Human Memory

A record you can hand to the experts in your life. Every intake form asks when, where, how often and for how long — and memory is the wrong instrument for those questions. Your phone already holds the answers. Human Memory turns your own recorded behaviour into a bounded record you can hand to a doctor, a lawyer or an accountant: a dated span, a per-day ledger and a line saying where the record has nothing. Human Memory for iPhone turns twenty-odd years of your photographs into a map you can walk, a timeline you can scroll, and the people who were actually there — reading your contacts and calendar to give the days real names instead of dates. It runs on the phone. Import the archives other services let you export — Google Takeout, Facebook and Instagram, Tinder and Hinge, calendars, bank files. Everything goes into an encrypted vault on your iPhone, where it stays. Search it, export it, and take it with you when you leave. WHAT YOU GET: - A private map of everywhere you've been (rounded coordinates only; your exact position never leaves your phone) - A day ledger: where you were each day, how many days in a place, with a coverage line where the record is empty - A timeline of your photographs, arranged by place and person - A record of people in your life, built from the contacts and messages you already have - A journal of your own, kept in the vault - Imports from Google Takeout, Facebook, Instagram, Tinder, Hinge, ICS calendars and bank or card statements - Apple Health export import: heart rate, resting heart rate, HRV, steps, active energy, sleep, State of Mind and medication doses — kept out of iCloud backup by default - Search across everything at once, find by date, place, or person NO ACCOUNT, NO PURCHASE: The Interview (in Vault) can use your own Anthropic API key (Vault → Use your own API key); the app takes no payment. WHAT LEAVES YOUR PHONE — AND WHEN: We don't mine your data. Here is what does leave, in full. Every line is in the privacy policy with the file that makes it true: - Rounded location data to Apple, to turn a photo's GPS into a place name. Rounded to about 110 metres before sending, cached after the first request for each area. Your exact position never travels. - The part of the map you're viewing, to Apple: the map is a real Apple map and fetches tiles as you pan, like every other map on your phone. - Your questions and answers while an Interview is open: only when you press send, never in the background. Results can carry names, message text from archives you've imported, health records, exact dates and places rounded to about a kilometre, and each Interview also sends a by-month summary of your home, places, trips and named people; you're told before the first message and can withdraw permission at any time. Your own Anthropic API key sends it straight from your iPhone to Anthropic; there is no server of ours in between. - A request for one of your own photos, to Apple, when you tap Download from iCloud: one item, only when you tap, the same transfer the Photos app makes. - A calendar you publish, to the account you publish it to, only if you use Vault → Review & Publish to Calendar. - Your vault, to your own iCloud backup, only if you turn on Vault → iCloud Backup (off by default), under your own Apple ID. - A check with Apple's purchase system at launch and while the app runs, for any purchase an earlier version left unfinished. It carries nothing of yours. WHAT DOESN'T LEAVE: - No analytics. No telemetry. No account. No login. - Your photos stay in your Photos app and your vault; they're never copied to our servers. - Everything else is encrypted on your device. TAKING YOUR DATA OUT: Open Vault → Export My Vault to write your entire vault as plain markdown and JSON and send it anywhere you want — to AirDrop, Mail, or cloud storage you control. The archive is unencrypted and lives wherever you put it, so it's exactly as private as that place is.