Privacy Policy

MemVault ("we," "us," or "our") is committed to protecting your privacy and the precious family memories you entrust to us. This Privacy Policy explains how we collect, use, protect, and respect your information when you use our MemVault mobile application and services (the "Service"). By using MemVault, you consent to the data practices described in this policy.

1. Information We Collect

We collect information to provide MemVault services and protect your family memories. Here's exactly what we collect and why:

Photos, Videos, and Voice Memos

• Media Files: Photos, videos, and voice narrations you upload to preserve your family memories
• Metadata: File creation dates, camera information, and location data (if you choose to include it)
• Captions and Descriptions: Text descriptions, tags, and stories you add to memories
• Album Organization: How you organize memories into albums and collections

Family Data

• Family Tree Information: Names, relationships, birth dates, and other family member details you add
• Family Connections: How memories are linked to family members
• Sharing Preferences: Which family members have access to specific memories or albums
• Family Member Accounts: Basic profile information of family members you invite

Account and Profile Information

• Registration Details: Name, email address, and password (encrypted)
• Profile Information: Display name, profile photo, and basic preferences
• Subscription Data: Plan type, billing information (processed by app stores), payment history
• Authentication Data: Login credentials and two-factor authentication settings

Usage and Analytics Data

• App Usage: How you navigate and use MemVault features
• Search Queries: What you search for to help improve our search functionality
• Feature Engagement: Which features you use most to enhance the app experience
• Performance Data: Crash reports and technical diagnostics to improve app stability

Device and Technical Information

• Device Details: Device type, operating system version, app version
• Network Information: IP address, connection type, general location (country/region)
• Technical Logs: Error logs and performance metrics for troubleshooting

2. How We Use Your Information

We use your information solely to provide and improve MemVault services:

Core App Functionality

• Memory Storage: Securely store and organize your family photos, videos, and voice memos
• AI Organization: Use machine learning to automatically tag and organize your memories
• Search and Discovery: Power the search functionality to help you find specific memories quickly
• Family Tree Integration: Connect memories to family members and relationships
• Cross-Platform Sync: Keep your memories accessible across all your devices

Family Sharing Features

• Invitation Management: Send and manage invitations to family members
• Permission Controls: Enforce sharing settings and access permissions
• Collaborative Features: Enable family members to contribute and organize memories together
• Privacy Protection: Ensure only invited family members can access shared content

Service Improvement

• Performance Optimization: Analyze usage patterns to improve app performance and reliability
• Feature Development: Understand user needs to develop new memory preservation features
• AI Enhancement: Improve our AI tagging and organization algorithms
• Security Monitoring: Detect and prevent security threats and fraud

Communication and Support

• Customer Support: Respond to your questions and provide technical assistance
• Service Updates: Notify you about important app updates and new features
• Account Management: Send billing notifications and subscription updates
• Security Alerts: Notify you of important security or privacy changes

3. Data Sharing Practices

We only share your data in these limited circumstances:

Family Members Only

• Invited Family Members: Only family members you specifically invite can see shared memories
• Permission-Based Access: Family members can only access content according to permissions you set
• No Public Sharing: Your memories are never visible to the general public or other MemVault users
• Granular Control: You control exactly what each family member can see and do

Essential Service Providers

• Cloud Infrastructure: Secure cloud hosting providers that store your encrypted data
• App Store Partners: Apple and Google for subscription billing and app distribution
• Analytics Services: Privacy-focused analytics to understand app usage (anonymized data only)
• Customer Support Tools: Secure platforms to provide customer service (no access to your memories)

Legal Requirements

• Legal Compliance: When required by valid legal process, court order, or applicable law
• Safety Protection: To protect the safety and security of MemVault users and services
• Rights Protection: To protect our rights, property, and legitimate business interests

Business Transfers

• Mergers and Acquisitions: In connection with a merger, acquisition, or sale of business assets
• User Protection: Any new owner must honor this privacy policy and protect your data
• Advance Notice: We will provide prominent notice before any ownership changes

4. Data Security Measures

We implement comprehensive security measures to protect your family memories:

Encryption and Data Protection

• 256-bit AES Encryption: All data encrypted at rest using military-grade encryption standards
• TLS 1.3 Encryption: All data transmission protected with the latest encryption protocols
• End-to-End Security: Data encrypted from your device to our secure servers
• Encrypted Backups: All backup systems use the same encryption standards

Infrastructure Security

• SOC 2 Certified Data Centers: Data stored in facilities with the highest security certifications
• 24/7 Monitoring: Continuous security monitoring and threat detection
• Regular Security Audits: Independent security assessments and penetration testing
• Redundant Storage: Multiple secure backup locations to prevent data loss

Access Controls

• Principle of Least Privilege: Employees have access only to data necessary for their role
• Multi-Factor Authentication: All employee access requires multiple authentication factors
• Audit Trails: All data access is logged and monitored
• Background Checks: Comprehensive screening for all employees with data access

User Security Features

• Two-Factor Authentication: Optional 2FA for additional account protection
• Strong Password Requirements: Enforced strong password policies
• Session Management: Automatic logout and session timeout protection
• Suspicious Activity Alerts: Notifications of unusual account activity

5. Your Rights and Controls

You have complete control over your family memories and personal information:

Data Access and Portability

• View Your Data: Access all personal information we have about you through the app
• Download Memories: Export your photos, videos, and family tree data at any time
• Data Formats: Receive your data in standard formats (ZIP, PDF, JSON)
• Family Tree Export: Download your complete family tree with relationships and connections

Privacy Controls

• Family Sharing Management: Control who can see each memory and album
• Permission Settings: Set granular permissions for each family member
• Album Privacy: Choose different privacy settings for different albums
• Search Privacy: Control whether your memories appear in AI-powered suggestions

Data Correction and Deletion

• Edit Information: Correct or update your profile, family tree, and memory descriptions
• Delete Memories: Remove individual photos, videos, or entire albums
• Account Deletion: Permanently delete your account and all associated data
• Family Member Removal: Remove family members' access and delete shared connections

Communication Preferences

• Notification Settings: Control all app notifications and email communications
• Marketing Opt-out: Unsubscribe from promotional messages while keeping important updates
• Family Notifications: Choose which family activity notifications you receive
• Security Alerts: Manage security and privacy notification preferences

6. Data Retention

We retain your data only as long as necessary to provide MemVault services:

Active Account Data

• Memories and Media: Stored permanently while your account is active
• Family Tree Data: Preserved to maintain family connections and relationships
• Account Information: Kept current to provide service and support
• Usage Analytics: Retained for up to 2 years to improve services

Account Deletion

• 30-Day Grace Period: Account marked for deletion but recoverable for 30 days
• Data Export Window: Download all your data during the grace period
• Family Notification: Family members notified that shared memories will be removed
• Permanent Deletion: After 30 days, all data is permanently and irreversibly deleted

Legal and Safety Requirements

• Billing Records: Subscription and billing data retained as required by law
• Security Logs: Limited security logs may be retained for fraud prevention
• Legal Holds: Data may be preserved longer if required by legal process
• Safety Investigations: Information may be retained during active safety investigations

7. Children's Privacy

MemVault is designed for families and takes children's privacy seriously:

Age Requirements

• Minimum Age: Users must be at least 13 years old to create an account
• Parental Control: Parents can create accounts and manage family sharing for younger children
• Family Supervision: Children's memories are shared only within invited family members
• No Public Profiles: Children's information is never visible to the public or other users

Children's Data Protection

• Limited Collection: We collect only information necessary for family memory preservation
• Parental Access: Parents can access and control all data related to their children
• No Targeted Advertising: We don't use children's data for advertising or marketing
• Secure Storage: Children's memories receive the same encryption and security protections

Parental Rights

• Data Access: Parents can review all information collected about their children
• Data Deletion: Parents can request deletion of their children's information
• Consent Management: Parents control sharing permissions for their children's memories
• Account Control: Parents can manage or delete children's account access

8. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate protections:

Data Transfer Safeguards

• Adequacy Decisions: Transfers to countries with adequate privacy protections
• Standard Contractual Clauses: Approved legal frameworks for international transfers
• Binding Corporate Rules: Internal policies ensuring consistent global protection
• Certification Programs: Partners certified under recognized data protection frameworks

Regional Privacy Rights

• GDPR (European Union): Full compliance with EU data protection requirements
• CCPA (California): California residents have additional privacy rights under state law
• Other Jurisdictions: Compliance with applicable privacy laws in all operating regions
• Cross-Border Security: Same encryption and security standards apply globally

9. Cookies and Tracking

MemVault uses minimal tracking technologies focused on functionality and security:

Essential Cookies

• Authentication: Secure login and session management
• Security: Fraud prevention and account protection
• Preferences: Remember your app settings and configurations
• Performance: Monitor app performance and identify technical issues

Analytics and Improvement

• Usage Analytics: Understand how features are used to improve the app
• Error Tracking: Identify and fix crashes and technical problems
• Performance Monitoring: Ensure optimal app speed and reliability
• Feature Testing: Test new features with small user groups

Your Tracking Controls

• Device Settings: Control app permissions through your device settings
• Analytics Opt-out: Disable non-essential analytics in app settings
• Limited Tracking: We don't use third-party advertising trackers
• Transparency: Clear disclosure of all tracking technologies used

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements:

Notification Process

• Advance Notice: At least 30 days notice for significant changes
• In-App Notifications: Prominent notifications about policy updates
• Email Alerts: Email notifications to all active users
• Version History: Previous versions available for reference

Your Options

• Review Period: Time to review changes before they take effect
• Continued Use: Using MemVault after changes indicates acceptance
• Opt-out Option: Export your data and delete your account if you disagree
• Grandfathering: Existing privacy choices generally remain unchanged

11. Contact Information

This Privacy Policy was last updated in January 2025 and is effective immediately upon your use of the MemVault service. We're committed to preserving your family legacy with the highest standards of privacy and security.