Privacy Policy

Effective September 28, 2026 · Last updated October 19, 2026 (dictation on Apple Watch and on the Lock Screen, images from other websites, cancelling the sign-in when signing out, the diagnostics report, what the App Group holds, and memos shared to a removed account)

CapMemos collects no data. The developer runs no servers and cannot see your memos. They stay on your iPhone; if you connect a server, they travel only between your iPhone and the Memos server you entered.

What we don't collect

• There are no accounts; you never sign up with the developer.
• No analytics, ads or third-party tracking, and no record of how you use the app.
• Your memos, images, tags, server address and user name are never sent to the developer or anyone else. The one exception is what you say on Apple Watch; see Microphone and dictation below.

Where your data is

• Your iPhone. To work offline, the app keeps all your memos, drafts, images waiting to upload and an image cache in its own storage. Without a server, they stay on this iPhone and go nowhere. They are included in your iPhone's iCloud or computer backup if you back up, which Apple handles; CapMemos itself does no cloud syncing.
• Your Memos server. Once you connect a server, memos, images and sign-in requests go only to the server you entered, over an encrypted connection (HTTPS) by default. If a memo shows an image from another website, the image is loaded from that website when the memo is shown (as in a browser, that website can see the image being loaded). If the server only supports HTTP, the app says so plainly at sign-in and in the account list: content then travels unencrypted, and others on the same network may see it. Memos marked This iPhone Only are never uploaded. Data on the server is the responsibility of whoever runs it, usually you.
• Extensions and widgets. The share extension, widgets and Shortcuts read and write a small shared file on the device through the system's App Group (account names and server addresses, frequent tags, how many memos you wrote), without any network. Memos and images handed over by the share extension, Shortcuts and Apple Watch also wait there until the app puts them into their account's library; if the account picked when sharing has since been removed, they stay there and appear under Sync in the app, for you to put into the current account or delete. Only when you add the On This Day widget does the app place the opening lines of some older memos there (up to 240 characters each) for it to show; they are removed the next time you open the app after removing the widget.
• System search. By default, memos are added to the system search (Spotlight) index. The index stays on the device and can be turned off in the app's settings, which clears it.

Signing in

• CapMemos never keeps your password. When you sign in on the web, the page comes from your server and opens in a separate web view that keeps no cookies.
• After you sign in, the server gives this iPhone a sign-in of its own (shown in Memos as an access token named “CapMemos · device name”), kept in the system keychain, on this device only and never moved with a backup.
• Signing out or removing the account deletes the sign-in on this iPhone; cancelling it on the server is a separate step: the app asks the server to, but without a connection, or if the server fails, it may not happen. If you signed in by pasting your own access token, the app doesn't cancel it at all. Whatever wasn't cancelled can be deleted in the settings of your Memos website (the one the app made is named “CapMemos · device name”).

Microphone and dictation

When you dictate a memo, the app asks for the microphone. The system turns your voice into text on this iPhone; nothing is uploaded and no recording is kept. The first time you dictate in a language, iOS downloads that language's speech model from Apple. The text is then handled like any other memo. While you dictate, the Dynamic Island and the Lock Screen show the time and the latest words, readable without unlocking; to keep them off the Lock Screen, turn off Live Activities for CapMemos in the system Settings.

A memo said on Apple Watch is turned into text by the watch's own system dictation, which follows Apple's dictation rules and may go through Apple's servers. The watch hands the text straight to your iPhone; it never passes through us. Until it reaches your iPhone it is kept on the watch; after that, the watch keeps the latest 20 (for up to a week) so you can see they arrived.

Photos

Images are added with the system photo picker, so the app gets only the ones you pick and needs no access to your library. Before upload, images are redrawn without location and other camera details.

Local network

The first time you connect to a server at home or on a private network (a NAS, for example), iOS asks whether the app may use the local network. The app uses it only to reach the server you entered.

Diagnostics report

Diagnostics in Settings builds a report on the device: app and system versions, whether each server is encrypted and its Memos version, sync state, why memos couldn't be sent (as a kind and a status code, never the server's own words), and this session's log. Sign-in details, links, e-mail and IP addresses and user names are taken out, but no filter catches everything, so the whole report is shown on screen: read it through before sharing. It leaves this iPhone only if you tap Share and choose where to send it.

Deleting your data

• Signing out or removing an account deletes that account's memos, drafts, images waiting to upload and image cache from this iPhone. Memos marked This iPhone Only stay, and can be deleted separately in Settings. Memos and images shared to that account and not yet put into its library are not deleted, nor passed to another account: they stay under Sync, for you to put into the current account or delete.
• Without a server, Delete All Memos on This iPhone in Settings deletes them for good.
• Deleting the app removes all of this too. Memos on a server have to be deleted on the server.

Crash reports

The app has no crash reporting of its own. If you choose in system settings to share analytics with developers, Apple provides anonymous crash reports under its privacy policy.

Children

CapMemos is not directed at children and collects no one's personal information.

Changes

If this policy changes, this page and the dates above will be updated.

Contact

For questions, see the support page.