Privacy Policy

Data we collect

• Account data: first name, last name or display name, email address, phone number, login and authentication data.
• Child data: the child's name, date of birth, profile photo, family members linked to the child, and role information.
• Memory content: the photos, audio recordings, video recordings, titles, transcriptions, story texts, and related dates you add.
• Invitation and sharing data: the invited person's name, email, role and access level, PIN, session, sharing links, and their revocation and expiration dates.
• Technical data: device, browser, IP address, date and time, error logs, security logs, and other technical data necessary for the service to work.

Purposes of data processing

• to create, authenticate, and manage your account and profile;
• to store child profiles, memories, photos, audio, and video recordings;
• to create transcriptions, titles, and story text from audio and video recordings;
• to operate the invitation, participant, co-owner, and sharing features;
• to export or delete your content, or manage recovery mechanisms;
• to ensure the security, stability, and protection of the service against abuse;
• to provide technical support and comply with legal obligations.

We do not sell your content for advertising purposes and do not use your family memories for third-party marketing profiles.

Sharing and visibility

By default, memories are visible only to users who have access to the relevant child profile. The owner of a child profile can invite a co-owner or participant, allow memories to be added via an invite link and PIN, or create a separate sharing link. When a sharing link is active, anyone with that link can view the content. You can revoke these links at any time.

Third-party services

We may use trusted technical providers to deliver the service. These may include Supabase for the database, file storage, and authentication; AI processing providers for transcription and story generation via artificial intelligence; email services for email notifications and export links; and technical tools for the app's security and monitoring. Only the data necessary for the service to work is passed to these providers.

AI processing

Audio and video recordings may be sent for AI processing to create transcriptions, titles, and story text. This processing serves only to provide the feature you have chosen. Automatically generated texts may contain errors; you have the ability to review and edit them. Where possible, only the necessary content and minimal accompanying data are sent for AI processing.

Legal bases and consent

We process your personal data where it is necessary to provide the service, where your consent has been obtained, where our legitimate interests are served, or where required by law. The person adding data about a child confirms that they are authorized to provide such data.

Retention and deletion

Your content is retained until you delete it, delete the child profile, or request deletion of the account. When a memory, photo, audio/video recording, invitation, or child profile is deleted, technical measures are taken to delete the associated files and records. Some data may be retained for a limited time in backups and security logs. You can obtain a copy of your data via the export feature in the app.

Children's data

Memona is not intended for children themselves, but for parents, legal representatives, and authorized family members to preserve family memories. When adding data about a child, you should consider their interests, privacy, and future privacy rights. Data about children may be visible only to the family members you choose and to people with an active sharing link.

Security

To protect personal data, we use access control, authentication, role-based permissions, signed file links, and other technical and organizational measures. Nevertheless, it is not possible to guarantee that any system transmitting or storing data over the internet is entirely risk-free. It is important that you protect your login data, invite links, and PIN codes.

Your rights

Where provided by law, you may have the right to access, correct, update, export, and delete your personal data, request the restriction of processing, and withdraw your consent. You can exercise these rights through the tools available in the app or by contacting us. Before fulfilling your request, we may ask you to confirm your identity or your authority over the account.

International transfers

The servers of our technical providers may be located outside the Republic of Azerbaijan. In that case, your personal data may be processed and stored in other countries to provide the service. During such transfers, we strive to apply appropriate contractual and technical measures to protect the data.

Changes

We may update this policy in connection with the development of the service, technical changes, or legal requirements. When there are significant changes, we will try to notify you in the app, by email, or on the website. The date of the last update is shown at the top of the document.

Contact

For questions about privacy, personal data, and your rights, contact us:

kontakt@memona.app