Choose what you share
Grant access to selected content through supported sharing controls. Manage or revoke access when you need to. Someone who has already saved a copy may still have that copy.
Personal means personal
Private by default.
Shared by choice.
Your life contains things you want to share and things you want to keep to yourself. Those should be deliberate decisions.
Your connections.
Your permissions.
Creating a Person or connecting with someone does not automatically share your Memories. Access is granted separately for supported content.
Memory Temple’s private media uses access controls and time-limited signed links for supported views. A signed link is temporary access to a file, not a promise of end-to-end encryption.
No service can promise absolute security. We describe the protections and choices available without claiming that personal information is risk-free.
Choices you can understand.
Choose automatic backup
Automatic whole-library backup requires you to enable it and grant the relevant device permissions. Saving media deliberately is separate from opting in to automatic backup.
Confirm removal
Cleanup suggestions leave the decision with you. Removing a backed-up device copy and deleting something everywhere are different actions. Read the confirmation and backup status before continuing.
Intelligence deserves
clear boundaries.
Limi uses relevant context to help with questions and supported tasks. AI features may process eligible information through external AI services; private storage does not mean that all intelligence runs on your phone.
Review suggested stories, details and actions. Limi’s output is a starting point for your judgement, especially when the subject is personal or important.
This page explains product principles and controls. Read the Privacy Policy for the published policy, or contact support with questions about your account, data or terms.
Website analytics.
Your choice.
Optional website analytics use PostHog to count page views and clicks through to Google Play. Analytics only run after you choose Allow analytics. Declining does not affect access to the website or app links.
Events include the page path, referring website domain and the position of a Google Play button. Solution pages also include a page identifier and predefined campaign labels, when present. These labels help us understand which public guide or campaign led to a visit; arbitrary query values are discarded. We use a random identifier for the current browser tab, separate from your app account. We do not send your name, email, raw URL query strings or memory content, and do not record your screen. PostHog processes events using its EU service; network requests also expose connection information to the service.
Your analytics choice is saved in this browser for up to 180 days. If you allow analytics, a temporary identifier is stored for the browser tab. Use Analytics preferences in the footer to change your choice; declining stops further events and removes that identifier. Changing your choice does not remove events already sent.