.
- Geoapify, Photon (Komoot) and Nominatim (OpenStreetMap): place search, geocoding and routing. Requests may include search text and coordinates.
- Open-Meteo: weather forecasts for a place or an event, requested by our servers or by your browser.
- OpenFreeMap and Unsplash: maps and pictures loaded by your browser, which exposes connection information such as your IP address to those services.
- Your browser’s push service, run by its vendor (such as Google, Mozilla or Apple): delivery of encrypted notifications.
8International transfers
The assistant backend is hosted in the European Union and the website’s servers in France. Several providers, including Anthropic, OpenAI, OpenRouter, Browserbase, Exa, Resend, Stripe, Apple and Google, may process data in the United States or in other countries outside the European Economic Area. To perform a hotel booking you request, the necessary guest details may be transferred to a hotel outside the European Economic Area.
Where the GDPR applies, transfers to a country without an adequacy decision require an applicable transfer mechanism, such as the European Commission’s standard contractual clauses, and any necessary supplementary safeguards. You may contact us for information about the locations and safeguards applicable to your data, or to request a copy of the relevant safeguards.
9Retention and deletion
Account information and saved content are retained while your account remains active, unless you delete them earlier through the available controls. Connected-calendar credentials and imported copies are removed when the integration is disconnected, as described above.
Some records keep only the most recent entries: your travel search history keeps your last 2,000 searches and saved items your last 300. The place where Memento last saw you is a single entry, replaced by each new position.
Diagnostic records, which can contain conversation content as described in section 2, are kept for 14 days, except those needed to reconcile a payment, which are kept for as long as that requires. Usage and cost records are kept while your account remains active.
Hotel booking records are kept while your account remains active. When you delete your account, the record of each booking is kept for ten years, as French accounting law requires, without your name, the travellers’ names or any contact or check-in details, and unpaid holds are erased at once. The flights you told us you booked are activities in your Calendar: they stay until you remove them or delete your account. Nuitée and hotels keep their own records under their own policies, and airlines keep theirs for the flights you book with them.
Invoices and accounting documents subject to French accounting requirements are retained for ten years. Other records may be retained where required by law or necessary to establish, exercise or defend legal claims.
Account deletion removes the charges nobody paid for; the charges your invitations earned for a friend stay on that friend’s Pass but no longer refer to you. Records of completed purchases are kept for the period required by accounting and tax law, and payment records held by Stripe, Apple or Google follow their own retention rules. The record that an account was created through your invitation is kept to prevent abuse. So that the free charges given to new accounts (the welcome charge and invitation charges) go to each person once, when you receive one we record a keyed fingerprint of your email address (without its +tag, and for a Gmail address without its dots) and of your Apple or Google account identifiers, with which free charge it was. The fingerprint does not contain your address and is used for nothing else; it stays after your account is deleted and is erased 24 months after it was recorded. Messages and photos you sent in a conversation with other people remain visible to its members, without your name. Deletion from active systems does not necessarily remove residual backup copies immediately or copies already held by recipients or external providers; those copies are subject to the applicable retention and deletion procedures.
10Your rights and how to exercise them
Under the conditions provided by applicable data-protection law, you may request access, rectification, erasure, restriction of processing and portability of your personal data. You may object to processing based on legitimate interests and withdraw consent where processing relies on it. French law also allows you to give instructions concerning your personal data after your death.
You can inspect and edit what Memento knows about you in the application, and delete your account in Settings. Settings also provides an export of your data: your profile and friends, memory, your conversations and the messages you sent, your calendar, saved items, travel searches and bookings, support requests and charges. For anything else, or if you cannot access your account, contact support. We may request information proportionate to the need to verify your identity.
Send requests to support@mementodaily.com. We respond within one month of receipt. Where the GDPR permits an extension because of the complexity or number of requests, we will inform you within that first month and explain the reasons; the extension cannot exceed two additional months.
You may lodge a complaint with the CNIL or another competent supervisory authority, including the authority in your country of habitual residence, workplace or the place of an alleged infringement. You do not need to contact us first.
11Cookies, local storage and analytics
Memento uses cookies and local storage for sign-in, session security, preferences such as language and notification or analytics settings, and a random identifier used to protect the invitation offer against abuse. Clearing browser storage may sign you out and reset local preferences; it does not delete your account. The payment forms of Stripe and Nuitée may use their own cookies or storage to prevent fraud.
The service uses Vercel Web Analytics for page-view measurement. Analytics is currently enabled unless you disable it in Settings or your browser sends a recognised Do Not Track signal.
Memento does not use advertising cookies. The absence of advertising cookies does not mean that the service collects no usage data.
12Device permissions and notifications
Location, microphone, camera and push-notification access depend on the permissions you grant. You may change these permissions in your device or browser settings. Disabling a permission stops future access through that permission; it does not automatically delete information already saved.
When you enable push notifications, we store the address your browser provides for delivering them and the information needed to send notifications to your account. This subscription is associated with your account and is not anonymous. If a notification cannot reach you, or a message from a friend stays unread, Memento may email you instead, at most three times a day. You can turn notifications and these emails off in Settings, or notifications in your device settings.
13Security
Memento uses access controls, authenticated connections and other technical measures to protect personal data. No system can guarantee absolute security. Please notify support if you suspect unauthorised access to your account or a personal-data incident.
14Minimum age
The service is intended for users aged 16 or over, subject to any higher minimum age required by applicable law. If you believe an account belongs to a person below the applicable minimum age, contact support so that we can investigate and take appropriate action.
15Updates and language versions
The date at the top of this policy identifies its latest revision. We will communicate material changes through the application before they take effect. Where a change requires consent, we will request it separately.
This policy is available in French and English. For persons resident in France, the French version prevails in the event of a discrepancy, without restricting rights under applicable data-protection law.