Memolinx Privacy Policy

1. Information We Collect

a. Information you provide directly

• Account information: name, username, email address, profile and cover photos, and authentication credentials.
• Profile details (optional): bio, gender, and links you choose to add.
• Content: the memories and events you create — photos, videos (including their audio track), titles, descriptions, dates, tags, contributors, and associated location metadata.
• Messages: the content of group and one-to-one chats, including messages you exchange with our AI assistant.
• Voice messages: audio you record in chat, and — unless you turn transcription off — a text transcript generated from it (see §4).
• Privacy settings: your access-level choices for content (Private, Shared with specific users, Shared with followers, Public).
• Support communications: information you provide when you contact us or submit a diagnostics/bug report.

b. Information collected automatically

• Device and usage data: IP address, device type and identifiers, operating system, app version, and interaction/product-usage events (e.g., screens viewed, features used).
• Location data: precise location associated with content you create — from the GPS metadata (EXIF) of photos you upload and, if you grant permission, from your device at the time of capture. Approximate location (city/country) may be derived and stored with content and your profile. Location is used only in connection with content you choose to create; a user who never posts has no location collected.
• Diagnostics/crash data: limited technical data to diagnose problems.

c. Information from third parties

• Sign-in providers: if you sign in with Google or Apple, we receive basic profile identifiers (such as name and email) from them.

2. How We Use Information

• To operate, maintain, secure, and improve the Platform.
• To enable creation, organization, sharing, search, and discovery of your memories and events.
• To enforce your privacy settings and manage contributor access.
• To power AI features — the "Search Memolinx" assistant, semantic/meaning-based search, and voice-message transcription (see §4).
• To send you notifications you've enabled (e.g., push notifications).
• To provide customer support and respond to your requests.
• To detect, prevent, and respond to fraud, abuse, safety issues, or security incidents, and to enforce our Terms.
• To comply with legal obligations.

We do not currently serve third-party advertising, and we do not use your personal content to target ads. If we introduce advertising in the future, we will update this Policy and provide any legally required notices and choices first.

3. How We Share Information

a. With other users

Content you designate Public is visible to anyone, including non-registered visitors. Content you share with specific users or followers is visible only to those you permit. Private content is visible only to you.

b. With service providers (processors acting on our behalf)

We use trusted vendors to run the Platform. They may process your information only to provide services to us:

• Amazon Web Services (AWS) — hosting, database (Aurora PostgreSQL), media storage (S3, CloudFront, DynamoDB).
• AWS Bedrock and Voyage AI — AI processing that powers the assistant, semantic search, and related features (see §4).
• Google Firebase Cloud Messaging and Apple Push Notification service — delivering push notifications.
• Support, analytics, and security providers as needed.

c. With third parties whose services are built into the app

• Google Maps Platform (Maps SDK): to render maps, Google receives data such as device identifiers, an internal usage-attribution ID, IP address, SDK/usage metadata, crash diagnostics, and map-interaction events (e.g., pan/zoom). Google acts as an independent controller for this data under its own privacy policy. Per Google, the attribution ID is not used for advertising.

d. For legal reasons

We may disclose information if required by law or legal process, or to protect the rights, property, or safety of Memolinx, our users, or the public.

e. In business transfers

In a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information.

4. AI Features

Memolinx includes AI-powered features:

• "Search Memolinx" assistant — you can ask questions about your memories, and it can also answer general questions (clearly labeled as a "General answer") when your content doesn't contain the answer.
• Semantic search — to make your content searchable by meaning, text and images from your memories may be converted into numerical representations (embeddings).
• Voice-message transcription — voice messages you send in chat may be transcribed to text.

To provide these features, relevant content (such as message text, memory text, and images, or voice audio) is sent to our AI service providers (AWS Bedrock and Voyage AI) acting on our behalf. AI output can be inaccurate or incomplete — do not rely on it as professional advice.

AI is the backbone of Memolinx. Its core differentiators — meaning-based search, automatic organization, and the assistant — do not work without AI processing, so it is central to the Platform and cannot be turned off separately (other than voice transcription, below). By using Memolinx you agree to this processing. If you are not comfortable with your content being processed by our AI service providers, please do not use the Platform.

Your one control: you can disable voice-message transcription at any time via Profile → "Don't transcribe my voice messages." When off, voice messages still send and play but are not transcribed.

5. Data Storage, Security, and Retention

• Storage: structured data is stored in Amazon Aurora PostgreSQL; media is stored in AWS S3/CloudFront and DynamoDB.
• Encryption in transit: production traffic is encrypted over HTTPS.
• Security: we use access controls and other safeguards, but no method of transmission or storage is 100% secure and we cannot guarantee absolute security.
• Retention: we retain information for as long as your account is active or as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or de-identify your personal content, except limited copies retained for backups, legal compliance, or safety for a reasonable period.

6. Your Rights and Choices

• Access & portability: request a copy of your data.
• Correction: request correction of inaccurate information.
• Deletion: delete your account and its content in-app via Profile → Delete account (this permanently deletes your account and its data), or request deletion by email. A web-based deletion request option is also available at https://memolinx.com/delete-account.
• Privacy settings: control the visibility of each memory and event.
• Device permissions: you can grant or revoke camera, microphone, photo library, location, and notification permissions in your device settings; some features may not work without them.

To exercise rights, email support@memolinx.com or admin@memolinx.com. We may verify your identity first.

California residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction, and to not be discriminated against for exercising these rights. We do not sell or "share" (as defined under California law for cross-context behavioral advertising) your personal information. Submit requests to the contacts above.

Users in the EEA/UK

Where applicable law (e.g., GDPR) applies, you have rights of access, rectification, erasure, restriction, portability, and objection, and may lodge a complaint with your supervisory authority. Our legal bases include performance of our contract with you, your consent (e.g., for optional permissions), and our legitimate interests in operating and securing the Platform.

7. Children's Privacy

Memolinx is not directed to children under 13 (or the higher minimum age in your jurisdiction). We do not knowingly collect personal information from children under that age. If you are under 18, you must have parental or guardian consent to use the Platform. If you believe a child has provided us information, contact us and we will delete it.

8. International Data Transfers

Your information may be transferred to and processed in the United States and other jurisdictions where we and our service providers operate. By using Memolinx, you consent to these transfers, subject to applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a revised "Last Updated" date. Your continued use after changes take effect constitutes acceptance.