Privacy Policy

Welcome to Memorease. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application. By using Memorease, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide Directly

Data Type	Examples	Purpose
Account Information	Name, email address (via Google Sign-In)	Account creation and authentication
Children's Profiles	Child's name, date of birth, profile photo	Organizing memories by child
Memory Content	Memory titles, descriptions, dates, photos, memory types	Storing and displaying your family memories
Usage Data	Monthly memory count, image upload count	Enforcing free tier limits, premium features

1.2 Information Collected Automatically

• Authentication Data: Google OAuth tokens for sign-in verification
• Sync Data: Device sync timestamps to maintain data consistency
• Error Logs: Technical logs for debugging and improving app performance

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve Memorease's core functionality
• Account Management: To create and manage your user account
• Data Synchronization: To sync your memories across devices
• Premium Features: To manage subscription status and enforce usage limits
• Customer Support: To respond to your questions and support requests
• App Improvements: To analyze usage patterns and fix bugs
• Legal Compliance: To comply with applicable laws and regulations

3. Data Storage and Security

3.1 Where Your Data is Stored

• Cloud Storage: AWS (Amazon Web Services) servers located in the EU (London region - eu-west-2)
• Local Storage: On your device using encrypted local database (WatermelonDB/SQLite)

3.2 Security Measures

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption
• Authentication: Secure Google OAuth 2.0 authentication with JWT tokens
• Access Controls: User data is isolated - users can only access their own data
• Database Security: PostgreSQL database with schema-level isolation and access controls
• Secure Storage: Sensitive tokens stored in device-secure storage (iOS Keychain, Android Keystore)

4. Third-Party Services

Memorease integrates with the following third-party services:

4.1 Google Sign-In

• Purpose: User authentication
• Data Shared: Name, email address, Google ID
• Privacy Policy: https://policies.google.com/privacy

4.2 RevenueCat

• Purpose: Subscription and premium feature management
• Data Shared: User ID, subscription status, purchase events
• Privacy Policy: https://www.revenuecat.com/privacy

4.3 AWS (Amazon Web Services)

• Purpose: Cloud hosting and data storage
• Data Stored: All app data (memories, profiles, images)
• Privacy Policy: https://aws.amazon.com/privacy/

5. Data Retention

• Active Accounts: We retain your data for as long as your account is active
• Account Deletion: When you delete your account, all data is permanently deleted immediately with no retention period
• Legal Requirements: We may retain certain information if required by law (e.g., for tax or legal compliance)

6. Your Rights and Choices

6.1 Access and Portability

• You can access all your data directly within the Memorease app
• To request a copy of your data, email us at support@memorease.cloud

6.2 Correction and Updates

• You can edit your memories and children's profiles directly in the app
• Account information (name, email) is managed through your Google account

6.3 Data Deletion

You have the right to delete your data at any time:

• In-App: Settings → Account Management → Delete Account
• By Email: Contact support@memorease.cloud
• Instructions: https://api.memorease.cloud/delete-account.html

6.4 Opt-Out of Data Collection

Since Memorease's core functionality requires data storage, opting out of data collection means you cannot use the app. You can delete your account at any time.

7. Children's Privacy

Memorease is designed to store information about children (entered by parents/guardians), but the app itself is intended for use by adults (parents/guardians).

• We do not knowingly collect personal information directly from children under 13
• Parents/guardians are responsible for the information they enter about their children
• If we learn that we've collected data from a child under 13 without parental consent, we will delete it immediately

8. International Data Transfers

Your data is stored on AWS servers in the EU (London, UK - eu-west-2 region). If you access Memorease from outside the EU, your data will be transferred to and stored in the EU. By using Memorease, you consent to this transfer.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do:

• We will update the "Last Updated" date at the top of this policy
• For significant changes, we will notify you via email or in-app notification
• Continued use of Memorease after changes constitutes acceptance of the updated policy

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about data we collect and how it's used
• Right to Delete: Request deletion of your personal data
• Right to Opt-Out: We do not sell personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at support@memorease.cloud

11. GDPR Rights (EU Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of Access: Obtain confirmation of data processing and access to your data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Request restriction of processing
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time

12. Do Not Track

Memorease does not track users across third-party websites or apps. We do not respond to "Do Not Track" signals because we don't track users for advertising purposes.