Privacy Policy

Account information. Email address, name, username, and any optional profile details you add (such as a profile photo or date of birth).

Your content. The photos, videos, audio recordings, written journals, commentary, and Guided Memory narrations you upload or record, along with metadata your files carry (such as capture dates and locations) and the titles, tags, people names, and descriptions you add.

Usage information. Basic technical data needed to run and secure the service (such as device type and app version), collected through our infrastructure provider. We do not use third-party advertising or cross-site tracking.

Memory Capsule can help you tag the people in your photos. Detecting faces happens on your device, using Apple’s built-in Vision framework — your photos are not sent to a third-party face recognition service.

When face detection finds people in your photos, the app creates small face images and numerical representations of those faces (sometimes called faceprints) and stores them with your account on our servers. We use them for exactly one purpose: keeping your people tags and tag suggestions in sync across your devices and with people you share with. Tag suggestions on someone else’s photo take effect only when the photo’s owner accepts them.

We ask first.Before the very first face scan the app shows you what is collected, where it is stored and how long we keep it, and nothing is scanned until you agree. Declining leaves the rest of Memory Capsule working exactly as it does now — you just tag people by hand.

We never use face data for advertising, never sell it, and never share it outside the sharing you set up. You can delete a person’s face data at any time by removing that person in the app, and all face data is deleted when you delete your account.

You can also withdraw your agreement at any time in Settings. Withdrawing does not merely stop the scanning: it deletes every faceprint we hold for your account. The people you have already tagged, and their names, stay where they are — those are your words about your family, not biometrics.

Voice commentary, audio journals, and Guided Memory narrations are stored as part of your content. When a recording is transcribed — so your words become searchable text — the audio is processed by OpenAI’s Whisper transcription service, acting as our data processor. Per OpenAI’s API terms, audio submitted this way is not used to train their models. The resulting transcript is stored with your content and stays under the same privacy settings as the recording itself.

Everything you upload is private by default. Content becomes visible to others only through choices you make: inviting someone to a shared capsule, tagging a person, making a capsule public or unlisted on your profile, or setting a site password and giving it out. You can change or revoke these choices at any time.

We do not sell your personal information, and we do not share it with third parties except the service providers below.

We run on Google Firebase (authentication, database, file storage, and hosting) and use OpenAI for transcription as described above. These providers process your data only to provide their services to us.

Media you delete moves to Recently Deleted, where it is retained for up to 30 days for recovery and then permanently removed — including stored files and any generated variants. You can also permanently delete items immediately from Recently Deleted.

Deleting your account removes your content, face data, and personal information from the service. Email hello@memorycapsule.app if you need help with deletion or want to exercise privacy rights available in your region (such as access or deletion requests under California law).

Memory Capsule is not directed to children under 13, and we do not knowingly collect personal information from them. Family photos that include children are managed by the adult account holders who upload them.

Your content is encrypted in transit, stored with per-user access rules, and accessible only through the sharing you configure. No system is perfectly secure, but minimizing access is a design principle of the product, not an afterthought.

If we make material changes to this policy, we will update this page and note the new effective date. Questions: hello@memorycapsule.app.