Privacy Policy

Who to contact

For privacy questions or a request about your information, contact info@memorybox.me.

This notice also concerns people who appear in photographs, are mentioned in stories, receive invitations or open shared links, whether or not they have an account.

Information used by the service

Information comes from you, people who share or contribute memories, your chosen sign-in service and your use of the website.

• Account details: your name, email address, profile photograph, account identifiers and the sign-in details provided by your chosen method. Some account flows also use a phone number.
• Memories: photographs, file details and available photo metadata, people’s names and relationships, recordings, interview answers, transcripts, edited stories and generated audio.
• Face information: detected faces, matching information and profiles used to suggest that the same person appears in different photographs.
• Sharing information: recipients, invitations, links, access permissions, contributions and records of copies kept in another Memory Box.
• Support and technical information: messages you send us, sign-in and security records, delivery status, browser/device information and records of actions such as opening a shared story or saving a contribution.

Why the information is used

Information is used to run accounts, store and display memories, organise photographs, create stories, enable the sharing you request, respond to support enquiries and protect the service from misuse.

With your permission, optional usage analytics helps us understand which features work and where people encounter problems.

We use ordinary account and service information to provide the service you request. We also use information to keep the service secure, improve it in ways that respect people’s rights, and meet legal obligations.

Features needing consent require a separate, appropriate choice. Accepting general terms or giving a photograph a name does not automatically authorise every use of another person’s information.

Faces, photographs and AI

Photographs can be sent to Amazon Rekognition to detect faces and compare them with faces in the same Memory Box. The service stores face matching information and links it to names you provide. This is more than simply storing a photograph and can involve sensitive biometric information.

Photographs and interview context may be sent to Anthropic to help prepare questions. Interview answers and transcripts may also be processed by Anthropic to organise the wording of a story.

Recordings can be sent to ElevenLabs for speech-to-text processing, and prepared text can be sent to ElevenLabs to generate a narrator’s voice. Both the original recording and the finished audio may be stored in your Memory Box.

These tools can make mistakes. Review their results before sharing. Contact us about a face, voice or story involving you.

Who can receive information

Supabase provides account, database and media-storage services in the current application. Other providers support AI processing, hosting, security checks and email delivery. The code includes Cloudflare Turnstile for security checks and Resend, with a Postmark option, for email delivery.

When you use an external sign-in provider or choose a messaging app to share a link, that provider also processes information under its own terms and privacy notice.

People with access to a shared album or story can see the information included in it. Album and story links may work without signing in, can be forwarded, and may generate previews in messaging services. An album can include photographs added later. People may keep independent copies.

Information may also be disclosed where legally required or necessary to investigate misuse or protect people’s rights. Contact us for information about the providers and processing arrangements relevant to your information.

Cookies and information on your device

The website uses essential cookies and browser storage for sign-in, security, the active Memory Box, upload progress and recovery of unfinished work. These support the features you ask to use and remain available when you reject optional cookies.

On your first visit, the cookie notice offers Accept all, Reject optional and Cookie settings. Optional analytics starts off. Accept all permits optional analytics; Reject optional keeps it off. Cookie settings lets you choose and save your preference. You can change your choice at any time using the Cookie settings link in the Cookie Policy.

The Cookie Policy explains the storage used by the website, its purposes and how long it lasts. Your cookie choice is remembered on this browser for up to 180 days. Clearing browser data may remove that choice, sign you out or remove access to unfinished work and guest sessions. Keep your original files and create an account to return across devices.

Optional analytics

With your permission, Memory Box can use Google Analytics to understand which parts of the website people use and improve the service. Cookie settings controls this optional analytics. Your choice does not affect access to your memories.

The Google tag is loaded only after you allow analytics. We send general page categories, such as a photo page, with the generic title Memory Box. The page reports exclude individual photo and person identifiers, private sharing links, names in page titles, URL query strings, fragments and referring-page addresses. Photographs, recordings, story text and contact-form messages are not included in these page reports.

Google receives an analytics cookie identifier and technical information such as browser, device and network information associated with the request. Analytics cookies are configured to last up to 180 days without refreshing their expiry.

With analytics enabled, some sharing and account pages also use a browser-tab session identifier to record usage events with Memory Box, such as opening a story or completing a contribution. These events help us understand how features are used and where people encounter problems.

Analytics is optional and relies on your consent. Turning it off in Cookie settings stops further optional collection and clears the analytics cookies and usage-session identifier on this browser. It does not automatically erase reports already received. See the Cookie Policy for more detail.

Keeping and removing information

Saved memories are kept to provide your Memory Box until you remove them or close your account, subject to any lawful need to retain particular records. Unfinished guest work, technical logs, provider records and backups are kept separately from your saved memories.

Account Management provides a permanent account-removal process. It removes your account and the Memory Boxes you own from the active service. It does not recall screenshots, downloads or independent copies somebody else has already kept.

Some information may remain in backups or with a provider, or where it must be retained for a legal obligation or a dispute. Contact us if you need information removed from material another person controls.

Your choices and rights

Depending on the law that applies, you may ask to access or receive a copy of your information, correct it, delete it, restrict its use, object to certain processing or receive a portable copy. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

Contact info@memorybox.me to make a request, including if you appear in someone else’s photographs and have no account. We may need proportionate information to verify your identity and locate the relevant material.

You may complain to a relevant data protection authority. In the UK, this is the Information Commissioner’s Office at ico.org.uk. Contacting us does not remove that right.

Children, security and updates

Family photographs and stories may include children. Take particular care before uploading or sharing their information, and respect their privacy and wishes.

The application uses sign-in, access controls and restricted media links to protect access. No online service can guarantee complete security, so keep your sign-in details private and take care with shared links.

We will update this notice when the service’s information practices change. The date on this page identifies the version; material changes should be brought to your attention.