1. Introduction
This Privacy Policy explains how Memoir™ (“Memoir”, “we”, “us”) handles information when you use the Memoir mobile app for Android and iOS (the “App”) and the website memoir4u.com (the “Website”), together the “Service”. Memoir helps people plan events together — trips, conferences and gatherings — chat with the people taking part, and keep the photos and memories afterwards.
Memoir is the controller of your personal information. Questions: support@memoir4u.com.
2. Information we collect
Information you give us
- Account: name, email address, username and password (stored only as a one-way hash we can’t read). Email is confirmed with a 6-digit code, also stored hashed. If you sign in with Google we receive your Google account ID, name and verified email address from Google.
- Optional profile details: phone number, profile photo, date of birth, gender, marital status, location (a place you type), occupation, bio, website and social-media links. You choose whether to add them.
- Event content: events you create (title, description, dates, type, cover image, origin and destination), itinerary stops (place names and map coordinates you choose), sessions, speakers, invitations, RSVPs and roles.
- People you invite: email addresses or phone numbers you enter to invite someone. We use them only to deliver that invitation.
- Messages and reviews: group chat messages in events and reviews/ratings you post.
- Reports and blocks: content or people you report (with the reason you give) and people you block.
- Support and contact: what you send us by email or through the Website contact form (name, email, subject, message).
Information collected automatically
- Device and app information: app version, platform (Android or iOS), operating-system version, device model, and a random app-installation ID created by the App (not your phone’s advertising ID or IMEI). Used to keep your sessions secure and to troubleshoot.
- Sign-in records: date and time, success or failure, IP address, device and browser, and an approximate city/region/country looked up from the IP address.
- In-app activity: which screens you open and actions such as searching, sharing or opening an invite, with timestamps. This is first-party only — it helps us fix problems, protect accounts and show you “My activity”. It is never used for advertising.
- Push-notification token: if you allow notifications, a token from Firebase Cloud Messaging (Google) that lets us send notifications to your device.
- Website: standard server logs (IP address, browser, pages requested) and the cookies described in section 13.
We do not collect your precise device location, contacts, call logs, SMS, microphone or camera recordings, or advertising identifiers.
3. Photos, videos and files (Google Drive)
Photos, videos and documents you add to an event are uploaded to your own Google Drive
(Memoir only asks for access to files it creates — the drive.file permission, not your whole Drive).
Memoir’s servers store only the file’s name, type, size and links so the event’s members can see it.
So that the people in your event can open them, uploaded files are shared in Google Drive as “anyone with the link can view”. Anyone who obtains a link can open the file, even outside Memoir. The App tells you this before your first upload. You can stop sharing or delete a file at any time in Google Drive; an uploader can also lock a file’s download link inside Memoir.
Memoir’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
4. How we use information
- to provide the Service: create your account, run events, deliver invitations, chat, media, reviews and notifications;
- to keep the Service and your account secure: verify emails, detect suspicious sign-ins, prevent abuse and spam, keep audit records;
- to moderate content: review reports, remove content that breaks our Community Guidelines and act against abusive accounts;
- to support you and answer your messages;
- to understand which features work and fix problems (first-party, aggregated where possible);
- to meet legal obligations and enforce our Terms.
5. Legal bases (EEA, UK and similar laws)
- Contract — to provide the Service you signed up for.
- Legitimate interests — security, fraud and abuse prevention, moderation, improving the Service.
- Consent — push notifications and optional profile details; you can withdraw it at any time.
- Legal obligation — when the law requires us to keep or disclose information.
6. Who can see or receive your information
- People in your events see your name, username, profile photo, role and RSVP, your messages, reviews and media in that event. Event organisers also see participants’ email addresses so they can manage the event. Your phone number is never shown to other users.
- Other users can find you by username in search and see your public profile. You control whether you can be found by email or phone, and whether your email or phone is shown, in Privacy settings.
- Public events can be seen by any signed-in user. Private and invite-only events are visible only to the people invited.
- Our team can access information when needed to run, support, secure and moderate the Service, under strict access controls with every action logged.
- Authorities, only when required by law or to protect someone’s safety, including reporting child sexual abuse material (see our Child Safety Standards).
- A successor, if Memoir is merged or sold, under this policy.
7. Service providers
| Provider | What for | Information involved |
|---|---|---|
| Google — Sign-In | Optional sign-in with your Google account | Google account ID, name, email |
| Google — Drive | Storing the photos and files you upload, in your own Drive | The files you choose to upload |
| Google — Firebase Cloud Messaging | Delivering push notifications | Push token, notification content |
| Email delivery provider | Sending verification codes, password resets and deletion links | Your email address and the message |
| ipwho.is | Approximate location of sign-ins, for security | IP address |
| Hosting provider | Running our servers and database | All Service data, stored securely |
Providers may only use the information to provide their service to us.
8. What we don’t do
- We don’t sell or rent your personal information, and we don’t “share” it for cross-context behavioural advertising.
- We don’t show ads, use advertising IDs or track you across other companies’ apps and websites.
- We don’t read your private Google Drive files beyond the ones you upload through Memoir.
9. How long we keep information
| Information | Kept for |
|---|---|
| Account, profile and your content | Until you delete it or your account |
| App sign-in sessions | Up to 90 days, or until you sign out |
| Audit records of actions | 365 days |
| Sign-in history (IP, device, approximate location) | 180 days |
| Website contact-form messages | 365 days |
| Verification codes | Minutes; invalid once used or expired |
| Reports of content | Until resolved, then up to 365 days |
10. Deleting your account
Delete your account in the App (More → Account → Delete account) or on our Delete account page without the App. Deletion is immediate. Your profile and content are removed, events you organise are deleted for everyone, and security records keep no name, email, IP or device. Files stay in your Google Drive. Full details are on the Delete account page.
11. Your rights and choices
Depending on where you live (for example under the GDPR, UK GDPR, India’s Digital Personal Data Protection Act or California law), you can:
- access the information we hold about you and receive a copy;
- correct it (most of it directly in the App under Edit profile);
- delete it, or your whole account;
- object to or restrict some processing, and withdraw consent;
- nominate someone to act for you, and complain to your data-protection authority.
Email support@memoir4u.com. We answer within 30 days and won’t treat you differently for using your rights. In the App you can also control notifications (App settings), who can find you and what others see (Privacy settings), and block people.
12. App permissions
- Photos and files — only when you choose a profile photo, an event cover or files to upload. The App uses the system picker, so it sees only what you pick.
- Notifications — optional, to tell you about invitations, messages and event updates.
- Google account / Drive — requested when you sign in with Google or first upload media.
13. Website cookies
The Website uses only essential cookies: a session cookie and a security (CSRF) token, needed for forms such as the contact and account-deletion forms. Your light/dark theme choice is saved in your browser’s local storage. We use no advertising or third-party analytics cookies.
14. Security
Information is encrypted in transit (HTTPS) and stored on access-controlled servers. Passwords and codes are hashed; sign-in tokens on your phone are kept in the device’s secure storage (Keychain / Keystore). Staff access requires two-factor authentication and every staff action is logged. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
15. Children
Memoir is not for children. You must be at least 13 years old (or older where local law requires a higher age to consent) to create an account. We don’t knowingly collect information from younger children; if we learn that we have, we delete the account. Parents can contact us at support@memoir4u.com. See also our Child Safety Standards.
16. International transfers
We and our providers may process information in countries other than yours, including India and the United States. Where the law requires, we use appropriate safeguards such as standard contractual clauses.
17. Changes to this policy
We’ll post changes here and update the date at the top. For significant changes we’ll also tell you in the App or by email before they take effect.
18. Contact us
Memoir · memoir4u.com
Email: support@memoir4u.com
Support centre · Contact form