Memoir Privacy Policy

Effective date: 30 September 2026
Operator: Abhishek Mishra, Delhi 110092, India
Privacy contact: memoir@zohomail.in

1. Scope

This policy describes how Abhishek Mishra handles information when you use Memoir, a journal that you may share with one invited partner, and when you visit the Memoir legal website at https://memoir-legal.pages.dev/. The app's journal content is private to its members within the service, but it is stored in the cloud and is not end-to-end encrypted. A person you invite can see and keep copies of material available in your shared journal.

2. Information Memoir handles

Account and profile. You sign in using Apple or Google through Clerk. We receive an account identity and, when available, the email address associated with that sign-in. You provide a display name and may add a profile photo and a short bio. Clerk stores your authentication and profile details. Memoir also stores your name, optional profile-image URL, and available email address in its Convex backend. Your bio is stored in Clerk metadata, rather than in the Memoir journal database. Clerk and your sign-in provider may also process authentication records, such as sign-in activity, under their own policies.

Journal content. We store the journals you create or join, their titles, dates, themes and cover photos; the text, dates, times and photos in memories; milestones and reminder settings; and records of who created content, invitations, membership, and account or content deletion. Images you choose for upload are prepared on your device, uploaded to Convex storage, and processed into smaller preview images. We do not access your entire photo library merely because you use Memoir; you choose images through the picker. We have not verified that all embedded photo metadata is removed, so avoid uploading a photo whose metadata you do not wish to share.

On-device data. Memoir stores a copy of journal data, preferences, pending invitation codes, and edits waiting to sync in app storage on your device. It caches viewed photos for faster access. On the web, downloaded image copies are held in an in-memory browser cache during the session; a browser download may save selected photos or a ZIP to your device. Other device and browser storage behavior can depend on your operating system.

Permissions and reminders. If you choose photos, the app uses your device's photo-picker access. If you save journal photos to your photo library, it requests permission to do so. If you enable milestone reminders, it requests notification permission and schedules reminders on your device. The visible reminder message is generic; the locally scheduled notification includes a memory identifier and journal scope so the app can open the right item. The app does not request camera or microphone access through its current configuration. The settings page also has switches labeled for new-memory and invitation notifications, but the checked-in app does not implement delivery of those notifications.

Support and technical information. If you choose to contact us through memoir@zohomail.in, we will receive what you send. The current app opens a configured support destination; it does not contain an in-app report submission form. The checked-in app does not include an advertising or product analytics SDK. Its backend can log a photo-processing error with an internal photo record identifier. Clerk, Convex, Apple, Google, app stores, and website hosting may process technical information such as network or device data under their own operations. We do not control every technical field those providers collect or how long they retain their own operational logs. Their privacy notices describe their practices.

Legal website. The legal pages are hosted on Cloudflare Pages. The pages contain no analytics script, form, or app-set cookies. Cloudflare receives requests needed to deliver and protect the pages, including technical data such as IP address and browser information. Cloudflare's own logs and security-cookie practices depend on its service settings.

3. Why we use this information

We use account and sign-in information to identify you, maintain your account, and restrict journal access to authorized members. We use profile and journal information to display your journal, share it with your invited partner, sync edits, provide photo previews and downloads, calculate storage usage, schedule local reminders you enable, and carry out deletion choices. We use operational records to enforce upload limits, prevent duplicate operations, and complete or retry account deletion. We use information you send to support to respond to your request. We also use information when necessary to comply with law, respond to safety or security issues, and handle your requests.

We do not sell journal content, use it for targeted advertising, or use it to train generative AI models.

4. Who can see information and where it goes

Your invited partner can see the shared journal, its members' names and profile images, memories, photos, and meaningful dates. A signed-in person holding a valid invitation code can see a limited invitation preview, including the journal title and inviter's name. The invitation sender may see a recipient's email in the invitation status when that information is available. A partner can download photos; deleting a photo from Memoir cannot remove a copy already saved outside the service.

Clerk processes sign-in and profile data. Apple or Google processes your chosen sign-in. Convex processes journal records, uploaded photos, previews, and account-deletion jobs for the app. Device operating systems handle photo access, saved downloads, and local notifications. Cloudflare handles requests to the legal website. These providers and their subprocessors may process information outside India. Convex currently offers hosting in the United States and Ireland, so journal information may be stored outside India. Clerk may process data where it or its subprocessors operate. Cloudflare delivers the legal pages through its network.

We do not claim these services can read only anonymized data: journal content is not end-to-end encrypted. Access within the app is checked against your account and journal membership. Abhishek Mishra is the only Memoir account administrator and will access journal content only when needed for a specific support request, security issue, or legal obligation. Provider personnel may have access under their own security and support procedures.

5. Retention and deletion

Journal data remains while the relevant journal and account remain in the service, unless you or your partner use the available deletion controls. A memory moved to Recently Deleted can normally be restored for 30 days; it is then scheduled for permanent deletion, and you can purge it earlier. Archiving a journal permanently clears memories already in Recently Deleted. Pending upload reservations expire after about one hour, and unused invitation codes expire after seven days.

You can request account deletion in the app. The deletion workflow removes your profile, your memory text, photos you uploaded, and other account contributions from active, archived, and Recently Deleted records, and then deletes the Clerk account. If the journal has a surviving partner, their own content remains in an archived journal. Some shared records may remain in changed form; for example, a milestone with a surviving photo may be renamed “Shared milestone,” and an otherwise retained memory record can have your text cleared and its author reassigned to the surviving partner. Completed deletion-job records are scheduled to be removed after about 24 hours. If cleanup fails, the app shows a retry state.

The app also attempts to clear its account-scoped local data and downloaded-photo cache during account deletion. Photos you exported to a device's photo library or browser downloads remain outside Memoir and are not removed by that request. Copies held by your partner are likewise outside your account-deletion controls. We keep support and privacy-request emails for 12 months after the request is resolved, unless applicable law requires longer retention. Provider backups and operational logs may remain for longer under provider retention schedules; we cannot erase copies that providers must retain under law.

6. Your controls and requests

In the app, you can update your profile, edit or delete journal content, restore recently deleted memories during their 30-day window, clear downloaded-photo cache, turn off milestone reminders, download selected journal photos, and request account deletion. Photo download is not a complete export of account, text, or settings data. You may request a copy of your account and journal data by emailing memoir@zohomail.in; we will handle the request manually after verifying control of the account. You can change photo-library and notification permissions in device settings. If an offline edit has not synced, you may keep or discard it in Offline data settings.

For access, correction, export, deletion, objection, or other requests beyond the in-app controls, contact memoir@zohomail.in. We will respond within 30 days of receiving your request. We may need to verify that you control the account before acting on a request. We will explain what we can provide or change, and any reason a request cannot be fulfilled. You may also raise a complaint with the relevant authority when applicable law provides that route.

7. Security

The app requires sign-in for journal access and checks journal membership before returning records or photo files. Photo requests use authorization and private cache controls; photo uploads require an authenticated reservation. These controls reduce unauthorized access but do not eliminate risk. Journal material is not end-to-end encrypted, and locally cached journal data should be protected using your device's security features. The app communicates with Clerk and Convex over HTTPS. Their infrastructure provides encryption for data in transit and at rest under their published security terms. No online service can guarantee complete security.

8. Children and geographic scope

Memoir is intended for adults aged 18 and older in India. The app does not currently verify age. If you believe a person under 18 has an account, contact us at memoir@zohomail.in so we can review and address it.

9. Changes and contact

We will post an updated policy with a new effective date when our practices change and use email and an in-app notice for material changes. Contact Abhishek Mishra at Delhi 110092, India or memoir@zohomail.in with privacy questions or requests.