Data practices · Updated 20 October 2026

Privacy policy

Pepi Memory is a personal desktop knowledge and backup utility. This policy describes its use of Google user data and the operation of this public information website.

Google data accessed

The application requests the Google Drive drive.file scope. It accesses application-created files and files explicitly authorised for the application, including file contents and metadata needed to upload, retrieve, verify and manage encrypted copies. It does not request Gmail, Contacts or unrestricted Drive access.

Purpose and processing

Google Drive is used for encrypted synchronisation copies and separate versioned backups of the owner’s selected knowledge base. The desktop tools communicate directly with Google; this public website does not receive OAuth tokens or Drive file contents.

Storage and security

The working knowledge base is local Markdown. Exported sync contents and filenames are encrypted before upload using rclone crypt. Restic separately encrypts backup contents and metadata. OAuth credentials and recovery secrets are held in a separate local configuration protected by filesystem permissions. Those permissions do not isolate processes running as the same operating-system user.

Sharing and AI processing

Google hosts the encrypted cloud copies. Application-accessed Google user data is not sold, used for advertising or transferred to unrelated third parties. The public website does not process the knowledge base with AI. Separately, if the owner explicitly opens local knowledge in a cloud AI assistant, that selected content may be processed by that provider under the owner’s chosen permissions and its policies. Backup and sync scripts do not call an external AI service.

Retention, deletion and control

Copies and snapshots remain until the owner explicitly removes them. Initial sync uses upload without automatic cloud deletion; replacing a file can retain an earlier encrypted version. Backup retention is currently preview-only, so the proposed retention schedule does not automatically remove snapshots. Deleting a local file alone does not remove its cloud copies or historical backups.

The owner can revoke access in Google Account settings, stop the local timers, and explicitly remove application files or backups. Revoking access prevents future authorised operations but does not by itself delete existing files or local copies. For access or deletion questions, contact the owner using the support email displayed on the Google consent screen.

Website visitors

This information site has no analytics scripts, advertising, sign-in or application cookies. The hosting server may process standard request data, such as IP address, requested URL and timestamp, in its operational access and error logs. This is separate from the desktop memory and Drive data.

Google API data policy

Pepi Memory’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.