What we collect, and what we cannot see.

Last changed 2026-09-21. The promise page says the same thing in plain words; this is the policy.

Short version: everything you record stays on your iPhone and is transcribed there. If you turn on backup, what leaves the phone is encrypted before it goes, with a key we never have. We can see your email or Apple relay address, subscription status, how many encrypted items you have, their sizes and timestamps, and IP addresses. We run no analytics and sell nothing.

Who we are

Chase Memories is made by Chase Color, Inc., a Delaware corporation, which is the controller of the data described here. Post: 350 E 400 S, STE 54472, Salt Lake City, UT 84111, United States. Email: support@chasememories.app. The postal address is a mail suite that is checked rarely, so email is the route that reaches us.

What this policy covers

This page covers the Chase Memories app for iPhone, the account you can make in it, the encrypted backup you can turn on, and chasememories.app, the site you are reading, which sets no cookies and runs no analytics.

What stays on your iPhone

Recording, transcription, the words read from photos, titles and summaries all happen on the phone, with the phone's own models. Nothing you record is sent anywhere to be transcribed, and there is no cloud AI. The app needs no account to record, transcribe, search, play or export.

Because your memories live on the phone, they are included in the phone's own iCloud or computer backup the way any app's data is, under your Apple settings; video files are left out to spare the space. Apple encrypts iCloud backups at rest; a backup to a computer is encrypted only when "Encrypt local backup" is on. We do not receive those backups.

Backup, if you turn it on

Backup is part of Pro. When it is on, each memory is encrypted on your iPhone before it leaves: its audio, photos, stills, words, title and summary, under a key of its own that is in turn sealed with your account key. The account key is made on your iPhone and kept in your Apple keychain, which carries it to your other devices through iCloud Keychain. It is never sent to us. Video files are not backed up.

We say: "Encrypted on your iPhone before backup. The key stays with you, in your Apple keychain, never on our servers. We can't listen to, read or hand over what we can't decrypt."

We also say, plainly: we can see your email or Apple relay address, subscription status, how many encrypted items you have, their sizes and timestamps, and IP addresses. The server also keeps, for each device of yours, the name you gave it, and for each backed-up memory, when it was last edited and which device edited it, so your devices can agree on the newest version.

If you choose to keep a recovery code, the app stores your account key on the server wrapped with that code. The code itself is shown once, to you, and never sent to us; without it the wrapped key cannot be opened. If every device is lost, iCloud Keychain is off and there is no recovery code, nobody can open the backup, and the app lets you start it over.

Your account

An account is made when you first turn on backup or buy Pro, and only then. It holds the addresses you sign in with (an email address, or the address Apple or Google gives us when you sign in with them), the names of your devices, and your subscription status. There are no passwords: signing in by email sends a six-digit code to the address, which lives ten minutes. Sign in with Apple and Sign in with Google give us a stable identifier and an address; when you delete your account, we tell Apple to end that sign-in.

You can see and change all of this in the app under Settings, Account: the ways in, the devices, signing out here or everywhere, and deleting the account.

Payments

Pro is sold through the App Store as an auto-renewing subscription. Apple runs the purchase, renewal and cancellation under Subscriptions in your Apple Account settings, and card numbers go to Apple and never to us. Apple sends our server the status of your subscription, signed, so Pro can be turned on and off; that record carries no card details.

Who processes what

Apple: the App Store and your subscription; Sign in with Apple, if you use it; iCloud Keychain carries your account key between your devices under your Apple settings.
Google: Sign in with Google, if you use it.
Resend sends the sign-in codes by email, and sees the address and the code.
Fly.io runs our server and its database, in the United States.
Tigris stores the encrypted files of your backup, in the United States. It holds ciphertext only.

None of them can read your memories. We do not share your data with anyone for their own purposes, and we do not sell it.

Logs

Our server keeps ordinary request logs, with IP addresses, the time and the route, for a short time, to keep the service running and to look into abuse. The logs never contain your content, your keys or your sign-in tokens; account ids in them are masked. The site keeps whatever request logs its host keeps.

What we do not do

We run no analytics and no advertising trackers in the app or on the site, load no third-party fonts or scripts, and set no cookies on the site. We do not use your content to train or tune anything, and nobody here reads it, because nobody here can.

How long we keep things

Your account, while you have one.
Your backup, while Pro is on. If Pro ends, the backup is kept for 90 days and then removed, and the app says so; your memories on the phone are untouched.
A memory you delete stays in Recently Deleted for 30 days, on every device, and can be put back. After that, or when you erase it now, the server removes its encrypted files at its next sweep.
Sign-in codes, ten minutes. Request logs, briefly.

Ending your account, and deletion

You can delete your account in the app under Settings, Account. It takes effect at once: every device is signed out, the backup's files and the account's records are removed, and Apple is told to end your sign-in with Apple. If a part of that cannot finish right then, because a service is unreachable, the app says so and the server finishes it by itself. Your memories on the phone stay.

We will not claim more than that. Copies that are out of our reach stay where they are: files you exported or shared, and records a provider or the law requires us to keep.

Your rights

You can ask to see what we hold about you, to correct it, to receive a copy, or to have it deleted, and you can withdraw consent at any time. In the UK and EU you also have the rights to restriction, portability and objection under the GDPR, and you can complain to your supervisory authority. Where the GDPR applies, our legal basis for account data and for the backup you turn on is performing our contract with you. Email support@chasememories.app and we will act on it. There is no charge and no form.

Children

Chase Memories is not for anyone under 13, or under the higher minimum age your country sets.

Where your data is processed

We are a United States company, and the providers named above process data in the United States.

Changes to this policy

The date at the top of this page is the date of its last change. If a change affects what we collect or who processes it, we will say so here before it takes effect.