Privacy Policy for Momory

Controller

Refki Meholli · DevRef Softwareentwicklung, Cusanushof 54, 41812 Erkelenz, Germany.

Data on your device

Photos, places, recognised items, corrections and settings are stored on the device. They stay there until you delete them in the app or remove the app. Without purchased credit, no AI recognition runs and the app sends no photo anywhere: you mark the items yourself. On the device, only text and barcodes in the photo are read so that they can be searched. Even with credit, all photos stay on the device as long as recognition is set to “Off” in the app. Before the first transfer the app explicitly asks for permission; without this consent no photo leaves the device. You can withdraw it at any time in the app under Settings › Recognition. Notes such as “Lisa has it” and the return list also stay on the device; the reminder to put things back is a local iOS notification.

Analysis using credit

• The photo is uploaded, encrypted, directly to a private Google Cloud storage bucket in Frankfurt (region europe-west3) and analysed from there by Google Gemini
• A randomly generated device ID without personal reference, used to match the credit. It is kept in the iCloud Keychain of your Apple account so your credit carries over to a new device
• The Apple-signed purchase receipt, used to add purchased credit
• Time, model used and computing effort (tokens and the credits derived from them), for billing and abuse prevention
• IP address and technical connection data, for operation and security

Photos stay in this storage only for the duration of the analysis and are deleted right afterwards. If an analysis is interrupted, an automatic rule deletes them after one day at the latest. No photos are stored on our own server. We keep only the device ID, the credit balance and usage counters. This server is located in Germany and operated for us by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, as a processor.

Purposes and legal bases

• Transferring photos to Google (cloud storage and Gemini) for recognition, based on your consent, Art. 6(1)(a) GDPR, revocable at any time with effect for the future
• Providing recognition and search: Art. 6(1)(b) GDPR
• Handling the purchase and keeping the credit: Art. 6(1)(b) GDPR
• Abuse prevention, limits and technical security: Art. 6(1)(f) GDPR

Retention and deletion

Usage data is deleted after twelve months at the latest. The link between device ID and credit ends once the credit is used up and no records need to be kept. Local data can be deleted at any time in the app settings or by removing the app.

No ads, no tracking

Momory contains no advertising, no analytics SDK and no cross-device tracking.

Your rights

Within the legal framework you have the right to information, rectification, erasure, restriction, data portability and objection, as well as the right to lodge a complaint with a supervisory authority.

External services

Once credit is spent, image recognition runs through Google Cloud and Google Gemini. Google processes the transmitted photo and technical connection data as a processor. The photo is stored in Frankfurt; the analysis by Gemini may also take place in data centres outside the EU, in particular in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR). Details are available in the Google privacy policy.

Purchases are handled by Apple. Apple processes payment and account data under its own responsibility according to the Apple privacy policy. Apple privacy policy.

Contact

Please send privacy requests and deletion requests by email. As Momory works without an account, we will work out together with you which data is yours.

info@meholli-software.de

Momory support