Privacy at MaM

1. Local first

MaM is built local-first. Everything you make (photos, notes, place, weather, date, albums) lives on your device. If you use MaM without an account, nothing leaves your phone and we hold nothing about you.

The sample story is stored locally on your device, contains no personal data about real individuals, and is never uploaded to any server.

2. If you become a Keeper

MaM Keeper keeps your memories in the sky, so losing a phone never means losing a life. Photos (full and thumbnail) are stored with Cloudflare R2. Memory records (your note, place, weather, date, mood, album membership) are stored with Google Firebase. Your sign-in is handled by Firebase Authentication. Uploads happen when you save, and they respect your Wi‑Fi-only setting. A memory may have no date at all; we respect that too.

3. What we never collect

We do not collect whether an upload is waiting for Wi‑Fi. Season shelves and the Shoebox are computed on your device and never leave it. Your settings stay on your phone. There is no advertising in MaM, no tracking, and nothing is ever sold.

4. Small helpers

To write the weather of that day, Open-Meteo (with OpenWeather as backup) receives only your coordinates. To draw your places on the map, Mapbox does the drawing; it receives the coordinates it needs to draw, and nothing more. Purchases are handled by the App Store, and RevenueCat helps us see that your subscription is active. We only ever see that it is active.

5. Your choices

Share or export a memory anytime. Delete any memory; in the cloud it is deleted with it. Delete your account inside the app (Settings, Delete account): cloud memories and albums are removed, and you choose whether this phone keeps its copy. Without an account, removing the app removes everything.

6. Keeping it safe

Encrypted in transit and at rest. Access to cloud storage is restricted to operating and protecting the service. Your library is protected by your account. Temporary signed links are used when the app retrieves your photos. Authorized administrative access may be used only when necessary for security, maintenance, legal obligations, or support requested by you. We do not use your memories for advertising or AI training, and we do not sell your personal data. We keep cloud copies only while Keeper is active and for up to 90 days after it ends, so you can renew or save memories to this phone; after that recovery period, cloud copies are permanently deleted. Verified local copies on your device remain until you remove them, the app, or its data.

7. Children

MaM is not directed to children under 13, and we never knowingly collect anything from them.

8. Changes

If this policy changes, we tell you in the app before the change takes effect. Quietly changing the rules is not a thing we do.

9. Contact

Questions: support@makeamemory.app. Effective date: August 17, 2026.

10. Your rights, plainly

You may ask to see what we hold about you, correct it, export it, or have it deleted. Most of it you can do yourself in the app; the rest by writing to support@makeamemory.app, and we answer within a month. Our legal basis is the contract between us: you use MaM, we provide it. Where data travels outside the EEA, our helpers protect it with standard contractual clauses or equivalent safeguards. If you ever believe we have mishandled your data, you may complain to the Norwegian Data Protection Authority (Datatilsynet). We would rather make it right with you first, but the choice is yours.