Privacy Policy

1. Introduction

Memory Banx ("we," "us," or "our") operates the Memory Banx mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Memory Banx, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, username, and password when you create an account.
• Profile Information: Profile photo, bio, and other details you choose to add.
• Content: Photos, videos, stories, documents, and other media you upload to the Service.
• Memorial Information: Names, dates, epitaphs, and biographical details of individuals memorialized on the platform.
• Payment Information: Billing address and payment method details processed by Stripe (we do not store full card numbers).
• Communications: Messages you send through spaces, guestbooks, and condolences.

2.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, and push notification tokens.
• Usage Data: Features used, screens visited, actions taken, and timestamps.
• Log Data: IP address, browser type, referring pages, and crash reports.
• Location: Only if you explicitly grant permission (e.g., for tagging photos).

2.3 Information from Third Parties

• OAuth Providers: If you sign in with Google or Apple, we receive your name and email from that provider.
• Partner Referrals: If a funeral home or partner refers you, we may receive your name and contact information.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service.
• Process transactions and send related information (order confirmations, receipts).
• Send push notifications you have opted into (e.g., new content in your spaces, memorial tributes).
• Respond to your comments, questions, and support requests.
• Monitor and analyze usage trends to improve user experience.
• Detect, investigate, and prevent fraudulent transactions and abuse.
• Comply with legal obligations.

We do not sell your personal information. We do not use your photos, videos, or memorial content to train AI models.

4. How We Share Your Information

We share information only in these circumstances:

• With Your Consent: When you share content via spaces, public memorials, or QR codes.
• Service Providers: With third parties who perform services on our behalf (Stripe for payments, Resend for email, AWS for storage, Gelato/Prodigi for print fulfillment, PostHog for product analytics, Sentry for error diagnostics). These providers access only the data necessary to perform their services.
• Legal Requirements: When required by law, regulation, or legal process.
• Safety: To protect the rights, property, or safety of Memory Banx, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Storage and Security

• Your content is stored on Amazon Web Services (AWS) servers in the United States.
• We use encryption in transit (TLS/SSL) and at rest for sensitive data.
• Archive vaults use AES-256-GCM encryption.
• We implement access controls, rate limiting, and security monitoring.
• While we use commercially reasonable measures to protect your data, no method of electronic storage is 100% secure.

6. Data Retention

• Active Accounts: We retain your data for as long as your account is active.
• Deleted Accounts: When you delete your account, we remove your personal data within 30 days. Some data may persist in encrypted backups for up to 90 days.
• Memorial Content: Memorial pages created by partners may persist after account deletion if they are associated with an active partner organization. You can request removal by contacting us.
• Legal Holds: We may retain data longer if required by law or to resolve disputes.

See our Data Retention Policy for full details.

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of the personal data we hold about you (via Settings > Data Export in the app).
• Correction: Update or correct your personal information through your account settings.
• Deletion: Delete your account and associated data (via Settings > Account > Delete Account).
• Opt-Out: Disable push notifications, email communications, and analytics through your device and app settings.
• Data Portability: Export your data in a standard format.

To exercise these rights, email us at privacy@memorybanx.io or use the in-app options.

California Residents (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected and the right to opt out of the sale of personal information. We do not sell personal information.

8. Children's Privacy

Memory Banx is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@memorybanx.io.

Family content (photos of children uploaded by parents/guardians) is governed by our Children & Family Content Policy.

For users in jurisdictions with app-store age-verification requirements, see Section 9 (Age Verification and App Store Age Signals).

9. Age Verification and App Store Age Signals

Certain U.S. states and other jurisdictions (for example, Texas under the App Store Accountability Act / SB 2420) require app stores to verify a user's age and, for minors, to obtain parental or guardian consent. To comply, Apple and Google may provide us with an age signal for users in those jurisdictions.

What we receive. When you use Memory Banx on a supported device, the app store (Apple App Store or Google Play) may share a limited age signal with us, which can include:

• An age range (for example, 0–12, 13–15, 16–17, or 18+) rather than your exact date of birth;
• A verification or supervision status (for example, whether the age was verified, declared, or set on a supervised/child account); and
• A parental approval status for supervised accounts, including whether a parent or guardian has denied approval.

We do not receive your exact birth date, government ID, or biometric information from the app store. The app store, not Memory Banx, performs the underlying age verification.

How we use it. We use the age signal only to:

• Determine whether to apply age-appropriate restrictions to certain features (for example, limiting purchases, public community spaces, external sharing, and people-connection features for users identified as minors);
• Block or limit access where a parent or guardian has denied approval; and
• Meet our legal obligations and enable appropriate safety defaults.

How we protect it. Consistent with applicable law:

• We do not use the age signal for advertising, profiling, or analytics, and we do not sell it or share it with third parties for those purposes.
• We do not retain the age data long-term. The signal is processed in real time; we keep only a minimal derived indicator (such as an age range and whether parental approval is required or denied) on a temporary basis (up to 24 hours), and it is refreshed each time you open the app. The age data the app store provides is not stored in our long-term databases.

If you are in a jurisdiction without these requirements, or if no age signal is available for your device, this section does not change how the rest of this Privacy Policy applies to you.

If you have questions about how we handle age signals, contact us at privacy@memorybanx.io.

10. Cookies and Tracking

Our website uses essential cookies for authentication and session management. We do not use third-party advertising cookies.

Product analytics. We use PostHog to understand how our apps and website are used — for example, which features are opened and whether new users complete setup — so we can improve the experience. This usage data is associated with your account identifier but does not include your photos, videos, captions, messages, email address, or name. We keep session replay and automatic tap/screen-content capture disabled. We do not use this data for advertising and we do not sell it. You can turn analytics off at any time in Settings → Privacy & Security → Share Usage Analytics (in the mobile app). We also use Sentry for error and crash diagnostics.

11. International Users

If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the app or sending an email. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy:

• Email: privacy@memorybanx.io
• Mail: Memory Banx, support@memorybanx.io