Privacy and usage sharing
Memo keeps chat history and memory on your machine. When you choose an external model, the context sent for that request is processed by that provider. Remote access, mail, messaging and cloud backup use the services you connect.
Official builds
The daily usage summary is on by default, including an upgrade from a version without this feature. Turn it off in the setup wizard or Settings → Privacy. An existing off preference is preserved. Source builds do not send daily reports unless you enable sharing.
The summary includes a random installation ID, version and platform, coarse hardware information, model/provider usage counts, token totals, error classes, update results, Memo crash locations and feature counters. It does not include messages, replies, memory contents, contacts, mail addresses, files, project names, credentials or personal file paths.
A separate installation count
Official builds send a one-time count per data directory with version, operating system and architecture, without an installation ID. This is separate from the daily report and still happens when the daily sharing switch is off. Source builds and MEMO_TELEMETRY=off do not send it.
Inspect and control
Use memo telemetry status, preview, on, off, reset-id and delete in the terminal. The preview shows the report before submission. The server can see the source IP of an HTTPS connection even though no IP field is included in the report body.
Backups and permissions
Encrypted backups are optional. Agent tools use permissions; external services are chosen by you. Usage sharing contains no conversation content, but a random ID connects daily reports for one installation. Read the source inventory for all fields and the limits of client-side verification.