Privacy Policy

The short version

Memrial is built as a private family archive. We use personal information to keep accounts secure, store and organise family memories, help family members take part, provide support, improve the service, and meet our legal duties. We do not sell family archive content or make private archives searchable on the public web.

Information we collect

We collect:

account information, including your name, email address, password hash, profile details, date of birth when provided, settings, and legal choices
archive information, including membership, invitations, roles, family connections, people profiles, dates, albums, storybooks, comments, reactions, tags, prompts, and support conversations
family media and its details, including originals, filenames, captions, dates, locations, people tags, file size, file type, processing state, and versions created at your request
billing records, plan details, payment status, invoices, and limited payment references, but not full card details
security and service records, including sign ins, device and browser information, network information, access logs, errors, uploads, downloads, exports, and actions taken in an archive
service use information, including pages visited, features used, buttons selected, forms started or completed, scrolling, time spent, video playback progress, campaign source, and the sequence of actions during a visit

Family archives can contain information about living and deceased relatives, children, relationships, health, beliefs, heritage, and other sensitive family circumstances. Only add information you are entitled to use and invite people you trust.

How we use information

We use information to:

create accounts and provide the private archive you ask us to provide
store, organise, secure, display, and deliver memories to authorised people
create previews, thumbnails, playback formats, colourised or enhanced versions, and other requested outputs while protecting originals
run invitations, notifications, family dates, watch parties, storybooks, comments, reactions, prompts, and other family features
process subscriptions, enforce plan limits, prevent fraud, and keep records
provide support, investigate errors, recover failed processing, and respond to privacy or safety concerns
understand whether an archive and its members are finding the service useful, identify confusing journeys, improve features, and offer timely guidance
measure how people found Memrial and whether product messages are helpful
protect the service, enforce our terms, and comply with law

We may create an internal engagement score from recent contributions, visits, feature use, and viewing activity. It helps authorised Memrial staff understand whether an archive may need support. It does not decide access, pricing, employment, credit, insurance, or any other matter with a legal or similarly significant effect. Archive content remains private and the score is not sold to advertisers.

Our reasons for using information

We rely on different lawful reasons depending on the activity:

contract, when information is needed to provide your account, archive, subscription, or requested feature
legitimate interests, when we secure the service, prevent abuse, provide support, understand product use, and improve Memrial in a proportionate way
consent, for optional marketing and for storage or access technologies where consent is required
legal obligation, when we must keep or disclose records to comply with law
vital interests or substantial public interest only in rare cases where the law allows it and someone needs protection

You can object to processing based on legitimate interests. You can withdraw consent without affecting earlier lawful use.

Who can see family information

Accepted archive members can see content according to their role and the archive settings. An archive owner manages membership and can remove members or pending invitations. A person who creates a private storybook is the only archive member who can open it. An owner may see an overall count of members who have created storybooks, but not their books.

People with a family event contribution link can add material to that event without seeing the rest of the archive. A private archive is not made public merely because a contribution link exists.

Authorised Memrial staff may access limited account, archive, billing, support, security, or technical information when reasonably needed to provide support, investigate a problem, protect people, or operate the service. Access is limited by role and recorded where appropriate.

Service provider categories

We use carefully selected providers acting on our instructions. Categories include:

application hosting, database, object storage, backup, content delivery, network, and security services
subscription payment and fraud prevention services
transactional email and notification delivery services
customer support, monitoring, error diagnosis, and operational tooling
media conversion, enhancement, and requested content processing services
privacy conscious measurement infrastructure used to understand and improve Memrial

We share only what is reasonably needed for the relevant service. Providers must protect information and may not use private archive content for their own advertising.

We may also disclose information when required by law, to protect a person from serious harm, to investigate fraud or abuse, or as part of a business reorganisation with appropriate confidentiality and privacy safeguards.

International transfers

Some providers may process information outside the United Kingdom. Where required, we use an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism. You can ask [email protected] for more information about the safeguards that apply.

Security and preservation

We use access controls, encryption in transit, protected storage, monitoring, audit records, and recovery procedures appropriate to the service. We keep original media separate from generated previews where practical. No service can promise perfect security or permanent availability, so keep a personal copy of irreplaceable originals.

If we become aware of a personal data breach, we investigate, contain it, and notify affected people and the regulator where the law requires it.

How long we keep information

We keep active account and archive information while it is needed to provide the service. Granular service use events are normally kept for up to 180 days, after which they are deleted or reduced to broader statistics. Security, billing, consent, support, and legal records may be kept longer where needed for fraud prevention, tax, disputes, or legal obligations.

Deleted media follows a soft deletion and delayed removal process so accidental deletion can be recovered for a limited time. Temporary processing files and cached previews may remain briefly after deletion. Inactive free archives follow the notice process in the Terms of Service.

Your rights and choices

Depending on the law that applies, you may ask us to:

give you a copy of your personal information
correct information that is wrong or incomplete
delete information where there is no lawful reason to keep it
restrict or object to certain uses
provide information you supplied in a portable form where the right applies
explain a decision made solely by automated means, although Memrial's engagement score is not used for such decisions

You can manage account details, notifications, invitations, and available privacy choices in Memrial. You can object to optional behaviour measurement through the privacy choices provided in the service or by contacting us.

Email [email protected] to exercise a right. We may need to verify your identity and consider the rights of other family members in a shared archive. You can complain to the UK Information Commissioner's Office or your local data protection authority.

Children

Memrial is not intended for a child to open and manage an account unless the law and our registration rules allow it. Adults who add information about children must consider the child's privacy, best interests, and who is invited to the archive.

Changes and contact

We may update this policy as Memrial changes. We will show material changes in the product and request a new acknowledgement where required. For questions or rights requests, contact [email protected].