Security & Privacy

Your data is yours.
Period.

Memry is local-first, end-to-end encrypted, and open source. We built it for people who take ownership of their data seriously.

Zero-knowledge

We cannot see your notes, even if compelled. The math guarantees it.

Plain files

Standard Markdown on your disk. No proprietary format, no lock-in.

No passwords to leak

Devices link via QR code. No central account, no credential database.

How we protect your data

Six layers of privacy, from storage to sync.

Local-first storage

Your notes are plain Markdown files stored in a folder you choose. No proprietary database, no vendor lock-in.

  • Plain .md files on your filesystem
  • Pick any folder — iCloud, Dropbox, or fully offline
  • SQLite for metadata, FTS5 for search
  • Zero cloud dependency for core functionality

End-to-end encryption

When you sync, every byte is encrypted before it leaves your device. We cannot read your data. Nobody can.

  • libsodium (XChaCha20-Poly1305) for all sync traffic
  • At-rest encryption for local database
  • Keys derived on-device, never transmitted
  • OS keychain for credential storage

Minimal telemetry

We collect anonymous usage analytics to improve the app. That is it. Your content never leaves your device.

  • Anonymous feature-usage counters only
  • No content, filenames, or metadata collected
  • No third-party trackers or ad networks
  • Telemetry can be fully disabled in settings

On-device AI

The AI assistant runs a local model on your machine. Your notes are never sent to OpenAI, Google, or anyone else.

  • Local inference via on-device model
  • No API calls to external AI providers
  • Context stays in your process memory
  • Works fully offline

Encrypted sync

Multi-device sync uses CRDTs for conflict-free merging. Link devices with a QR code — no account passwords to leak.

  • CRDT-based sync via Yjs
  • Conflict-free, deterministic merging
  • QR code device linking — no passwords
  • Incremental sync with per-field vector clocks

Open source

Memry will be fully open source. Audit the code, verify our claims, build on top of it.

  • Repository coming soon at github.com/memrynote/memry
  • AGPL-3.0 license
  • Reproducible builds planned
  • Security audits welcome

Found a vulnerability?

We take security reports seriously. Reach out and we will respond within 24 hours.

security@memrynote.com