Privacy policy

1. The Software runs on your Mac, not on a server

Recording, transcription, and note-writing all happen locally, on your own Mac. Your audio, transcripts, and notes are never sent to XY Space or to any third party, and XY Space has no way to see them. Transcription runs on models bundled inside the app, so it needs no network connection to work.

If a bundled model file is ever missing — from a damaged or incomplete install — Settings offers to download the missing one instead of leaving transcription broken. That download goes to the model's host, Hugging Face, not to XY Space: it carries no licence key, no email address, and no account identifier, and XY Space neither sees nor receives it. A normal install never takes this path.

Dictation. If you turn on dictation, Memory Notch asks for macOS’s Accessibility permission. It uses it for three things only: to notice a double-tap of the Command key and, while you dictate, a press of Esc to cancel, to paste the words you dictated into the app you are typing in, and to find the text cursor so the dictation pill can sit beside it. Dictated audio is transcribed on your Mac and never saved; to paste them, the words are placed on the clipboard for a moment, and your previous clipboard is then put back; they are not sent anywhere else. Memory Notch does not record or log your keystrokes.

2. The requests the Software makes

The Software periodically downloads a signed list of revoked licences, so that a refunded licence stops unlocking it (see the licence agreement, section 7). The app sends no licence key, no email address, no account identifier, and nothing it derives about your Mac. Because it always asks for the entire list rather than a single entry, the request cannot reveal which licence is asking.

A signed release of the Software also checks, once a day, whether a newer version exists. This is a request for one static file, at a fixed address, and it sends nothing but the request itself: no identifier, no version number in a query string, no licence key. It can be turned off in Settings, under Updates, without affecting anything else the Software does.

If that check finds a newer version and you choose to install it, the Software downloads that release. This is the only one of these requests that happens because you pressed something, and it is the only one that is not automatic: nothing is downloaded and nothing is installed unless you say so. Like the check that preceded it, it is a request for a file at a fixed address and carries no identifier and no licence key. What it downloads may be a patch against the version you already have rather than the whole application; that changes how large the download is and nothing else about it.

An update is only ever installed if it verifies against a cryptographic key built into the app: a file that does not verify is refused, so a compromised server cannot push code XY Space did not sign.

Like any request to a web address, all three of these still travel over the internet and so still carry your IP address and a standard browser header naming your operating system version — that is true of every request any app or browser makes, not something particular to any of these, and XY Space does not use it to identify you or connect it to a licence.

Other than the model-recovery download described in section 1, these three are the only network requests the Software makes. None of them is telemetry, and none of them is analytics — the Software contains no analytics and no advertising, anywhere.

3. What buying a licence stores

Card numbers and other payment details are entered on a page hosted by Stripe and go to Stripe directly. They never reach XY Space's servers.

Once Stripe confirms your payment, the Website stores: your email address, and an internal reference linking the licence to your Website account, if you have one; the Stripe Checkout session ID for that payment; the amount and currency paid; and the licence itself — the key, whether it is active or revoked, and the date its free updates run to — along with the related dates: when the licence was created, when it was claimed on the Website, when it was revoked (if it was), when this payment was made, what the update window was extended to, and when the licence email was sent.

This is kept so a licence can be found again later — to resend a key you have lost, to process a refund, or to record a renewal — and so XY Space's books are accurate.

The licence key itself also contains your email address, in plain text, as part of what makes it a valid key (see the licence agreement, section 3). The app displays this as “Licensed to [your email]”. Anyone you give the key to, or anywhere you post it, discloses that email address along with it — this is a property of the key, not of anything the Website does with it.

4. Accounts and sign-in

An account is optional. The Software works fully without one, and buying a licence does not require one. Signing in to the Website is by a link sent to your email address; there are no passwords. Signing in stores your email address and a session identifying you as signed in. There are no tracking cookies on the Website.

The Website does measure visits, using a script from cite-met.com, the partner credited in the footer. It records the page you are on and the address you arrived from, keeps an identifier in your browser’s local storage so repeat visits are not counted as new ones, and uses Cloudflare Turnstile to tell automated visitors from people. It sets no cookies, and it is not used for advertising. Blocking scripts from platform.cite-met.com stops it, and the Website works without it.

The Website also counts installer downloads: one number per day, per file format, added to when a download begins. Nothing is kept beside it — no address, no browser, no identifier — so the count cannot be traced back to you, and it cannot be broken apart into who downloaded what.

5. Email

Licence-delivery emails and sign-in links are sent through Cloudflare's email service. Your email address is used only to deliver these messages to you.

6. How long records are kept

Licence and purchase records are kept for as long as the licence exists. A licence is perpetual, so this is, in practice, indefinitely: the record has to be findable years from now to resend a key, confirm a renewal, or process a refund.

A Windows beta waitlist entry (section 14) is kept until Memory Notch for Windows is released to everyone, and then deleted, or sooner if you ask.

7. Devices

The Software does not track, count, or report which or how many devices use a licence key. The licence agreement limits use to five personal devices, but that limit is a term of the agreement, not something the Software enforces or the Website records — no per-device identifier is ever sent, collected, or stored.

8. No selling, no sharing, no advertising

XY Space does not sell or share your personal information with third parties for their marketing purposes, and runs no advertising. The Software contains no analytics of any kind. The Website’s visit measurement is described in section 4.

9. Your rights

You can ask what XY Space holds about you, or ask for it to be deleted, at the address in section 12.

Deleting your purchase record does not disable a licence key already installed on your Mac. The Software verifies a licence entirely offline, from a digital signature, so the record kept on the Website and the working copy of the Software on your Mac are separate things: deleting one does not touch the other. To stop a licence key from unlocking unlimited recording, XY Space revokes it, which the Software learns through the revocation download described in section 2 the next time the Mac connects. On a Mac that is online that takes effect within about a day, because that is how often the Software asks. A Mac that does not connect cannot be told until it does; one that goes 365 days without the check cannot install updates until it connects, and is otherwise unaffected (see the licence agreement sections 6 and 8). None of this is the refund window, which is 30 days and is a separate thing.

10. Changes to this policy

XY Space may update this policy. A change applies from the date it is posted at this page's address. Continuing to use the Software or the Website after a change means you accept the updated policy.

11. Governing law

This policy is governed by and construed in accordance with the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to its conflict of law provisions. The courts of the Province of Ontario shall have exclusive jurisdiction over any dispute arising under or in connection with it, and each party irrevocably attorns to the jurisdiction of those courts.

12. Contact

Privacy enquiries: hello@xyspace.dev
XY Space Inc.
Ontario, Canada

13. Memory Notch for iPhone and iPad

The iPhone and iPad app collects nothing. Recording, transcription, and speaker labelling run on the device, with models included in the app; audio, transcripts, and notes are never sent to XY Space or anyone else.

The app makes no network requests of its own. It does not accept Mac licence keys; the only unlock is the in-app purchase below.

Purchases in the app go through Apple’s App Store (StoreKit). Apple handles payment; XY Space receives no card or payment details, and Apple’s privacy policy covers that transaction.

Ask AI and Share happen only when you tap them. They open the system share sheet and you choose where the note or audio goes; if you send it to another app or a cloud service, that service’s policy applies. Memory Notch sends nothing itself.

Recordings are ordinary files in the app’s folder, which you can see and manage in the Files app. Deleting the app deletes them unless you have copied them elsewhere.

The iPhone and iPad app contains no analytics, advertising, or tracking.

14. The Windows beta waitlist

If you join the Windows beta waitlist at memorynotch.app/windows, the Website stores what you enter in the form: your email address, your graphics card, your Windows version, whether you already own a licence, what you would use the app for (if you say), that you agreed to be emailed about the beta, and when you signed up or last changed your entry. It does not store your IP address or browser details with it. Signing up again with the same email address updates your entry rather than adding a second one.

XY Space uses it only to choose beta testers whose PCs can run the app and to email you about the beta: an invitation, a download link, and requests for feedback. It is not used for marketing and is not shared. To leave the waitlist and have your entry deleted, email support@memorynotch.app.

15. Memory Notch for Android

The Android app collects nothing. Recording, transcription, and speaker labelling run on the phone, with models included in the app; the app uploads no audio, transcripts, or notes, to XY Space or anyone else, and XY Space has no way to see them. It needs no network connection to work.

The app has no account and no sign-in. It contains no analytics, advertising, or tracking, and it does not read your advertising ID. Its only use of the network is Google Play Billing, described next.

Purchases in the app go through Google Play. Google handles payment; XY Space receives no card or payment details, and Google’s privacy policy covers that transaction. The app asks Google Play only whether the one-time unlock has been purchased, and keeps that answer on the phone so it works offline.

The app asks for two permissions: the microphone, to record, and notifications, to show a notification while it records. Recording works without notifications. The microphone is used only while you are recording.

Ask AI and Share happen only when you tap them. They open Android’s share sheet and you choose where the note or audio goes; if you send it to another app or a cloud service, that service’s policy applies. Memory Notch sends nothing itself.

Recordings and notes are stored in the app’s private storage on the phone and are never backed up to Google’s cloud. When you set up a new phone with Android’s device-to-device transfer (by cable or directly between the phones), your notes and the app’s settings move with it; the record of your purchase does not, and Google Play restores it. Deleting a note in the app deletes it from the phone; uninstalling the app deletes everything it stored on that phone unless you shared a copy elsewhere.