My Memory Box Back to website

1. Contact

For privacy questions, support or account-deletion help, email MyMemoryBoxDev@outlook.com.

2. Information we collect

  • Account information: your email address and app account identifier. If you choose Sign in with Google, Google supplies the identity of the selected account, its email address and basic profile information such as your name and profile-image address when available. Our authentication provider uses these details to verify your identity and create or access your My Memory Box account. Email/password authentication is handled by our authentication provider; passwords are not visible to us. We do not receive your Google password.
  • Memory content: photos, videos, voice notes, written notes, tickets, passes, PDFs and other supported files you choose to keep.
  • Memory details: titles, dates, stories, locations and names you choose to associate with a memory.
  • Sharing information: invited email addresses and the role assigned to each shared-box member.
  • Subscription information: plan and entitlement status supplied by Google Play and RevenueCat. We do not receive or store full payment-card details.
  • Search terms: words you enter when searching memories are sent to our database to return matching results.
  • Technical diagnostics: when an app error occurs, a limited error code, app release identifier and technical stack information may be sent to our error-reporting provider. Memory content and account details are excluded from these reports.
  • Security checks: when you create an account using email, sign in with a password or request a password-reset email, Cloudflare Turnstile checks the request in an embedded browser. The app passes a short-lived verification token to our authentication provider; it does not send your password to Cloudflare. Optional Google sign-in instead uses Google's account-verification process and a validated identity token; it does not use this email CAPTCHA flow.

3. How we use information

We use this information to secure accounts; store, organise, search and display memories; operate invited sharing; enforce plan and storage limits; verify subscriptions; diagnose app errors; and answer support or deletion requests. We do not sell personal information or use memories for advertising.

4. Who information is shared with

  • Supabase provides authentication, database and private cloud storage.
  • Cloudflare R2 holds restricted backup copies of uploaded memory files and box artwork in its EU region for disaster recovery. These copies are not public and are not used to display memories in the app.
  • Cloudflare Turnstile helps distinguish genuine account requests from automated abuse. The verification page connects to Cloudflare to perform this check.
  • People you invite can access a shared box according to the role you assign.
  • Google sign-in provides optional account sign-in and shares basic identity/profile information with our authentication provider when you select that method. This does not grant My Memory Box access to your Gmail messages, contacts or Google Drive files.
  • Google Play and RevenueCat process and verify in-app subscriptions.
  • Sentry processes limited technical error reports so we can diagnose and fix app problems. Reports are configured to exclude memory content and account details.
  • Information may be disclosed where required by law or necessary to protect users, the public or our rights.

5. Storage and security

Memory files are held in private cloud storage, access is controlled by account and box membership, and data is transmitted over encrypted connections. No online service can guarantee absolute security, so keep your password private and share boxes carefully.

6. Retention, downloads and deletion

Memories remain until you delete them, delete the relevant box, or delete your account. Accounts over their storage allowance may become read-only while retaining viewing and download access.

You can delete individual memories in the app. To permanently delete the account and associated memory data, open Settings, choose Delete account, and confirm. If you cannot access the app, contact us from the email linked to the account. Limited records may be retained where law, security or fraud prevention requires it.

Deletion removes the live account and files, but older copies of uploaded files may remain temporarily in restricted disaster-recovery backups. We keep up to seven recent daily and four older weekly media recovery points and remove unreferenced backup files as those points expire. Backup copies are not available through the app or used for ordinary access. If an older backup must be restored, we check and reapply deletions made after that backup before making restored data available. Contact us if you have questions about deletion of backup copies.

Request account or data deletion by email. Send the request from the email address registered to the account so we can verify ownership.

Deleting the app account does not cancel a Google Play subscription. Cancel subscriptions in Google Play to prevent future charges.

If you signed in with Google, deleting your My Memory Box account deletes the app account, not your Google account.

7. Children

My Memory Box is not directed at children under 13. Contact us if you believe a child supplied personal information without appropriate consent.

8. Changes

We may update this policy as the service changes. The revised policy and its updated date will be published here.