Privacy in Mementara

Your notebook.
Close to you.

The core reading flow is straightforward: your device downloads your selected GitHub notebook and searches it locally.

Your files stay yours.

Mementara requests repository contents directly from GitHub and stores an offline copy in the app’s private container. Note bodies go directly from GitHub to your device. The reader does not edit source files, make commits, or push to your repository.

Public repositories without an account.

You can explore the bundled sample without a network connection or account. Looking up and downloading public repositories connects directly to GitHub without signing in. A GitHub account is needed only for private repositories.

Sign in directly with GitHub.

Sign-in opens GitHub in the system authentication browser. Authorization and token refresh connect directly to GitHub; your credentials stay in this device’s Keychain. The app does not contact a Mementara authentication server, fetch remote configuration, or send usage reports. Production sign-in returns through an HTTPS link associated with the app. iOS verifies that association through Apple’s CDN. If the app cannot open, GitHub Pages may serve a static fallback that does not process or display sign-in parameters. Token exchange and refresh never use this website.

Reading and searching happen locally.

The app collects no note contents, search queries, repository paths, attachment URLs, or credentials in telemetry. It includes no third-party analytics SDK. External images do not load automatically. Tapping an external link opens it in the system browser, where that site’s own privacy practices apply.

Protected by your device.

Cached files use iOS data protection and are excluded from iCloud backup. Credentials use device-only Keychain storage. This describes operating-system protection; it is not a claim of independent app-level encryption or end-to-end encryption from GitHub.

Remove the local copy when you want.

Use “Remove local data” in Settings to clear downloaded notes and media, the search index, bookmarks, reading positions, and credentials. Local sign-out removes credentials without sending a network request.

Local removal works offline. Revoking the GitHub authorization or uninstalling the GitHub App is a separate action in your GitHub account. A device that is offline cannot learn about a remote revocation until it reconnects.

This website.

This static website has no analytics scripts, tracking cookies, embedded third-party media, or sign-up form. Fonts and images are served with the site. GitHub Pages hosts it and logs visitor IP addresses for security purposes, as described in GitHub’s Pages documentation and privacy statement.

Testing with TestFlight.

When you use a TestFlight beta, Apple collects and shares crash logs, usage information and submitted feedback with the developer. This can include your name and email address, device and app details, and screenshots you choose to submit. Feedback sent through TestFlight also goes to Apple. See Apple’s TestFlight privacy information for details.

We use this information only to improve Mementara and do not share it with third parties. Please use sample notes when reporting an issue and exclude private repository content, repository URLs and credentials from comments and screenshots.

Operator and support.

Mementara is operated by Mirko Jahn. Our postal address is listed in the Impressum. For support or questions about your data, email support@mementara.app. If you contact us directly, we receive your email address and the information you include so we can respond. Email sent directly to us is not shared with Apple through TestFlight.

Mementara 1.0 is available on the App Store. The TestFlight information above applies only if you use a beta version.

Updated 22 September 2026.