Privacy Policy

Last updated: May 19, 2026

This Privacy Policy explains how E-Memory (“we,” “us”) collects, uses, and protects information when you use our website and services (the “Service”). We aim to handle your data with the same care you put into building a memorial.

1. Information we collect

Information you provide

  • Account details: your name, email address, and password (stored hashed, never in plain text).
  • Memorial content: the text, photos, dates, and other details you upload about the person you are remembering.
  • Billing information: if you subscribe to a paid plan, our payment processor (Lemon Squeezy) collects your payment details. We receive subscription status and a customer identifier — we do not store full card numbers.
  • Support correspondence: emails you send us and the content of those messages.

Information collected automatically

  • Log data: IP address, browser type, pages visited, and timestamps, used to operate and secure the Service.
  • Cookies: a session cookie (em_session) used to keep you signed in. We do not currently use advertising or cross-site tracking cookies.

2. How we use information

  • to provide, maintain, and improve the Service;
  • to authenticate you, keep your account secure, and prevent fraud or abuse;
  • to process payments and manage subscriptions;
  • to send transactional emails (verification, password reset, billing notices, security alerts);
  • to respond to your support requests and to communicate important changes to the Service;
  • to comply with legal obligations.

3. Legal bases (for users in the EEA / UK)

We process personal data on the following legal bases:

  • Contract: to provide the Service you signed up for.
  • Legitimate interests: to secure the Service, prevent abuse, and improve our product.
  • Consent: where required, for example for non-essential cookies (none are currently in use).
  • Legal obligation: to comply with tax, accounting, and other laws.

4. Sharing your information

We do not sell your personal information. We share data only with:

  • Service providers who help us run the Service — including hosting (AWS), email delivery (Amazon SES), payments (Lemon Squeezy), and OAuth sign-in providers you choose to use. These providers process data on our behalf under contractual safeguards.
  • Public viewers — memorials you set to public are visible to anyone with the link and may be indexed by search engines.
  • Authorities when required by law, court order, or to protect rights, safety, or the integrity of the Service.
  • Successors in the event of a merger, acquisition, or sale of assets, in which case we will notify you and ensure your data continues to be protected under terms consistent with this Policy.

5. International transfers

Our infrastructure providers may process data outside your country of residence, including in the United States. Where applicable law requires, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Retention

We retain account information and memorial content for as long as your account is active. When you delete a memorial or your account, we remove the content from the live Service; residual copies may persist in encrypted backups for a limited period before being overwritten. We may retain certain records (such as payment receipts) for longer where required by law.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information; to object to or restrict certain processing; and to lodge a complaint with a data protection authority. You can exercise most of these rights directly from your account settings or by contacting us at team@e-memory.app.

8. Security

We use industry-standard measures to protect your information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security but we work hard to protect your data and to notify you promptly if a breach affects you.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us so we can delete it.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be announced by email or through the Service before they take effect. The “Last updated” date above will always reflect the current version.

11. Contact

Questions or requests about your data? Email team@e-memory.app.