Privacy Policy

Who to contact

THIRDMEDIA LTD operates Memory Box. For privacy questions or a request about your information, contact info@memorybox.me. Our company details are in the Company tab.

This notice also concerns people who appear in photographs, are mentioned in stories, receive invitations or open shared links, whether or not they have an account.

Information used by the service

Information comes from you, people who share or contribute memories, your chosen sign-in service and your use of the website.

• Account details: your name, email address, profile photograph, account identifiers and the sign-in details provided by your chosen method. Some account flows also use a phone number.
• Memories: photographs, file details and available photo metadata, people’s names and relationships, recordings, interview answers, transcripts, edited stories and generated audio.
• Face information: detected faces, matching information and profiles used to suggest that the same person appears in different photographs.
• Sharing information: recipients, invitations, links, access permissions, contributions and records of copies kept in another Memory Box.
• Support and technical information: messages you send us, sign-in and security records, delivery status, browser/device information and records of actions such as opening a shared story or saving a contribution.

Why the information is used

Information is used to run accounts, store and display memories, organise photographs, create stories, enable the sharing you request, respond to support enquiries and protect the service from misuse.

With your permission, optional usage analytics helps us understand which features work and where people encounter problems.

We use ordinary account and service information to provide the service you request. We also use information to keep the service secure, improve it in ways that respect people’s rights, and meet legal obligations.

Features needing consent require a separate, appropriate choice. Accepting general terms or giving a photograph a name does not automatically authorise every use of another person’s information.

Faces, photographs and AI

Photographs can be sent to Amazon Rekognition to detect faces and compare them with faces in the same Memory Box. The service stores face matching information and links it to names you provide. This is more than simply storing a photograph and can involve sensitive biometric information.

Automatic face grouping uses a separate private Rekognition collection for each Memory Box in the AWS Europe (London) region. Matching is confined to that collection, not searched across unrelated families’ Memory Boxes. AWS receives photograph bytes and opaque identifiers; the collection stores mathematical face representations rather than the photograph itself. Names and relationships are held in Memory Box, rather than sent as the collection’s person identifiers.

During onboarding we explain face grouping and AI storytelling separately. You can accept both agreements to enable these features, or continue with both features off. We save the wording and version you agreed to and the time of your choice. You can change either choice in Privacy & AI settings. Turning face matching off stops new automatic face matching. Turning AI story help off stops new AI story creation and other AI story requests. You can still use Memory Box to view your photos, play existing stories and manage or delete your data. A request already in progress may finish. Uninstalling the app does not delete your account or stored information.

Photographs and interview context may be sent to Anthropic to help prepare questions. Interview answers and transcripts may also be processed by Anthropic to organise the wording of a story.

Recordings can be sent to ElevenLabs for speech-to-text processing, and prepared text can be sent to ElevenLabs to generate a narrator’s voice. Both the original recording and the finished audio may be stored in your Memory Box.

To help prevent clearly explicit sexual content being shared, uploaded photographs are checked by AWS Rekognition and new story text is checked by Anthropic in the background. Older content may receive its first check when a sharing link is prepared. We reuse a saved Safe result for unchanged content; opening or sharing it does not run that check again. Changed content needs a new decision. These safety checks are separate from optional face matching and AI story creation. We keep the result and a reference to the content, and authorised administrators can review reported material. You can report a story from its menu, block its contributor and manage blocked people in Settings.

These tools can make mistakes. Review their results before sharing. Contact us about a face, voice or story involving you.

Who can receive information

We do not sell your personal data. We share relevant information with the providers that run the features you choose and the safety checks described above.

Supabase provides account, database and media-storage services in the current application. Vercel hosts the application. Expo, Apple’s push notification service and Google’s Firebase Cloud Messaging deliver alerts to registered devices; the alert can include the contributor’s display name and album name, but does not contain a story transcript, recording, photograph or invitation token. Device registrations are tied to the signed-in account and session. Other providers support AI processing, security checks and email delivery. The code includes Cloudflare Turnstile for security checks and Resend, with a Postmark option, for email delivery.

When you use an external sign-in provider or choose a messaging app to share a link, that provider also processes information under its own terms and privacy notice.

People with access to a shared album or story can see the information included in it. A people-album invitation link expires after 24 hours and can be accepted by one account. Accepting it grants ongoing album access, including photographs added later, until that access is removed. Story links have their own sharing settings and can allow playback without signing in. Links can be forwarded before they are used and may generate previews in messaging services. People may keep independent copies.

Information may also be disclosed where legally required or necessary to investigate misuse or protect people’s rights. Contact us for information about the providers and processing arrangements relevant to your information.

Cookies and information on your device

Essential cookies and browser storage support sign-in, security, the selected Memory Box, uploads and recovery of unfinished work. Optional usage analytics is off until you opt in. Memory Box does not use advertising cookies or send website usage reports to Google Analytics.

The signed-in website offers Accept all, Reject optional and Cookie settings. The phone app does not automatically show this banner; optional analytics remains off without a saved opt-in. Open the Cookies tab for the storage inventory, lifetimes and Cookie settings control. Your choice applies to this browser or device.

Optional analytics

With your permission, Memory Box records usage events in its own service to understand how features are used. Cookie settings controls this optional analytics. Your choice does not affect access to your memories. We no longer send website usage reports to Google Analytics.

With analytics enabled, some sharing and account pages also use a browser-tab session identifier to record usage events with Memory Box, such as opening a story or completing a contribution. These events help us understand how features are used and where people encounter problems.

Analytics is optional and relies on your consent. Turning it off in Cookie settings stops further optional collection and clears the analytics cookies and usage-session identifier on this browser. It does not automatically erase reports already received. See the Cookie Policy for more detail.

Keeping and removing information

Saved memories are kept to provide your Memory Box until you remove them or close your account, subject to any lawful need to retain particular records. Unfinished guest work, technical logs, provider records and backups are kept separately from your saved memories.

Account Management provides a permanent account-removal process. It removes your account and the Memory Boxes you own from the active service, and withdraws your recordings and story text from saved stories within Memory Box. Other people’s saved photographs and their own stories remain. Screenshots and files already downloaded outside Memory Box cannot be recalled.

Face matching records remain while the relevant photographs are kept, unless you request their removal. Deleting a photograph also removes its associated face records from its Memory Box’s Rekognition collection and active database. Removing your account deletes the face collections belonging to the Memory Boxes you own. Provider cleanup can fail or take time; a photograph is hidden while incomplete deletion remains available to retry. Withdrawing permission alone does not erase records already stored.

For supported ElevenLabs speech-to-text and generated-audio requests, we queue deletion of the provider’s returned transcript or history record after processing. Failed cleanup is retained for retry or operational review. This does not delete your saved Memory Box story and is not a promise that provider logs, backups or all previously created records are immediately erased. Some information may remain in backups or with a provider, or where it must be retained for a legal obligation or a dispute. Contact us if you need information removed from material another person controls.

Your choices and rights

Depending on the law that applies, you may ask to access or receive a copy of your information, correct it, delete it, restrict its use, object to certain processing or receive a portable copy. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

Contact info@memorybox.me to make a request, including if you appear in someone else’s photographs and have no account. We may need proportionate information to verify your identity and locate the relevant material.

You may complain to a relevant data protection authority. In the UK, this is the Information Commissioner’s Office at ico.org.uk. Contacting us does not remove that right.

Children, security and updates

Family photographs and stories may include children. Take particular care before uploading or sharing their information, and respect their privacy and wishes.

The application uses sign-in, access controls and restricted media links to protect access. No online service can guarantee complete security, so keep your sign-in details private and take care with shared links.

We will update this notice when the service’s information practices change. The date on this page identifies the version; material changes should be brought to your attention.