Privacy Policy

You bring a few photos; we use AI to enrich and organize them so you can make and share a memory. To do that in a browser, your content is processed on our servers and by AI providers acting on our behalf. We don't sell your content, we don't use it to train outside AI models, and we don't share an understanding of one person with another without a deliberate, mutual opt-in. You can delete your content — or your whole account — at any time.

Your content. The photos (and, if enabled, video and audio) you upload, and the words you add — captions, the story of a moment, who's in it, places, how it felt, and the people (“personas”) you name.

Information inside your files. We read basic metadata from your photos — the date taken, GPS location (if present), and camera model — to place them on a timeline and map. You can edit or remove this.

Your email, if you choose to save. Memoresse Moments works with no account. If you ask to save your progress, your email becomes your sign-in (there's no password — we send a one-time link). That's the only account detail we need.

From people you share with. If you share a memory, recipients can react or leave a comment without an account; we store those reactions, any name they choose to give, and a coarse hint about the app that opened a link (so you can see who engaged).

Usage & technical data. An anonymous session identifier, basic product analytics (which steps you reach), and — to keep the service safe — best-effort technical signals such as IP address and browser user-agent used for rate-limiting, bot challenges, and abuse prevention. We also compute a content fingerprint (a SHA-256 hash) of each file for de-duplication and tamper-evidence.

Cookies. We use a small number of strictly-functional cookies — to keep you signed in and to remember that you cleared a one-time “are you human” check. We do not use third-party advertising or cross-site tracking cookies.

We use what we collect only to operate the Service for you: to run the enrichment pass (reading metadata and using AI to suggest context), to organize your photos and assemble a memory, to let you share it and receive reactions, to email you the things you ask for (a save-and-return link, and notifications when someone reacts — you control the frequency), to keep the service secure and prevent abuse, and to create the optional Bitcoin timestamp that proves when a memory existed. We also keep anonymized, non-identifying records (a fingerprint, a date, and a generic category) so we can understand the kinds of memories people bring and honor our deletion promise.

To enrich and organize your memories in the browser, your content is sent to and processed on our servers and by AI service providers (currently Google's Gemini) acting on our behalf. We keep that footprint minimal and temporary, we strip account credentials before forwarding anything, and our providers are contractually prohibited from training their models on your content.

Face grouping is computed in your own browser. We use it to group photos and suggest the important people in your life — faces are never sent to a cloud face-recognition service, the face data stays on your device, and any suggested name is always shown to you to confirm. Family Intelligence never names a person by itself. Our intelligence observes and suggests; it never declares meaning on its own, and the only feelings shown are the ones you author.

Your content is private by default — no one sees a memory unless you share it. When you share, the people you choose can open a link (no account needed) and may react or comment. Reactions and comments are private to you and the recipient unless a recipient deliberately marks a comment public to others viewing the same link. We don't make your memories public, and we don't sell or rent your information to anyone.

When Family Intelligence organizes photos from your own drive, we keep a screen-size working copy of each one. It is roughly 2,048 pixels on the long edge — enough to display and to let our intelligence read the photo — and it is re-encoded, which removes the embedded camera data (including any GPS coordinates) from the stored image. Your original files are never uploaded. They stay wherever you keep them, and we record only where each one lives so you can find it. You can turn working copies off at any time; we then delete every copy we hold and tell you how many were removed. Full-resolution custody under a key only you hold is the purpose of the Memories Lockbox, not of this Service.

Documents you add are read once, for names and dates. If you add a letter, an obituary, a certificate or a family-tree file, we read its text to find the people, dates and places it names, so Family Intelligence can recognize them. We keep only what it found — never the document's text, which is not stored on our servers and is never shown back to you in a conversation. A copy of the file stays in your own browser. Nothing found this way is added to your family without you saying yes first.

A web address you give us is read the same way as a document. If you paste a link while telling us about your family, we request that one page, look for the people, dates and places it names, keep only what we found, and tell you what that was. We fetch only ordinary public web pages — never private or internal addresses — we do not follow a link anywhere else, and we identify ourselves honestly when we make the request.

Media is stored with our hosting and storage providers; the words and structure of your memories are stored in our database. We keep this footprint minimal. Sessions that are started but never engaged are automatically swept after a period of inactivity. You can delete any photo, or your entire account, at any time — there is a brief window to undo an account deletion, after which we remove the files and their details (caption, people, stories) from our active systems. We retain only a non-identifying record (a fingerprint, the date, and a generic category) as proof the deletion happened. Copies that people you shared with already hold are outside our control.

We rely on a small set of vendors who process data on our behalf, under agreements that limit them to providing their service to us: cloud hosting and file storage, a database, an AI provider for enrichment (Google Gemini), an email provider for the links and notifications you request, a bot-protection provider for the human check, a mapping service to turn coordinates into place names, and the OpenTimestamps / Bitcoin network for the optional timestamp. These providers may process data in the United States.

You can review and edit the meaning attached to any photo, delete individual photos, delete your whole account (a full sweep), export your memory in the open .mem format, and export a copy of your provenance record. You control whether we email you and how often. Depending on where you live, you may have additional rights (such as access, correction, deletion, or objection); to exercise any of them, contact us below.

Memoresse Moments is for adults 18 or older. It is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a child has provided us information, contact us and we'll delete it.

We protect your information with reasonable technical and organizational measures, including encryption in transit. No system is perfectly secure. Importantly, Memoresse Moments is a cloud web experience — it is not the on-device, end-to-end-encrypted Memories Lockbox. Please keep your own copies of anything you care about. The full sovereignty promise — where your memories live on a device you own, under a key only you hold — is what the Lockbox delivers.

We may update this Policy as the product evolves. If we make a change that materially affects how we handle your information, we'll ask you to review it before it applies to you.

Questions, requests, or privacy concerns: support@memoresse.com.