Privacy Policy

Content you upload

The core purpose of mem-re is to store, share, and collaborate on your memories. When you use the Services, we collect and store:

• Photos and videos you upload, capture within the App, or import from your device or connected services.
• Metadata embedded in your media, which may include the date and time a photo or video was taken, camera and device model, and - where your device has recorded it and you have not stripped it - the GPS coordinates of where the media was captured. We use this metadata to sort your memories chronologically, group them by place or event, and display them on maps and timelines. You can control whether location metadata is captured through your device's camera and privacy settings.
• Captions, titles, descriptions, comments, reactions, and tags you or your collaborators add.
• Organizational information, such as the albums, collections, or memories you create, how you name and arrange them, and which items you have favorited or archived.

Your content belongs to you. We process it to operate the Services on your behalf.

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register, participate in activities on the Services, or otherwise contact us. This may include:

• Name and profile information - including any display name and profile photo you choose.
• Email address and/or phone number - used for account creation, authentication, account recovery, and service communications. Where we verify a phone number by SMS, we retain only what is necessary to operate the account.
• Authentication identifiers - if you sign in using Apple, Google, or another provider, we receive a unique identifier and, depending on your choices and the provider's settings, your name and email address. We do not receive your password.
• Contact and invitation information - if you invite someone to a shared memory, we process the email address or phone number you provide in order to deliver that invitation. We do not use invitee contact information for our own marketing. If you choose to grant contacts access to make inviting easier, we use that access only to display suggestions to you.
• Sharing and collaboration data - which memories you have shared, who you have shared them with, who has been granted view or contribute access, and who invited you.
• Correspondence - information you provide when you contact support or otherwise communicate with us.

Sensitive information: We do not request sensitive personal information, and we do not process it for the purpose of inferring characteristics about you. Because you can upload any photo or video, your content may incidentally contain information that is considered sensitive under applicable law. We treat all uploaded content as confidential and process it only as described in this notice.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services, including IP address, device and browser characteristics, operating system, language preferences, referring URLs, country, and usage data. This information is primarily needed to maintain security and operations, and for analytics and reporting.

• Log and usage data: Service-related diagnostic, crash, and performance information collected in log files, including upload and download activity, feature usage, and error reports.
• Device data: Information about your device, including IP address, hardware model, operating system version, unique device or installation identifiers, and system configuration.
• Storage and account usage: The amount of storage you are using, the number and size of files, and similar information necessary to administer your account.
• Location data: Separately from any location metadata embedded in your media, we may process approximate location derived from your IP address for security and fraud prevention. If a feature requires device location, we will request permission first, and you may revoke it at any time in your device settings.

Device permissions

The App may request access to the following. Each is optional, and you can change your choices at any time in your device settings, though declining may limit functionality:

• Camera - to capture photos and videos directly within the App.
• Photo library - to let you select media to upload, and to save media to your device. Where your operating system supports it, you may grant access to selected items only rather than your full library.
• Microphone - to record audio as part of video capture.
• Notifications - to alert you when someone shares a memory with you, adds to a shared memory, or comments on your content.
• Contacts - to help you find and invite people. Contact data is used only to render suggestions and to send invitations you initiate.

We process your information to provide, improve, and administer our Services, communicate with you, prevent abuse and fraud, and comply with law. Specifically, we process personal information to:

• Facilitate account creation, authentication, and account recovery.
• Store, back up, encode, transcode, compress, and deliver your photos and videos , including generating thumbnails, previews, and format variants so your media loads quickly across devices.
• Enable sharing and collaboration, including delivering invitations, managing permissions, syncing contributions from multiple people to a shared memory, and showing collaborators' names and activity within memories they participate in.
• Organize your content - for example, grouping media into memories by date, location, or event using metadata and on-device or server-side analysis.
• Send push notifications about activity in your memories, where you have enabled them.
• Send administrative and transactional information, including changes to our terms, security notices, and storage or billing notices.
• Enable user-to-user communication, such as comments and reactions within shared memories.
• Moderate content and detect material that violates our terms or applicable law. This may include automated scanning of uploaded media, and human review where a piece of content is flagged. See Section 5.
• Diagnose problems, monitor service performance, and secure the platform against unauthorized access, abuse, and fraud.
• Improve the App - aggregated and de-identified usage data may inform product decisions.
• Comply with legal obligations and enforce our terms.
• Protect an individual's vital interests.

What we do not do

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• We do not use your photos, videos, or other content to train generative artificial intelligence models , and we do not license your content to third parties for that purpose.
• We do not use your content for advertising, and we do not serve targeted advertising in the App based on the contents of your memories.
• Our service providers are contractually prohibited from using your content for their own purposes.

We only process personal information when we have a valid legal basis to do so.

If you are located in the EU or UK, we may rely on:

• Performance of a contract - to store your content, sync it across devices, and deliver the sharing and collaboration features you have asked for.
• Consent - for optional features such as push notifications, contacts access, and device location. You may withdraw consent at any time.
• Legitimate interests - to secure the platform, prevent fraud and abuse, moderate content, understand how the Services are used, and improve the product.
• Legal obligations - including responding to lawful requests and meeting content-reporting duties.
• Vital interests - in emergencies involving a threat to someone's life or safety.

If you are located in Canada, we may rely on express or implied consent, or other lawful bases permitted by applicable law.

We do not sell your personal data. Your information is shared only as follows:

• With people you share with. When you share a memory, album, or individual item, the people you share it with can see that content, your display name and profile photo, and your activity within that memory. If you grant contribute access, they can add their own content. This is core to how the App works, and you control it through the App's sharing settings.
• With other collaborators in a shared memory. If you join a memory someone else created, your name, profile photo, contributions, comments, and reactions are visible to the other participants.
• Through links you create. If you generate a shareable link, anyone who has that link may be able to view the associated content, depending on the settings you choose. Links may be forwarded beyond the people you originally sent them to. You can revoke a link at any time; revocation prevents future access but cannot recover content already viewed, downloaded, or copied.
• Service providers. We use third-party processors strictly to operate the App - including cloud hosting and object storage, content delivery networks, media transcoding, SMS and email delivery, push notification delivery (Apple Push Notification service and Firebase Cloud Messaging), automated content moderation, error monitoring, and analytics. They may process your content only on our instructions and may not use it for their own purposes.
• Payment processors. If you purchase additional storage or a subscription, payment is handled by the Apple App Store, Google Play, or our payment processor. We receive confirmation of the transaction and subscription status, not your full payment card details.
• Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business. We will notify you before your information becomes subject to a materially different privacy notice.
• Legal requirements. We may disclose data if we believe in good faith that it is required by law, or necessary to investigate potential violations of our terms, protect the rights, property, or safety of our users or the public, or respond to an emergency involving a risk of death or serious injury.
• With your direction. If you ask us to connect mem-re to another service, we share what is necessary to complete that request.

Important note about content others have received

If someone has downloaded, saved, or re-shared content you posted to a shared memory, deleting the original from your account will not remove copies they already hold. Please consider this before sharing.

To keep mem-re safe and to comply with law, uploaded media may be scanned using automated tools that detect content violating our terms - including child sexual abuse material (CSAM), non-consensual intimate imagery, graphic violence, and other prohibited content. Automated flags may be escalated to trained personnel for review, and content confirmed to be unlawful may be removed, the responsible account suspended, and - where legally required - reported to the National Center for Missing & Exploited Children (NCMEC) or other appropriate authorities.

This scanning is limited to safety and legal compliance purposes. We do not review your private content for any other reason except where necessary to provide support you have requested, investigate a specific violation, or comply with a valid legal process.

Memories often include other people. If you upload photos or videos containing individuals who are not mem-re users, you are responsible for having any consent required by the laws that apply to you, and for respecting the wishes of people who ask not to be included.

If you believe content on mem-re depicts you and was shared without your permission, contact us at privacy@mem-re.com and we will review the report. We may need limited information from you to identify the content in question.

We may use cookies and similar technologies (such as web beacons, pixels, and mobile SDK identifiers) to operate the Services, keep you signed in, remember preferences, secure the platform, and understand usage. As mem-re is primarily a mobile application, tracking is minimal and limited to what is necessary for security, functionality, and first-party analytics. We do not use third-party advertising cookies.

Where required, we will ask for your consent before setting non-essential cookies, and you can manage your choices through your browser or device settings.

Our servers and cloud storage are located in the United States. If you access the Services from outside the United States, your information - including your photos and videos - may be transferred to, stored in, and processed in the United States or other countries where our service providers operate.

For transfers of personal information out of the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary technical measures such as encryption. You may request a copy of the relevant safeguards by contacting us.

• Your content is retained for as long as you keep it in your account. When you delete a photo, video, or memory, it is removed from your active view immediately and permanently deleted from our production systems within 30 days.
• Encrypted backups may retain deleted content for up to 90 days before being overwritten in the ordinary course.
• Account information is retained while your account is active.
• If you delete your account, we delete your personal information and content within 30 days, subject to the backup window above, except where retention is required by law or necessary to resolve disputes, prevent fraud and abuse, or enforce our agreements.
• Content you contributed to a shared memory owned by someone else may remain visible to that memory's participants after you leave or delete your account, depending on the memory's settings. You can remove your individual contributions before leaving.
• Log and security data is generally retained for a limited period appropriate to its purpose.
• Records relating to unlawful content may be retained where required by law.

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS) and encryption at rest for stored media, access controls and least-privilege permissions for personnel, secure token storage, isolated storage buckets that are not publicly listable, expiring signed URLs for media access, logging and monitoring, and regular security review.

We implement these technical and organizational safeguards in good faith, but no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Please access the Services within a secure environment, keep your device passcode-protected, and be careful with the links you generate and forward.

If a breach affecting your personal information occurs, we will notify you and applicable regulators as required by law.

We do not knowingly collect data from or market to children under 13. By using the Services, you represent that you are at least 13 years of age, or that you are the parent or guardian of such a minor and consent to that minor's use of the Services. In jurisdictions where a higher minimum age applies to the processing of personal data, you must meet that age or have parental consent.

If we learn that personal information from a user under 13 has been collected, we will deactivate the account and take reasonable measures to promptly delete the data, including any uploaded content. If you become aware of any data we may have collected from a child under 13, please contact us at privacy@mem-re.com.

Depending on your location, you may have rights regarding your personal information, including the right to:

• Access your personal data and the content stored in your account.
• Correct inaccurate personal data.
• Request deletion of your personal data.
• Restrict processing of your personal data.
• Obtain a portable copy of your data - you can export your photos and videos at any time through the App.
• Object to processing based on legitimate interests.
• Withdraw consent, without affecting the lawfulness of processing carried out before withdrawal.
• Not be discriminated against for exercising these rights.

Many of these can be exercised directly in the App through your account settings, sharing controls, and export and deletion tools. You may also contact us at privacy@mem-re.com. We will respond within 30 days, and will verify your identity before acting on a request - usually by confirming control of the email address or phone number on the account.

If you are in the EEA or UK and believe we have processed your information unlawfully, you have the right to lodge a complaint with your local data protection authority. In Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Account information: If you would at any time like to review or change the information in your account or terminate your account, you can do so in the App or by contacting us. Upon your request to terminate your account, we will deactivate and delete your account and content from our active databases as described in Section 9. We may retain limited information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with applicable legal requirements.

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting. No uniform technology standard for recognizing DNT signals has been finalized, and we do not currently respond to DNT browser signals. Where required by law, we honor recognized opt-out preference signals such as Global Privacy Control. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

Residents of certain U.S. states - including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia - may have additional rights regarding their personal data, including the right to access, correct, delete, obtain a copy of, or opt out of certain processing of personal data, subject to legal limitations.

We do not sell personal information and do not share it for cross-context behavioral advertising , including with respect to consumers we know to be under 16.

You may exercise these rights by contacting us at privacy@mem-re.com. You may designate an authorized agent to make a request on your behalf; we will require proof of authorization. If we deny your request, you may appeal by replying to our decision, and we will respond to the appeal within the period required by your state's law.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date and will be effective as soon as it is accessible. We will notify you of material changes by posting a prominent notice in the App or communicating with you directly before the changes take effect. We encourage you to review this privacy notice periodically.

If you have questions or comments about this notice, you may email us at privacy@mem-re.com, or write to us at:

You have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, or deletion of your personal information. Most of this is available directly in the App under Settings. To submit a request another way, please contact us at privacy@mem-re.com.

Terms & Conditions