1. Who we are
This Privacy Policy explains how the Memora Android app ("Memora", "the app", "we", "us") handles information when you use it. Memora is provided by 91social Software Pvt. Ltd. If you have questions, see Contact us.
2. How Memora works
Memora is a client-only app. It runs entirely on your Android device and communicates directly with Google's services (Google Sign-In and the Google Drive API). There is no Memora server, no Memora account and no Memora database outside your phone. As a result, we (the developer) do not receive, see or store your photos, videos, Google account details or sign-in tokens.
When you connect a Google account, Memora creates a folder named Memora Backup in that account's Google Drive and uploads the photos and videos you choose to back up into it.
3. Information Memora handles
The table below lists the information the app handles, where it is kept and why. All of it stays on your device or in your own Google account.
| Information | Where it is kept | Why |
|---|---|---|
| Google account basics: email address, Google account ID, and (if available) your name and profile photo | On your device, in the app's private database | To identify each connected account, show it in the account list and profile menu, and prevent the same account being added twice |
| Google sign-in tokens (access token and refresh token) | On your device only, encrypted with the Android Keystore | To call the Google Drive API on your behalf without asking you to sign in every time |
| Photos and videos you choose to back up, including their embedded metadata (such as date taken, camera details and photo location, if your camera recorded it) | Your own Google Drive, in the Memora Backup folder. A temporary copy may be held in the app's cache during upload and is deleted afterwards | To back them up. Memora uploads the original file so that your backup matches what's on your phone |
| File details: file name, type, size, last-modified time, a SHA-256 fingerprint of the file's content, and its Android media ID | On your device, and as private app properties attached to each file in your Google Drive | To know what has already been backed up, detect edited files, avoid duplicate uploads, and rebuild the backup list after a reinstall |
Device identifier (Android's ANDROID_ID) | As a private app property on each file in your Google Drive | To recognise which of your backups came from this phone after you reinstall the app |
| Storage usage of each connected account (used and available space, as reported by Google) | On your device | To show storage per account and pick an account with enough space |
| Gallery listing and thumbnails of files Memora uploaded | Cached on your device | To show your gallery quickly, including when you're offline |
| Your settings (backup schedule, Wi-Fi only, charging only) and the upload queue | On your device | To run backups the way you've chosen and resume interrupted uploads |
Memora does not collect your Google password, contacts, messages, precise device location (other than what is already embedded in your photos), advertising ID, or usage analytics.
4. Google user data
Memora signs in with Google using OAuth 2.0 with PKCE and requests only these permissions (scopes):
openid,emailandprofile: to identify your account and show your email, name and profile photo inside the app.https://www.googleapis.com/auth/drive.file: to create the Memora Backup folder, upload your photos and videos, list, view, trash, restore and permanently delete the files Memora uploaded, and read your Drive storage quota. This scope gives Memora access only to files the app created; it cannot see or change any other files in your Google Drive.
Google user data is used only to provide Memora's backup and gallery features to you, inside the app on your device. It is not transferred to us or to anyone else, not used for advertising, not used to train artificial intelligence or machine learning models, and not read by humans.
Memora's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove Memora's access to your Google account at any time by disconnecting the account in the app, or from your Google Account permissions page.
5. Device permissions
| Permission | Why Memora asks for it |
|---|---|
Photos and videos (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, or storage access on Android 12 and earlier) | To find the photos and videos on your phone so they can be backed up. On Android 14 and later you may grant access to selected photos only. |
Media location (ACCESS_MEDIA_LOCATION) | So Android doesn't strip the location stored in your photos when Memora reads them. Without it, your backups would lose that information. Memora does not track your device's location. |
Notifications (POST_NOTIFICATIONS) | To show backup progress, a summary when a backup finishes, and a prompt when an account needs to be reconnected. |
Foreground service (FOREGROUND_SERVICE, FOREGROUND_SERVICE_DATA_SYNC) | To keep a backup running, with a visible notification, when you leave the app. |
Internet (INTERNET) | To talk to Google Sign-In and Google Drive. |
6. How information is used
Memora uses the information above only to:
- connect and reconnect your Google accounts;
- upload, update and resume backups of the media you choose, manually or on the schedule you set;
- choose an account with enough free storage;
- show your backed-up photos and videos in one gallery, and let you trash, restore or permanently delete them;
- avoid uploading the same file twice, including after a reinstall or on a new phone.
7. Sharing and disclosure
We do not sell, rent, trade or share your information. Because Memora has no server, we don't hold your information and so cannot disclose it.
Your data is sent only to Google, the provider you chose for storage, so it can authenticate you and store your files in your Google Drive. Google's handling of that data is governed by the Google Privacy Policy and your agreement with Google. Memora does not include advertising or analytics SDKs.
8. Storage and security
- All communication with Google uses HTTPS.
- Sign-in uses OAuth 2.0 with PKCE. Memora never sees or stores your Google password, and the app contains no client secret.
- Sign-in tokens are stored only in Android's encrypted secure storage (backed by the Android Keystore). They're never written to the app database, logs or crash reports.
- The app's database and secure storage are excluded from Android cloud backup and device-to-device transfer.
- Network logs in the app redact authorisation headers, tokens and upload session links.
No method of storage or transmission is completely secure, but we design Memora to keep your data on your device and in your own Google account.
9. Retention and deletion
- Backed-up media stays in your Google Drive until you delete it. Moving an item to Trash in Memora moves it to Google Drive's trash; Google permanently deletes trashed items after 30 days. "Delete forever" in Memora's Trash view deletes the item from Google Drive straight away.
- Disconnecting an account revokes Memora's access at Google and deletes that account's tokens and local data from your phone. Files already in your Google Drive are not deleted.
- Uninstalling Memora deletes all local data, including tokens, settings and cached thumbnails. Your backups remain in your Google Drive, where you can manage or delete them with Google Drive.
- Temporary copies made during upload are deleted once the upload completes.
10. Your choices and rights
You are in control of your data:
- Turn automatic backup on or off, and choose Wi-Fi-only or charging-only backups, in Settings.
- Withdraw access to your photos, notifications or other permissions at any time in Android Settings.
- Disconnect any Google account in the app, or revoke access at myaccount.google.com/permissions.
- View, download or delete your backups directly in Google Drive.
Depending on where you live (for example under the GDPR, UK GDPR, India's Digital Personal Data Protection Act, or US state privacy laws), you may have rights to access, correct, delete or port your personal data, or to object to its processing. Since we don't hold your data, you can exercise most of these rights directly in the app, on your device and in your Google account. If you need help, contact us.
11. Children
Memora is not directed at children under 13 (or the minimum age for a Google account where you live). We do not knowingly collect personal information from children.
12. Changes to this policy
We may update this policy as Memora changes, for example if we add optional crash reporting. We'll update the "Last updated" date above, and for significant changes we'll tell you in the app or on this website before they take effect.
13. Contact us
Questions or requests about this policy can be sent to:
91social Software Private Limited
Email: support@memoramemora.com
#1470, 3rd Floor, 13th Cross, 19th Main Road,
Sector 1, HSR Layout, Bangalore - 560102.