Privacy Policy

Effective June 26, 2026

Memlock (“we”, “us”) lets you capture photos, videos, and notes as “memories”, seal them until a future date, and share them with people you choose. This policy explains what we collect, how we use it, who we share it with, and the choices and rights you have. It applies to the Memlock mobile app.

Information we collect

Account information

You can start using Memlock with an anonymous account tied to your device — no email or password required. If you choose to secure your account, we collect your email address (used for sign-in and to deliver your recovery key) and, optionally, your name, profile photo, and phone number. We generate a recovery key for you; we store only a salted, irreversible hash of it on our servers, never the key itself.

Your content

The photos, videos, captions, titles, dates, and “unlock” messages you add to your memories, along with the groups and albums you create, who they are shared with, the unlock dates you set, comments, and likes. Sealed memories stay hidden from recipients until their unlock date.

People you add

If you add a child or another person to a group as a placeholder member (someone without their own device), we store the name and optional birth date you provide so memories can be organized for them. You are responsible for having the right to add that person's information.

Device and technical data

If you enable notifications, we store a push notification token for your device. The app requests access to your photo library and camera only to let you add photos and videos you choose — we do not scan or upload your library. We keep basic operational logs needed to run and secure the service.

How we use your information

To provide the core service — storing your memories, sealing them, and delivering them to the people and groups you choose; to let you recover your account; to send notifications you have enabled (such as unlock reminders and new-memory alerts); to operate the optional Pro subscription; and to keep the service secure and working. We do not sell your personal information, we do not use it for advertising, and we do not track you across other apps or websites.

Caption suggestions (AI)

If you ask Memlock to suggest a caption for a photo, that image is sent to Google's Gemini API to generate suggestions, which are returned to you. This happens only when you request a suggestion. We do not use your photos to train AI models.

Payments and subscriptions

Memlock offers an optional paid subscription (Memlock Pro) for additional storage. Purchases are processed by Apple (App Store) or Google (Google Play) — we never receive or store your card or bank details. We use RevenueCat to manage and verify your subscription status; RevenueCat receives a pseudonymous app user identifier and the purchase information needed to keep your subscription in sync across your devices.

Who we share it with

We share your content only with the group members and recipients you choose. We also rely on service providers (processors) who handle data on our behalf and only under our instructions:

Supabase — database, authentication, file storage, and server functions.
Expo, Apple Push Notification service (iOS), and Firebase Cloud Messaging (Android) — to deliver notifications you enable.
RevenueCat, Apple, and Google — to process and manage subscription payments.
Google (Gemini API) — only the images you submit for caption suggestions.
Our email provider — to send verification and recovery-key emails when you add an email.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the service.

How long we keep it

We keep your information for as long as your account is active. You can delete an individual memory at any time, and you can delete your entire account — including your memories and the groups you created — from Profile → Danger zone. Deletion is permanent. Backups and logs are cleared on a rolling basis.

Security

Data is encrypted in transit. Access to your memories is enforced on our servers, not just in the app: a sealed memory's photos are not retrievable until its unlock date, and content is restricted to the groups and recipients you choose. No method of storage or transmission is 100% secure, but we work to protect your information.

Children

Memlock is not directed to children, and we do not knowingly allow children to create their own accounts. Adults may add children as placeholder members; that information is provided and controlled by the adult. If you believe a child has created an account, contact us and we will remove it.

Your rights

You can access and export your data from Profile → Data → Export my data, edit your profile in the app, and delete your account at any time.

EU / EEA and UK (GDPR)

If you are in the EU, EEA, or UK, you have the right to access, correct, delete, restrict, and port your data, and to object to certain processing. Our legal bases are: performance of our contract with you (to provide the service), your consent (for notifications and any optional email/phone you add), and our legitimate interests (to secure and improve the service). You may withdraw consent at any time and lodge a complaint with your local supervisory authority. Some of our providers (such as RevenueCat, Apple, and Google) may process data in the United States; such transfers are made under appropriate safeguards (for example, Standard Contractual Clauses).

United States (California / CCPA)

If you are a California resident, you have the right to know what personal information we collect, to request its deletion or correction, and to not be discriminated against for exercising these rights. We do not sell or “share” your personal information as those terms are defined under California law.

To exercise any of these rights, use the in-app tools above or contact us at privacy@memlock.app.

Changes to this policy

We may update this policy from time to time. We will revise the effective date above and, for significant changes, provide notice in the app.

Contact

Questions about privacy? Email us at privacy@memlock.app.