immemoris™

Privacy Policy

Last updated: June 2026

Who we are

immemoris is a tool for preserving family and personal memories — alone or with others. You can contact us at privacy@immemoris.com.

What data we collect

Account data — When you create an account, we collect your email address and display name. We also store your notification preferences.
Memory data — We store the content you contribute to memories: text recollections, audio recordings (transcribed for narrative generation), photos, and any metadata associated with them (dates, GPS coordinates, location names extracted from photo EXIF data, and optional tags you create for people, pets, places, or objects).
Memory artifacts — We store generated narratives, audio narration files, share link tokens, and transfer records.
Usage data — We collect basic usage information such as when you last viewed a narrative and which memories you have contributed to.
Device data — We do not collect device identifiers, IP addresses, or browsing history beyond what is necessary to operate the service.

How we use your data

We use your data exclusively to operate the immemoris service, generate augmented memory narratives from your contributions, send email notifications, and show contextual suggestions. We do not sell your personal data. We do not use your data to build advertising profiles.

How we protect your data

Encryption in transit — All data transmitted between your device and our servers is encrypted using TLS (HTTPS).
Encryption at rest — Memory content, photos, audio recordings, and user account data are stored encrypted at rest on our infrastructure provider (Supabase), which uses industry-standard AES-256 encryption for data at rest.
Access controls — Memory content is protected by row-level security policies. Only you and the contributors you explicitly invite can access a memory. Database queries are scoped to the requesting user; cross-user access is enforced at the database layer, not just in application code.
Authentication — We use Supabase Auth for user authentication, which securely hashes passwords (never stored in plain text) and supports email-based session tokens with limited lifetimes.
Third-party access — Data sent to AI services (Anthropic) is processed for narrative generation and is not retained for model training per Anthropic's API terms. Data sent to Google Drive uses the drive.file OAuth scope, which limits our access to only the specific files you select via Google's file picker — we do not have visibility into your broader Drive.
Backups — We maintain automated daily backups of memory data for disaster recovery. Backups inherit the same encryption-at-rest protections as production data.
Data minimization — We collect only what is necessary to operate the service. We do not collect device identifiers, browsing history outside the application, or other data not directly tied to your memories and account.
Breach notification — If a data breach affects your account, we will notify you by email as soon as practical and provide guidance on protective steps.

Contextual suggestions

immemoris may display contextual suggestions — travel, experiences, or services relevant to the themes of a memory you are viewing. This matching is performed privately on our servers based on the content of the memory. Advertisers receive no information about you or your memories. We do not share any personal data with advertisers.

Third-party services

Supabase — Database and file storage.
Anthropic — AI narrative generation. Your contributions are sent to Anthropic's API to generate narratives.
Resend — Email delivery for invitations and notifications.
Dropbox — Optional photo import.
Google AdSense — Contextual advertising. Google may use cookies to serve ads.
Vercel — Hosting and deployment.

Data retention

We retain your data for as long as your account is active. If you delete a memory, all associated contributions, photos, and narratives are permanently deleted. If you close your account, we will delete your data upon request.

Your rights

  • · Access the data we hold about you
  • · Correct inaccurate data
  • · Request deletion of your data
  • · Export your memories as a keepsake PDF or share them as a link

Children

immemoris is not intended for use by children under 13. We do not knowingly collect data from children under 13.

Changes to this policy

We will notify users of any material changes to this policy by email and by updating the date at the top of this page.

Contact

If you have questions about this policy, contact us at privacy@immemoris.com.