Privacy Policy

Account and identifiers

• Email address (for account signup)
• Profile name
• Authentication identifiers from Apple or Google when you use those sign-in methods

Guest participation (no account required)

• Display name chosen when joining an event
• Participant session data needed to keep your spot and photo roll during an event
• Optional email, only if you ask to be notified when the gallery is revealed

User content

• Photos you upload
• Event details you create (title, description, dates, settings, cover image)

Purchases

• Web: payment and receipt data processed by Stripe
• Mobile: purchase receipts and product IDs validated via RevenueCat / App Store / Google Play

Usage and diagnostics

• App and website analytics events, approximate location (city/region when available), device/OS, performance metrics, and crash or error logs via PostHog

Website cookies

Basic cookies or similar technologies for authentication and analytics on the Memori website.

Camera and photos

• Camera access only when you use the capture feature
• Photo library access only when you choose to save or select a photo
• Access requires your device permission and is not used in the background

App Store privacy labels (summary)

Data linked to you may include identifiers (email), purchases, user content (photos), usage data, and diagnostics. Data used for tracking: none. Third-party advertising: none.

• Provide and operate the Service (create events, invite participants, upload and view photos)
• Process purchases and prevent fraud
• Communicate with you (invites, uploads, reveal times, support, service updates)
• Improve reliability and performance (analytics and diagnostics)
• Comply with law and enforce our terms

Legal bases (EEA/UK): performance of a contract, legitimate interests, consent (where required), and legal obligation.

We do not sell personal information. We do not allow cross-app advertising tracking.

Within an event

• Event title/details and photos are visible to invited participants according to the event’s settings
• Your display name may be shown to other participants

Service providers (processors)

• Supabase — database, authentication, storage
• Stripe — web payments
• RevenueCat — mobile purchase validation and entitlements
• PostHog — analytics and diagnostics
• Vercel — web hosting and APIs
• Apple / Google — app distribution and in-app purchases

Providers access data only to perform services for us and must protect it.

• Account data: kept while your account is active
• Deleted accounts: personal data removed within 30 days
• Photos on revealed events you hosted may remain available to participants after account deletion (the event is kept without your account as host)
• If you delete your account, photos you uploaded to others’ events may remain in those events; your attribution will be anonymized where reasonably possible
• Unpaid draft events (pending payment) you created are removed when your account is deleted
• Purchase records: kept as long as required for tax, accounting, or legal reasons (detached from your account identifier where possible)
• Aggregated or anonymized analytics may be kept longer

• Encryption in transit (HTTPS/TLS)
• Encryption at rest provided by our cloud vendors
• Role-based access and monitoring

No security method is perfect. We cannot guarantee absolute security.

Security incidents

If a breach involves your personal data, we will notify you and regulators when legally required.

If you have a Memori account, you can request deletion of your account and associated personal data. Deletion is permanent; temporary deactivation is not offered as a substitute.

You cannot delete your account while you host an active event. End those events first. Deleting your account does not refund purchases.

If you host ended events that are not yet revealed, deleting your account will reveal those galleries for participants. Revealed events you hosted remain available without your account as host. Unpaid draft events are removed.

In the Memori app

Open Settings → Delete Account, confirm, and your account will be deleted.

On the website

Sign in at https://www.memori.cam, open Settings → Delete Account, and confirm.

Without the app (web resource for store compliance)

Email support@memori.cam with the subject line “Account deletion” and the email address on your account. We will process the request and confirm when deletion is complete (typically within 30 days).

Guests without an account

Guests who join with only a display name do not have a Memori account to delete. If you left an optional reveal-notification email, contact support@memori.cam to have that email removed. Photos you contributed to an event remain under the event host’s control as described in our Terms.

We may retain limited data when required by law, to prevent abuse, or in backups that are rotated out on a normal schedule.

In-app and website controls

• Delete account: Settings → Delete Account
• Manage push notifications in your device settings
• Update your profile name in Settings

Requests

Contact support@memori.cam to access, correct, export, or delete your personal data.

Region-specific rights

• EEA/UK (GDPR): rights to access, rectification, erasure, portability, objection, and restriction; you may lodge a complaint with your local supervisory authority
• California (CCPA/CPRA): right to know, delete, correct, and opt out of sale/share (we do not sell or share for cross-context behavioral advertising); no discrimination for exercising rights

Memori is not for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided data, contact support@memori.cam and we will delete it.

We operate with service providers that may process data in the United States and other countries. Where required, we use appropriate safeguards for international transfers.

We will update this page when we change the policy and will notify you of material changes in-app or by email when reasonably possible. Continued use of the Service after changes take effect means you accept the new policy.

Email: support@memori.cam

We aim to respond within 48 hours.

For urgent privacy concerns, include “URGENT – Privacy Request” in the subject line.