In short
MemoJog is built to hold the things you'd otherwise try to keep in your head: short notes, reminders, photos, and files, each written or captured by you. When you use MemoJog, it may store:
None of this is collected passively. MemoJog only stores what you actively capture, attach, or tag.
MemoJog uses Apple's on-device Foundation Models and Vision frameworks to categorize memories, recognize text in photos, pull out details such as receipt totals and business-card contacts, tidy dictated notes, and help you find things later by asking a question in your own words. By default, this processing happens entirely on your iPhone or Mac — your memories are never sent to us, to Apple, or to any other service to generate these results.
Some questions you ask MemoJog's Jog assistant may be more than your device can handle entirely on its own. For those, MemoJog is built to be able to call on Apple's Private Cloud Compute — Apple's system for running AI requests on Apple silicon servers under the same security guarantees as your device, rather than a conventional cloud. Apple designs Private Cloud Compute so that no one, including Apple, can access what's sent to it: requests aren't tied to your Apple Account, aren't stored or logged after they're handled, and Apple states it has no way for even its own staff to access your data, even to respond to a legal request. Apple also publishes the software that runs on these servers so independent security researchers can verify these claims. We chose this over a general-purpose cloud service because it's the closest thing to keeping the "your data doesn't leave your device" guarantee even when a request needs more than your device can do alone.
When you capture a memory by voice, audio is transcribed on-device using Apple's Speech framework, and MemoJog currently requires on-device transcription for every voice capture. By default, the original recording is also kept (compressed to save space) and attached to that memory so you can play it back later. You can turn off the "Save Voice Recordings" setting in MemoJog at any time to keep only the transcribed text going forward, and you can delete a saved recording from any individual memory without losing that memory's transcript.
We're considering adding an optional setting that would let iOS use Apple's servers to transcribe voice captures when that gives more accurate results, using the same kind of privacy protections Apple applies to Siri and Dictation — a rotating identifier not tied to your Apple Account, and audio that isn't stored unless you separately opt in to Apple's own "Improve Siri and Dictation" program. If we add this, it will be on by default, and you'll be able to turn it off in Settings to keep transcription strictly on-device.
MemoJog integrates with Siri and Shortcuts so you can capture and recall memories by voice, using Apple's App Intents framework. These requests are handled by iOS according to Apple's own Siri privacy practices, not by us. Face ID lock and the per-memory Private setting (see "Protecting your data" below) both control what Siri can find and say - see there for details.
When you save a link, your device contacts that website directly to get its title, preview image, and the page's text, so the link can be searched later. We never see this request. The website sees an ordinary request from your device, as it would if you opened the link in a browser, but MemoJog sends it nothing from your memories. Some pages block this, and then MemoJog keeps just the link.
If a memory (or a photo of an invitation) mentions a future date, MemoJog may show an "Add to Calendar" button. MemoJog asks for Calendar access only at the moment you tap it, and it only creates the one event you chose. iOS names this permission "Full Access to Calendars"; MemoJog does not read, copy, or analyze the events already in your Calendar. Spotting the date happens on your device.
The MemoJog app on your Apple Watch uses the same private iCloud database as your iPhone, so your memories appear on both and nothing passes through a server of ours. On the Watch you can dictate a memory, record audio, search, tag a place, and ask Jog a question. Audio recorded on the Watch is turned into text on your iPhone, using on-device speech recognition, once the memory syncs. When you tap "Tag This Place," the Watch asks for your location once, only while the app is in use, and saves it with that memory. A Jog question from the Watch is sent to your paired iPhone, which answers it there — it is not sent to us.
When you search for a place to tag, the words you type are sent to Apple's maps service to suggest and look up places, and when you tag where you are, Apple's service may be asked to turn your coordinates into a place name. That is handled by Apple under its own privacy practices, not by us.
Your memories live in a private CloudKit database tied to your own iCloud account. This means:
MemoJog can save a backup of your memories — including attached photos, files, saved voice recordings, places, and topics — as a single file in your own iCloud Drive (Files → iCloud Drive → MemoJog). By default, MemoJog saves one about once a week while you use the app, keeping the most recent eight. You can also save one at any time, or turn automatic backup off, in Settings.
Backups are stored only in your iCloud Drive. MemoJog doesn't send them anywhere else, and we can't see or open them. They count against your iCloud storage, and you can delete them at any time from the Files app. Restoring a backup adds back anything that's missing and never changes memories already on your device.
MemoJog has no servers and no accounts. Your memories and backups live in your iCloud and on your devices, protected by Apple's security. For the strongest protection, we recommend:
These are Apple features and settings that you control. If you lose access to your Apple ID or your devices, we can't recover your data.
You can also mark any individual memory as Private from its edit screen. MemoJog does not add a Private memory to Siri's or the iPhone's search indexes, does not use it to answer Siri, Jog or Apple Watch requests, and shows only a generic message in its notifications - all the time, regardless of whether Face ID lock is on. It still shows normally inside MemoJog itself.
MemoJog asks for location access only to support two optional features you have to turn on yourself: reminding you about a memory when you arrive somewhere, and surfacing memories you've tagged to a place when you're back there. MemoJog does not track or log your location otherwise, does not build a location history, and does not share location data with anyone. On your Apple Watch, location is requested only when you tap "Tag This Place." Looking up and searching for places uses Apple's mapping services (see "Maps and place search" above).
You can delete any memory, photo, file, reminder, or tagged place from within MemoJog at any time, delete backups from the Files app, and turn automatic backup off in Settings. Deleting MemoJog from your device removes its local data; because sync uses your own private iCloud database, you can also manage or remove that data through your device's iCloud storage settings, independent of MemoJog. Camera, microphone, speech recognition, location, Calendar, and Face ID access can each be turned off at any time in your device's Settings, without losing the rest of MemoJog's functionality.
MemoJog is not directed at children under 13, and we do not knowingly collect information from children. Because all data stays on-device and in your own private iCloud account, we have no visibility into who uses the app in any case.
If this policy changes, we'll update the date at the top of this page. Continued use of MemoJog after a change means you accept the updated policy.