Memori
Privacy Policy
Last updated: 4 November 2026
Memori ("we", "us", "our") is a journal and memory book app designed to help you capture, store, and revisit your memories. We are committed to protecting your privacy and handling your data transparently and responsibly.
This policy explains what data we collect, why we collect it, how we use it, and your rights.
1. Who We Are (Data Controller)
Memori is operated by Memori App (UK).
We act as the data controller for your personal data.
If you have any questions about this policy or your data, you can contact us at:
memorispaces@gmail.com
2. Information We Collect
We only collect the data necessary to provide and improve the app.
Account Information
- Email address (required for sign-in via magic link, Google OAuth, or Apple Sign-In)
- Display name (from your Google or Apple profile, or set by you)
- Apple User ID (if you sign in with Apple - Apple may provide a private relay email address)
- Profile photo (optional, stored securely if provided)
Content You Create
- Journal entries (title, body text, date, tags, favourites)
- Photos (stored securely in cloud storage)
- Voice recordings (used only for transcription and not stored on our servers)
- Location (only if you grant permission, used to tag entries)
Account and Subscription Data
- Trial start and expiry dates
- Subscription status (managed by Apple/Google or our payment provider)
Setup and Referral
- Your answers to the two optional setup questions (what you find hardest about keeping photos, and who you are keeping your journal for). You can skip either question
- How you arrived at Memori (an invite link, a referral link, or directly), and the journal an invite pointed you to, so we can set up your access and any joining offer correctly
Waitlist Information
- Email address (only if you choose to join a waitlist, such as the Memori Events waitlist, so we can let you know when a feature launches). You do not need a Memori account to join a waitlist, and you can ask us to remove your email at any time.
Usage Data (Pseudonymised)
- App interaction events (e.g. "entry created", "journal shared")
- Onboarding progress and feature usage
This data is pseudonymised and does not include your journal content, photos, or identifiable personal text.
What We Do NOT Collect
- We do not receive or store your card details. Subscriptions are paid through Apple or Google. For printed books, we send Stripe the amount, currency, product and quantity, and we store the payment and refund references and their status
- We do not use advertising SDKs
- We do not track you across apps or websites
- We do not sell, rent, or trade your personal data
3. How We Use Your Information
We use your data strictly to operate and improve the app:
| Purpose | Data Used |
|---|
| Account authentication | Email, profile data, Apple User ID |
| Store and display memories | Entries, photos, location |
| Voice-to-text transcription | Temporary audio |
| Generate Memory Books (PDF) | Selected entries and photos |
| Share journals | Invite link tokens, who created each link and who used it to join |
| Manage subscriptions | Trial and subscription data |
| Send waitlist confirmations and launch updates | Email address |
| Send notifications (optional) | Device token, preferences |
| Improve the app | Pseudonymised usage data |
4. Legal Basis for Processing (UK GDPR / EU GDPR)
We rely on the following legal bases:
- Contract - to provide and operate the app
- Legitimate Interests - to improve the app through analytics
- Legitimate Interests - to keep two limited deletion records (an audit record with your account ID and email address, and a technical record of what was removed) for the periods in section 11, so we can show that a deletion request was completed and investigate security incidents
- Consent - for optional features (location, microphone, notifications)
- Consent - to send the waitlist confirmation and launch updates you asked for
You can withdraw consent at any time through your device settings where applicable, or by contacting us.
5. Third-Party Services
We use trusted service providers to operate the app. We only share the minimum data necessary.
| Service | Data Shared | Purpose |
|---|
| Supabase (EU) | Account data, entries, photos | Authentication, database, storage, and backups |
| Vercel | Requests to our website and backend | Website and backend hosting |
| Apple (Sign in with Apple) | Apple User ID, email, name | Authentication (data stays with Apple) |
| Stripe | Payment details you enter with Stripe, plus your user ID, book ID, product, quantity, amount and currency | To take and refund payments for printed books |
| RevenueCat | Subscription and purchase status, device identifiers | Manage app subscriptions and access |
| Gelato | Your Memory Book file and delivery name, address, and contact details | Print and deliver your Memory Book |
| OpenAI | Audio recordings | Voice transcription (not retained) |
| BigDataCloud | GPS coordinates | Convert coordinates into place names |
| Resend | Email address | Send account, sharing, and waitlist emails |
| EmailJS | Name, email, message | Send feedback and bug reports |
| Sentry | Pseudonymised diagnostic and crash data (no journal content) | Error monitoring |
| PostHog (EU) | Pseudonymised usage data | Product analytics |
Most providers process data only on our instructions. Stripe keeps payment records for accounting, tax and fraud-prevention purposes.
We keep system and webhook logs and service usage logs to operate and secure the service. Order webhook logs and service usage logs are kept for the periods set out in section 11. System logs held by our hosting providers are kept for their standard short log-retention period. We use waitlist entries to send the confirmation and launch updates you asked for. Backups held by our providers expire on their normal cycle.
6. International Data Transfers
Some services we use (such as OpenAI) may process data outside the UK or European Economic Area (EEA).
Where this occurs, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs)
- Providers with strong security and data protection commitments
7. Device Permissions
Memori requests optional permissions:
- Microphone - to record voice memos for transcription
- Photo library - to attach images to entries
- Location - to tag entries with a place
- Notifications - to send reminders and alerts
You can disable any permission in your device settings. The app will continue to function with reduced features.
8. Data Storage and Security
We take security seriously and implement:
- Encryption in transit (HTTPS/TLS)
- Secure storage of authentication tokens (iOS Keychain / Android Keystore)
- Row Level Security (RLS) to restrict access to your data
- Private storage buckets with time-limited access URLs
- Server-side processing for sensitive operations
- Access controls and regular security reviews
Voice recordings are deleted immediately after transcription and never stored on our servers.
9. Data Sharing Within Journals
If you share a journal, other members can see:
- Entries (text, photos, dates, tags, location)
- Display names and avatars of members
You control access and can remove members at any time.
When a member leaves or is removed from a journal, they keep read access and can export their contributions for 7 days, after which their access ends. The memories they added remain in the journal for its other members.
10. Free Trial and Subscription
- 14-day free trial with full access
When your trial or subscription ends, your account becomes read-only: you can still view and export your memories. We never delete your memories for inactivity while you have an active subscription. If you have no active subscription and don't use the app for around 90 days, we will email you. If you don't sign in or subscribe within 30 days of that email, your memories may be permanently deleted. We'll email you again 7 days before that happens. Signing in or subscribing at any time before then stops it.
Your data is yours.
11. Data Retention
- Active accounts - retained while your account is active
- Deleted memories - you can undo a deletion straight away in the app. Deleted memories are then permanently deleted, usually within 2 hours
- Accounts without an active subscription - see section 10 for when memories may be deleted
- Deleted accounts - your account, your profile, journals that only you are in (with all their memories and photos) and your Memory Book files are removed from the live service; copies in our providers' backups expire on their normal backup cycle. Shared journals that still have other members stay for those members, and the memories you added remain in them, with your name removed. We keep two limited records of the deletion: an audit record with your account ID and email address, deleted 2 years after the deletion starts; and a technical record of what was removed and whether each step completed, with no email address, deleted 2 years after the deletion has completed (if a step has not completed, we keep it until it has). We keep them so we can show that your deletion request was completed and investigate security incidents, then delete it
- Members who leave or are removed from a journal - you keep read access and can export your contributions for 7 days, then your access ends. The memories you added remain in the journal for its other members
- Journals with no active members - a journal that has no active members may be permanently deleted after a period, and we will email before that happens. Everything in it, including memories and photos, is removed
- Printed book files - we keep the print-ready file for your book for 180 days after it is created, then delete it. If a print order for your book is still in progress at that point, we keep the file until the order has finished. If you delete your account sooner, the file is deleted with it. Rarely, a stored copy cannot be deleted straight away. Its link in Memori is removed at once, a download link already given out keeps working for up to 24 hours, and the copy is kept privately until we remove it
- Book orders - we store your delivery name, address and contact details when you start a print order, including orders you start but do not complete. You can't delete a book, or your account, while an order for that book is in progress. An order counts as in progress from when you start paying for it: for up to 1 hour if you do not finish paying, for up to 8 days if your card payment was authorised but the order was not placed, and otherwise until the order has finished and any payment or refund has been settled. Once the order has finished and any payment or refund has been settled, deletion works as normal. We delete our order details, including those from orders you did not complete, when you delete the book or your account. Stripe keeps payment records for accounting, tax and fraud-prevention purposes
- Audit records and order logs - the two account-deletion records are kept as set out under Deleted accounts above. Most other audit records, and order webhook logs that were processed successfully, are deleted after 12 months. Webhook logs that failed or were not processed, and a small number of records we need to recover from errors, are kept until they are resolved
- Service usage logs - deleted after 30 days
- Waitlist sign-ups - your email address is deleted 24 months after you sign up, or sooner if you ask us
Analytics data is retained only as long as necessary for product improvement.
12. Your Rights
You have the right to:
- Access your data
- Correct your data
- Erase your data, including by deleting your account
- Restrict how we process your data
- Object to processing
- Receive your data in a portable form (you can export it in the app)
- Withdraw consent
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk
These rights have some legal exceptions.
You can exercise these rights via the app or by contacting us.
You can request account deletion at any time. In-app deletion can't finish while a print order is in progress; once it has finished and any payment or refund has been settled, you can try again. You can still contact us about your data rights while an order is in progress. To delete your account, including without the app, see Delete your Memori account.
We normally respond within one month; if the law allows us more time, we'll tell you why.
13. Children's Privacy
Memori is not intended for children under 13, and we do not knowingly collect their data.
If you believe a child has created an account, please contact us and we will delete it promptly.
14. Changes to This Policy
We may update this policy occasionally. We will update the "Last updated" date and notify users of significant changes.
15. Contact Us
If you have any questions:
memorispaces@gmail.com
memoriapp.co.uk
Memori is built to help you keep your memories, privately, securely, and entirely under your control.