Privacy Policy
Last updated: October 19, 2026
The short version
- Your expenses, budgets, categories, notes and receipt photos stay on your phone. Memo has no account and no server that stores them.
- Only voice entry sends anything off your phone, and only after you agree. Your recording goes to Google Gemini to be turned into an expense.
- No ads, no analytics, no tracking, and we never sell your data.
Who we are
Memo is an expense tracking app made by Dot Design Labs ("we", "us"). For any privacy question, email dotdesign.hq@gmail.com.
What stays on your phone
Everything you enter in Memo is saved only on your device: expenses, amounts, dates, categories, budgets, notes, receipt photos and your settings. We can't see it, and we don't keep a copy.
If you delete Memo, this data is deleted with it. Your phone's own backups (iCloud or Google) may include it, depending on your phone's settings.
Voice entry
Voice entry is optional. The first time you use it, Memo asks for your permission before sending anything. When you record an expense by voice, Memo sends:
- your voice recording
- your category names, so the expense can be placed in the right one
- today's date and your currency
- an anonymous device ID (see below)
This goes to our small server, which passes it to the Google Gemini API. Gemini turns your words into an expense (amount, category, date and note) and sends it back for you to check. Our server doesn't store your recording or what you said. Memo deletes the recording from your phone once it has been sent.
What Google does with it: Memo uses Gemini as a paid service. Under Google's terms, Google doesn't use your recordings or the results to train or improve its products. Google keeps them for a limited period only to detect abuse and for legal requirements, and may process them in any country where Google operates. See the Gemini API terms and Google's Privacy Policy.
You can turn voice data sharing off at any time in More → Privacy & data. After that, Memo asks again before your next voice entry.
Anonymous device ID and free entries
Voice entry includes a number of free entries every 30 days. To count them, Memo creates an anonymous ID for your device. On Android it's derived from Android's app-specific ID and scrambled (hashed) before it leaves your phone. On iPhone it's a random ID stored in your phone's Keychain, so it stays the same if you reinstall Memo. It isn't linked to your name, email or phone number.
Our server keeps only this ID, how many entries you've used and when your 30-day period started. It also keeps short-lived technical logs (the device ID, whether a request succeeded, how long it took and how much processing it used, deleted after a few days) to fix problems. These logs never contain recordings or what you said.
To stop misuse, our server limits how many voice requests can come from one device or one network in a minute. For this it uses a scrambled (hashed) form of your network address, never the address itself, and deletes it within minutes. It also keeps daily totals for the whole app, like the number of voice entries and the estimated cost, which can't identify you.
Permissions
- Microphone: used only while you record a voice entry.
- Camera and photos: used only when you attach a receipt. The photo stays on your phone.
Premium interest form (optional)
If you choose to fill in our Memo Premium form, it's hosted on Google Forms. We receive your email and your answers. We use them only to tell you when Premium launches and to decide which features to build. Ask us at any time and we'll delete your response.
Who we share data with
| Service | Why | What |
|---|---|---|
| Google (Gemini API) | Turns voice into an expense | Recording, category names, date, currency |
| Cloudflare | Runs our voice server | Device ID, usage count, short-lived logs |
| Google (Forms) | Premium interest form, only if you fill it in | Email and answers |
We don't sell your data or share it with advertisers or data brokers.
Legal basis (EEA, UK and Switzerland)
- Voice entry: your consent, which you can withdraw at any time in More → Privacy & data.
- Free entry counting, rate limits and abuse prevention: our legitimate interest in keeping the service fair and working.
- Premium form: your consent when you submit it.
Your rights
Depending on where you live, you can ask to see, correct or delete your data, object to how it's used, or withdraw consent. Most of your data is on your phone and under your control. For anything we hold, email dotdesign.hq@gmail.com. If you're in the EEA or UK, you can also complain to your local data protection authority.
Age
Memo is not intended for anyone under 18, because voice entry uses a service that may only be offered to adults.
Changes
If we change this policy, we'll update the date at the top. For important changes, we'll also tell you in the app.