Privacy Policy

What we collect

When you create an account, we collect:

• Your name and email address
• A password (stored as a secure hash, we never see it in plain text)
• A username you choose

When you use the app, we store:

• Memories you write, including titles, dates, text, and any photos you upload
• The people you tag in memories and their email addresses if you provide them
• Perspectives (responses) other people add to your memories
• Reactions and notifications generated by your activity
• A profile photo if you choose to upload one
• Friend connections you make within the app
• Location names attached to memories, if you add them (either by typing or from a photo's GPS data)
• A device token to deliver push notifications, if you grant permission

How we use your data

We use your information solely to operate Memori:

• To show you your memories and the memories you've been tagged in
• To notify you when someone adds a perspective to your memory or tags you
• To link your account to memories you've been tagged in by email
• To send you occasional product-related emails (you can opt out at any time)

We do not use your data to train AI models. We do not profile you for advertising purposes.

Who can see your memories

Memori is private by design. Your memories are visible only to:

• You
• People you explicitly tag as "was there" or "can view"

There is no public feed. Nobody outside your tagged group can see your memories. We do not index your content for search engines.

Photos

Photos you upload are stored securely in our cloud storage (Supabase Storage). They are accessible only to you and the people tagged in the memory they belong to. We do not scan, analyse, or use your photos for any purpose other than displaying them within the app.

On iOS, when you grant Memori access to your photo library, we only access photos you explicitly select or that match a date range you initiate. We do not access your full photo library in the background.

If a photo contains GPS metadata and you have granted location access, Memori may use it to suggest a location for the memory. Location lookups are performed via Mapbox (see Third-party services below). If you choose to attach a location, both the place name and its coordinates are stored with the memory, so it can be shown on a map. You can remove a location at any time by editing the memory.

Third-party services

Memori uses a small number of trusted third-party services to operate:

• Supabase: database, authentication, and file storage. Your data is stored on Supabase servers. Supabase Privacy Policy
• Resend: email delivery for notifications. We share your email address with Resend only to deliver emails you've triggered. Resend Privacy Policy
• Netlify: web hosting. Netlify Privacy Policy
• Mapbox: location search and reverse geocoding (converting GPS coordinates to place names). Only the coordinates from photos you're actively adding to a memory are sent to Mapbox; no other personal data is shared. Mapbox Privacy Policy
• Apple: if you sign in with Apple, your authentication is handled by Apple's Sign In service. Apple may share a name and email address (or a private relay address) with us on first sign-in only. Apple Privacy Policy
• RevenueCat: subscription and purchase management. If you purchase a premium subscription, RevenueCat processes your transaction and stores your subscription status. Your Supabase user ID is shared with RevenueCat to link your subscription to your account. RevenueCat Privacy Policy
• Sentry: error monitoring. If the app crashes or encounters an error, diagnostic information including your anonymised user ID, device type, and a stack trace is sent to Sentry to help us fix the issue. No memory content or personal information is included in error reports. Sentry Privacy Policy

We do not use Google Analytics, Facebook Pixel, or any advertising trackers at this time.

Data retention

Your data is kept for as long as your account is active. If you delete your account, your memories, photos, and personal information will be permanently deleted within 30 days. Memories you've contributed to (perspectives, photos on other people's memories) may remain visible to the memory author unless they also delete their account.

Your rights

You have the right to:

• Access all data we hold about you
• Correct inaccurate information
• Delete your account and all associated data
• Opt out of email notifications at any time

To exercise any of these rights, contact us at the address below.

Children

Memori is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us and we will delete it promptly.

Changes to this policy

If we make significant changes to this privacy policy, we'll notify you via email or an in-app notice before the changes take effect. The date at the top of this page reflects when it was last updated.