Privacy Policy

Last updated: 2026-07-22

Who we are

NBuilders ("we", "us", "our") operates the Memori mobile application and the website at joinmemori.com. For privacy questions or requests, contact us at [email protected].

Scope

This Privacy Policy describes how we collect, use, and protect information when you use the Memori app and our website. This website does not use cookies, analytics scripts, or third-party tracking embeds. In-app analytics and crash reporting are described below and apply only when you use the mobile app.

Data we collect

When you use Memori, we may collect:

  • Account information — email address and display name from Google or Apple sign-in (and Facebook only if that option is enabled in your app build). We may store linked OAuth provider identities so you can sign in with more than one provider when they share the same verified email.
  • Memories and media — photos, videos, notes, titles, tags, documents, links, and optional location data you choose to attach to memories.
  • Sharing — when you enable a public memory link or invite someone to a folder, we store share tokens / invite data needed to deliver that content to the people you choose.
  • Push tokens — device push tokens (via Expo) so we can send product notifications you allow (for example activity or sharing alerts). Marketing pushes stay off by default where applicable.
  • Device and usage data — device identifiers, app version, crash logs (Firebase Crashlytics), and product analytics (Mixpanel, when enabled) to improve stability and features.
  • Purchase information — subscription status and transaction identifiers from Apple App Store or Google Play (we do not receive your full payment card details).
  • Support communications — messages you send through in-app support or email.
  • On-device only (not uploaded) — folder-lock PIN and biometric unlock preferences stay in secure storage on your device and are not sent to our servers.

We do not collect advertising identifiers for third-party ads and do not sell your personal data.

How we use data

We use your information to:

  • Provide, maintain, and improve the Memori service
  • Authenticate your account and secure access
  • Store and display your memories and shared content at your direction
  • Process subscriptions and restore purchases
  • Respond to support requests
  • Detect, prevent, and address abuse or security issues
  • Analyze aggregated usage to improve the product

If you are in the European Economic Area or United Kingdom, we process personal data on the following bases:

  • Contract (Art. 6(1)(b)) — processing necessary to provide the service you request.
  • Legitimate interests (Art. 6(1)(f)) — security, fraud prevention, and product improvement, balanced against your rights.
  • Consent (Art. 6(1)(a)) — where required, e.g. optional marketing push notifications (off by default) and optional Files on device sync (off by default).

Optional: Files on device (off by default)

If you choose Settings → Files on device and turn sync on:

  • Memori downloads copies of your memory media to a Memori folder on your device so you can pick files from Memori in system file pickers (for example government forms).
  • Copies remain on your device; this does not send your files to additional third parties beyond our normal encrypted cloud storage.
  • Sync runs when you enable the feature and while the app is open (Wi‑Fi only by default). Locked folders are not included.
  • You can turn off sync anytime; we delete the local Memori folder from your device. Your cloud memories are unchanged.
  • Legal basis: your consent (GDPR Art. 6(1)(a)).

Sharing and processors

We share data only with service providers that help us operate Memori:

  • Google Cloud — API hosting and infrastructure
  • Cloudflare R2 — encrypted media storage
  • Google and Apple — authentication (and Facebook only if enabled in your build)
  • Expo — delivery of push notifications using your device push token
  • Google Places / Geocoding — optional address / place lookup for map and location features (not generative AI)
  • Firebase Crashlytics — crash reporting
  • Mixpanel — product analytics (when enabled)
  • Google Gemini (Google LLC) — AI processing for capture archivist, bilingual translation, and folder suggestions (see Artificial intelligence)
  • Apple / Google — in-app purchase processing

We do not sell personal information. We do not share personal information for cross-context behavioral advertising (CCPA/CPRA).

International transfers

Your data may be processed in the United States, European Union, and other countries where our providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

Retention and deletion

We retain your data while your account is active.

Delete individual content: You can delete specific memories or folders in the app (moved to trash, then permanently removed after a tier-based retention period). See our Help page for steps.

Delete your account: Settings → Security → Delete account. We delete or anonymize your personal data within a reasonable period, including media files stored in Cloudflare R2 under your account prefix, subject to short backup retention and legal obligations. See Help — Delete your account for details on what is removed.

Your rights

GDPR (EU/UK): You may request access, rectification, erasure, restriction, portability, or object to processing. You may lodge a complaint with your local supervisory authority.

CCPA/CPRA (California): You have the right to know what personal information we collect, request deletion or correction, and opt out of sale or sharing. We do not sell or share personal information for cross-context behavioral advertising.

Israel Privacy Protection Law: You may request access, correction, or deletion of personal data held about you.

To exercise your rights, email [email protected] or use in-app account deletion. We may verify your identity before fulfilling requests.

Children

Memori is not directed at children under 13 (COPPA). In the EU, we do not knowingly collect data from children under 16 without parental consent where required by law.

Security

We use HTTPS, access controls, and industry-standard practices to protect your data. No method of transmission or storage is 100% secure.

Artificial intelligence and automated processing

Memori uses automated processing, including artificial intelligence (AI), to help you capture, organize, translate, and display memories. This section is important: it describes third-party AI processing, your choices, and how Google may handle data sent to Google Gemini.

You are interacting with AI

When you use Memori's capture, save, edit, or bilingual display features described below, you are not chatting with a human. Text and media you submit may be processed by automated AI systems on our servers and by Google Gemini (Google LLC). We disclose this:

  • Before sign-in — consent footnote on the login screen (Terms, Privacy, and AI processing). Creating an account / continuing past login accepts those terms.
  • Published Privacy & Terms — full AI disclosure on this page and in the Terms of Service (also linked from onboarding).
  • On translated content — machine-translation label on memory detail when you view the non-source language.
  • In Settings → Support — link to this section.

This meets transparency expectations under GDPR, the EU AI Act (Article 50, effective August 2026), Apple App Store Guideline 5.1.2(i), and similar rules: we name the provider, explain what is sent, and obtain your explicit permission before the first transmission (by creating an account after the login consent footnote and reading these published disclosures).

Features that use AI

Feature When it runs What is processed
Capture archivist When you save a new memory through capture or share-to-app ingest (text, media, documents, and/or a shared link). If Gemini fails, the memory still saves with fallback content Your text, attachments, optional instructions, scraped webpage content from links, your app language, and (if available) short personal context facts learned from earlier captures
Bilingual titles and stories When you create or edit a memory title or story (including when the archivist drafts them). Unchanged text is not re-translated Title and story text; we detect the source language and generate a translation in the other supported language
Folder suggestion Together with the archivist on those same new-memory saves Same capture content as the archivist, to suggest a folder category
Personal context memory After some AI captures, when the model identifies durable personal facts (e.g. a pet name) Up to a few short text facts per capture (capped on your account); relevant facts may be re-sent on later archivist calls to improve organization

Not AI: optional map/location search uses Google Places and Geocoding APIs (address lookup), not generative AI.

Third-party AI provider
Provider Google LLC — Google Gemini via the Google Generative AI API (ai.google.dev)
Our role We decide when to call the API and what to send; we store results in your memory records
Google's role Processes requests on our behalf as a service provider / data processor (when Paid Services terms apply) or as described in Google's API terms for unpaid access
Model We may change models (currently Gemini Flash family); material changes will be reflected here
Google policies Google Privacy Policy, Gemini API Additional Terms, Google Cloud Data Processing Addendum (when applicable)

We do not send your OAuth password. We do not sell your content or use it for third-party advertising.

What we send to Google Gemini

Depending on the feature, we may transmit personal data including:

  • Text you type, paste, or share (titles, stories, links, notes, instructions)
  • Photos, videos, audio files, and documents you attach to memories
  • Text extracted from web pages when you share a URL
  • Optional location label you add to a capture instruction
  • Your Memori app language setting
  • Short personal context facts previously stored on your account (e.g. a pet name learned from earlier captures)

Sensitive information: Memories may contain health, financial, family, or other sensitive details you choose to save. We do not ask you to submit such data to AI, but if you include it in a capture, it may be transmitted to Google as part of that request. Do not submit content you are not comfortable sharing with our processors.

How Google may use data (Gemini API terms)

Google's rules depend on whether our API project uses Paid Services (billing enabled) or Unpaid Services (free quota).

Current phase (honest disclosure): During private development and closed family testing, our Google Cloud project may use unpaid / free Gemini API quota. In that case the Unpaid column below can apply (outside Europe — see regional note). Before public / store production launch, we enable Paid Gemini API billing on the project so that, under Google's terms, prompts and responses are not used to improve Google consumer products. Until Paid billing is confirmed for production, do not assume Paid protections already apply.

Regardless of Memori's configuration, you should understand Google's terms:

Paid Gemini API (Cloud project with active billing) Unpaid / free Gemini API quota
Product improvement Google does not use your prompts or model responses to improve Google products Google may use content you submit and generated responses to provide, improve, and develop Google products and ML technologies
Human review Not for product-improvement review of your content under Paid terms Human reviewers may read, annotate, and process API input and output (Google states it disconnects data from your account/project before review)
Safety logging Google may log prompts and responses for a limited time for abuse prevention, safety, and legal compliance; may be stored or cached in countries where Google operates Same safety purposes may apply
Legal framework Processed under Google's Data Processing Addendum (Google as processor) Broader license to Google under API Terms; do not submit sensitive or confidential information to unpaid services

European users (EEA, Switzerland, United Kingdom): Under Google's Gemini API terms, the Paid Services data rules apply to all API use in your region, including unpaid quota and Google AI Studio, even when offered at no charge.

We do not control Google's internal retention beyond what their published terms describe. For questions about Google's handling, see Google's policies linked above.

What Memori does and does not do with AI

We do We do not
Use Google Gemini to draft, organize, and translate your memory content at your direction Use your memory content to train Memori's own AI models
Store AI outputs (titles, stories, translations, folder suggestions) in your account Use AI for credit, employment, housing, or similar legal decisions about you
Show labels when you view machine-translated text Guarantee accuracy of AI output
Let you edit, correct, or delete any memory Share your content with AI providers other than Google Gemini for these features (unless we update this policy)

AI outputs are suggestions and drafts. Review before sharing memories with others or publishing.

Your consent, choices, and withdrawal

  • Consent: By creating an account and using capture, save, or edit features, you explicitly consent to transmission of the data described above to Google Gemini for the purposes described. Consent is given via the login-screen consent footnote together with the published Privacy Policy and Terms; we do not show a separate AI notice on every capture save.
  • Cannot partially disable core AI: Bilingual translation and the capture archivist are built into memory save flows. To avoid third-party AI processing, do not use those features (or delete your account).
  • Withdraw consent / stop processing: Delete individual memories, or Settings → Security → Delete account to remove your data from our systems (subject to short backup retention). This stops future AI processing on your account.
  • Rights: See Your rights (access, erasure, portability, objection). AI-generated text in your memories is part of your personal data.

Labeling AI-generated and machine-translated content

  • Drafted titles/stories from the archivist are stored as your memory content; you can edit them before sharing.
  • When you toggle to the non-source language on a memory, the app shows that the text is machine translation (Google Gemini).
  • We do not present AI drafts as human-written journalism or professional advice.

Accuracy, limitations, and your responsibility

AI-generated titles, stories, folder suggestions, and translations may be wrong, incomplete, biased, or inappropriate. They are not medical, legal, financial, or other professional advice. You are responsible for reviewing content before sharing or relying on it.

Storage, retention, and deletion

  • AI-generated content is stored in your memory records and metadata (including bilingual content_locales).
  • Personal context facts remain until you delete related memories or your account.
  • Account deletion removes your memories and associated AI data from our production systems within a reasonable period. See Retention and deletion.

Legal bases (GDPR)

  • Contract (Art. 6(1)(b)) — necessary to provide capture, organization, translation, and display features you use.
  • Legitimate interests (Art. 6(1)(f)) — security, abuse prevention, and improving reliability of AI-assisted features, balanced with your rights.
  • Consent (Art. 6(1)(a)) — where required for optional features or explicit AI consent in your jurisdiction.

Changes to AI features

We may change AI models, providers, or behavior. Material changes will be reflected in this policy and communicated in the app when practicable. Continued use after notice may constitute acceptance where permitted by law.

Not legal advice: This disclosure is for transparency. It does not replace advice from a qualified lawyer for your situation or jurisdiction.

Automated decisions

We do not make automated decisions that produce legal or similarly significant effects concerning you. AI-assisted folder suggestions and drafted text are organizational tools only and do not determine your legal rights or status.

Changes

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be communicated in the app where practicable.

Contact

NBuilders — [email protected]