Privacy Policy

Effective date: June 1, 2026 · Last updated: June 1, 2026

Memoria ("we," "us," or "our") operates the website memoriahq.com and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By using Memoria, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect information you provide directly and information generated by your use of the Service:

  • Account information: full name, email address, and password when you register.
  • Profile and memorial content: text, photos, audio recordings, and video files you upload when sharing memories or creating memorial pages.
  • Communications: messages you send through family message boards, grief journal entries, and Q&A sections. Journal entries are private to your account only.
  • Usage data: pages visited, search queries, browser type, IP address, device identifiers, and referrer URLs collected automatically.
  • OAuth data: if you sign in with Google, Apple, or Facebook, we receive your name, email address, and profile photo from that provider.
  • Removal requests: name, email, relationship, and supporting documentation submitted via our Right of Kin removal form.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Memoria platform.
  • Display memorial pages and associated content to the appropriate audience based on your privacy settings (public, family, or private).
  • Authenticate your account and maintain your session.
  • Respond to your requests, including removal and support inquiries.
  • Detect, investigate, and prevent fraudulent or prohibited activity.
  • Send transactional communications (e.g., account confirmation, removal request status updates).
  • Analyze aggregate usage trends to improve the Service.

We do not sell your personal information to third parties. We do not use your content for advertising purposes or share it with data brokers.

3. Sharing Your Information

We share information only in limited circumstances:

  • Service providers: Supabase (database, authentication, and file storage), Vercel (hosting and infrastructure). These providers are contractually bound to protect your data and may not use it for their own purposes.
  • Legal compliance: when required by law, subpoena, or to protect the rights, safety, or property of Memoria or others.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email before your information is transferred and becomes subject to a different privacy policy.
  • With your consent: for any other purpose with your explicit permission.

4. Data Retention

We retain your account information and uploaded content for as long as your account is active. If you request account deletion, we will delete your personal information within 30 days, except where retention is required by law or to resolve disputes. Memorial pages and their associated public content may be retained in anonymized form to preserve tributes submitted by other users.

5. Your Rights

California Residents (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, disclose, and sell (we do not sell).
  • Request deletion of your personal information.
  • Opt out of the sale of personal information (not applicable — we do not sell).
  • Non-discrimination for exercising your CCPA rights.

To exercise these rights, contact us at legal@memoriahq.com.

EU and UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to:

  • Access: request a copy of your personal data.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your data ("right to be forgotten").
  • Restriction: limit how we process your data.
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interests.
  • Withdraw consent: where processing is based on consent, withdraw it at any time.

Our legal bases for processing are: performance of a contract (to provide the Service), legitimate interests (security, fraud prevention, service improvement), and consent (for optional features). To exercise your rights, contact legal@memoriahq.com. You have the right to lodge a complaint with your local data protection authority.

6. Data Deletion Requests

To request deletion of your account and all associated personal data, email legal@memoriahq.com with the subject line "Data Deletion Request" and the email address associated with your account. We will confirm receipt within 5 business days and complete deletion within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies to maintain your session and remember your preferences. We do not currently use advertising or cross-site tracking cookies. For full details, see our Cookie Policy.

8. Third-Party Services

9. Children's Privacy

Memoria is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Security

We implement industry-standard security measures including encrypted connections (HTTPS), secure authentication, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on this page and updating the effective date. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact Us

For privacy-related questions or requests, contact us at: legal@memoriahq.com

Memoria · memoriahq.com