Privacy Policy

1. Introduction

Welcome to MemoryMend ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

By using MemoryMend, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address and password (stored in hashed form). You may optionally provide a display name.
• Photos: Photos you upload for restoration processing. These are temporarily stored for processing and automatically deleted within 24 hours of restoration completion.
• Payment Information: If you purchase a subscription, payment is processed through Apple App Store or Google Play Store. We do not directly collect or store your credit card information.
• Communications: If you contact our support team, we collect the information you provide in your correspondence.

2.2 Information Collected Automatically

• Device Information: Device type, operating system version, unique device identifiers, and mobile network information.
• Usage Data: How you interact with the app, including features used, time spent, crash reports, and performance data.
• Log Data: IP address, browser type, access times, and referring URLs when you access our service.

2.3 Information from Third Parties

• Authentication Providers: If you sign in using Apple Sign-In or Google Sign-In, we receive your email address and basic profile information as permitted by your privacy settings with those services.
• App Stores: We receive transaction information from Apple and Google related to your subscription purchases.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide and Maintain Our Service

• Process and restore your uploaded photos using AI technology
• Create and manage your account
• Process subscription payments and maintain your subscription status
• Provide customer support and respond to your inquiries

3.2 To Improve Our Service

• Analyze usage patterns to improve app features and user experience
• Diagnose technical issues and optimize performance
• Develop new features based on aggregated usage data

3.3 To Communicate With You

• Send important service notifications (e.g., changes to terms, security alerts)
• Respond to your support requests and feedback
• Send promotional communications (only with your consent, and you can opt out at any time)

3.4 To Ensure Security and Compliance

• Detect, prevent, and address fraud, abuse, and security vulnerabilities
• Enforce our Terms of Service
• Comply with legal obligations

4. Photo Processing and Data Retention

4.1 Photo Processing

• Photos are uploaded to our secure servers using TLS 1.3 encryption
• Photos are processed using AI models running on secure cloud infrastructure
• We do not view, share, or use your photos for any purpose other than providing the restoration service
• We do not use your photos to train AI models without your explicit consent

4.2 Photo Retention

• Original Photos: Deleted within 24 hours after restoration is complete
• Restored Photos: Stored for up to 7 days to allow you to download, then automatically deleted
• Immediate Deletion: You can request immediate deletion of your photos at any time through the app or by contacting us

4.3 Account Data Retention

• Account information is retained for as long as your account is active
• If you delete your account, we delete your personal data within 30 days, except where required for legal compliance
• Anonymized, aggregated data may be retained indefinitely for analytics purposes

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating our Service:

• Cloud Infrastructure: We use Supabase and Replicate for secure data storage and AI processing
• Email Services: We use Resend for transactional emails
• Analytics: We use privacy-focused analytics to understand app usage
• Payment Processing: Handled by Apple App Store and Google Play Store

These providers are contractually obligated to protect your information and may only use it to provide services to us.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as:

• Court orders or subpoenas
• Government or law enforcement requests
• To protect our rights, privacy, safety, or property
• To prevent fraud or illegal activity

5.3 Business Transfers

If MemoryMend is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict access controls limit who can access your data
• Secure Infrastructure: We use enterprise-grade cloud infrastructure with SOC 2 compliance
• Regular Audits: We conduct regular security assessments and penetration testing
• Password Security: Passwords are hashed using industry-standard algorithms (bcrypt)

While we strive to protect your information, no method of transmission or storage is 100% secure. If you have reason to believe your account has been compromised, please contact us immediately.

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Access the personal information we hold about you
• Request a copy of your data in a portable format
• View your account information directly in the app

7.2 Correction and Deletion

You have the right to:

• Update or correct inaccurate personal information
• Request deletion of your personal data
• Delete your account entirely through the app settings

7.3 Opt-Out Rights

You can:

• Opt out of promotional emails by clicking "unsubscribe" or adjusting notification settings
• Disable analytics collection in your device settings
• Revoke permissions (camera, photo library) through your device settings

7.4 Do Not Track

Our Service does not currently respond to "Do Not Track" signals. However, we respect your privacy choices as outlined in this policy.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer data internationally, we use appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with all service providers
• Ensuring recipients maintain adequate security measures

9. Children's Privacy

MemoryMend is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we discover that a child has provided us with personal information, we will delete such information from our servers immediately.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out of Sale: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, please contact us at privacy@memorymendapp.com.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on: contract performance (to provide our Service), legitimate interests (to improve our Service), consent (for marketing), and legal obligations
• Right to Object: You can object to processing based on legitimate interests
• Right to Restrict Processing: You can request we limit how we use your data
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page with an updated "Last updated" date
• Sending you an email notification for significant changes
• Displaying a prominent notice in the app

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@memorymendapp.com
• General Support: support@memorymendapp.com

We will respond to your inquiry within 30 days.