Updated November 3, 2026

Privacy

Cantaloupe is a private memory journal. An account is optional. We do not track you, show ads, or sell your data.

On your phone

Your memories and media save in the app on your iPhone. You can write, record, browse, search, and use your memory map without signing in. iOS protects app files using device encryption. Your own Apple device backup settings may also create copies managed by Apple.

What we collect

If you create an account, we store your email address and an account identifier to provide sign-in and backup. Account authentication is handled by Amazon Cognito; the app keeps its sign-in session in the iOS Keychain.

When you sign in, Cantaloupe backs up the memories on this phone: your writing, photos and videos, audio clips, dates, and any place names and precise locations included in memories. These are linked to your account and used only to provide the app, backup, and restore.

Camera, microphone, photo library, and location access require your permission. We use them only when you choose the related feature. We do not continuously track your location. You can change permissions in iPhone Settings.

Where data lives

Cloud account data, memory records, and media are stored with Amazon Web Services in the United States, us-east-2 (Ohio). Cloud data is encrypted in transit and at rest using AWS-managed encryption. This is not end-to-end encryption: the service can process your data to provide backup and restore.

Backups and retention

Media is copied to a separate private backup bucket. Prior versions in the primary media bucket are kept for 30 days. Deleting an individual memory removes its active cloud record and media; prior versions and the separate media backup can remain for recovery until account deletion. Superseded versions in the backup bucket expire after 365 days.

Memory records have a rolling 35-day database recovery window. Weekly database exports are retained for up to 400 days. Exports may contain memories and account identifiers, but do not contain Cognito passwords. Deleted records in these historical snapshots expire with the snapshot; they are not used for ordinary app restore.

Delete your account

In Cantaloupe, go to Settings, choose Delete account, and confirm. This removes your account, all active memory records, and every version of media under your account in both the primary and backup media buckets. Historical database recovery snapshots and weekly exports expire on the schedules above. They cannot be selectively edited and are not restored into an active account after deletion.

You can choose Keep memories on this phone or Erase from this phone too. Keeping memories downloads missing originals before cloud deletion. Other phones and device backups can retain their own local copies; erase those separately if desired. Signing out alone does not delete your account or the memories on your phone.

No advertising or tracking

We do not use advertising identifiers or analytics SDKs, combine your data with other companies’ data for advertising, sell personal information, or use journal content to train AI models. AWS processes data on our behalf to run the service.

Contact

For privacy questions or help with deletion, email jamison.cote@gmail.com. Please do not send passwords or private memories.