This Privacy Policy explains how MemoCove LLC (“MemoCove,” “we,” “us,” or “our”) collects, uses, shares, and protects your information when you use the MemoCove app and website (together, the “Service”). MemoCove is a calm, personal space for sharing small moments of everyday life. We collect as little as we can to run it, we show no ads, and we never sell your personal information.
Information we collect
We collect the following categories of information:
- Account information. When you create an account we collect your email address, username, and display name. You may also add an optional bio, profile photo (avatar), cover image, and a preferred language. If you sign up with a password, it is stored only in protected (hashed) form by our authentication provider.
- Content you create. We store the content you choose to add to the Service: posts (text plus up to nine photos or one short video), comments (text and an optional photo), the groups you create or join, the accounts you follow, the group and follow invitations you send or receive, the people you @mention, the accounts you block, the reports you submit, and your notifications. If you choose to attach a place to a post, we store that place’s name, address, and map coordinates with the post.
- Sign-in information. You can sign in with an email address and password, or with Apple, Google, Facebook, or X. When you use one of those providers, it shares a unique account identifier and basic profile details such as your name and email address with us, according to the choices you make on the provider’s screen. If you choose “Hide My Email” with Apple, Apple gives us a private relay address instead of your real one; if a provider does not share your email address, we simply do not receive one. We use a third-party authentication provider to verify your identity and keep you signed in, and we never see your password for those providers.
- Notifications and devices. If you allow push notifications, we store the push token your device gives us, together with your device’s name, app version, and language, so we can deliver notifications and clean up tokens that stop working.
- Purchases. If you subscribe to MemoCove Pro, the purchase is processed by the Apple App Store, Google Play, or our web checkout. Our subscription-management provider tells us your subscription status, the plan you chose, and its renewal dates. We never receive your full payment card details.
- Device and usage data. Like most online services, our servers automatically process limited technical data needed to deliver and secure the Service: your IP address, device and browser type, and request logs that record the address of each request (which can include text you searched for), its timing, and its result. We keep these logs for up to 7 days for troubleshooting and security. The mobile app also checks for app updates; that check sends your platform, app version, and a random per-install identifier that is not linked to your account. The app keeps a local copy of your content on your device so it works offline; that copy stays on your device.
We do not use advertising networks or tracking SDKs, we do not add third-party analytics to the Service, and we do not embed advertising identifiers in it. One component does report to its maker: on Android, the QR code scanner uses Google’s ML Kit barcode scanning, which reads the camera image on your device but sends Google information about your device and the app (such as the device model, operating system version, and app version), performance metrics, the scanner’s settings, and a per-installation identifier, for diagnostics and usage analytics. The iPhone app’s scanner sends nothing.
How we use your information
- To create and operate your account and provide the Service.
- To show your posts, comments, profile, and other content to the audiences you choose (Public, Group only, or Private).
- To send you in-app and push notifications about activity that involves you, such as comments, replies, mentions, invitations, and changes in your groups. You control push notifications in your device’s settings.
- To send you account emails: confirmation codes, password resets, security notices when your email or password changes, and a notice if your account is ever suspended.
- To find nearby places when you choose to add a place to a post.
- To process and honor your MemoCove Pro subscription.
- To keep the Service secure, prevent abuse, review reports, and enforce our Terms of Use and Community Guidelines.
- To respond to your requests, provide support, and comply with our legal obligations.
How we share information
We do not sell your personal information. We share information only in the following situations:
- With other users, according to the visibility you choose for each post. Public posts are visible to anyone; Group-only posts are visible to members of the groups you include them in; Private posts are visible only to you. Comments follow the audience of the post they belong to. Your profile — username, display name, avatar, cover image, and bio — is visible to other MemoCove users. If you attach a place to a post, its name and a map link are visible to everyone who can see that post. Your email address is never shown to other users, and no one can see who follows you.
- With service providers who process data on our behalf under contract: Supabase (authentication and database hosting); Cloudflare (website, API, and media hosting, storage, delivery of the emails we send you, and security and anti-abuse protection, including server logs); Apple (Sign in with Apple, push notifications on iOS, and App Store purchases); Google (Sign in with Google, push notifications on Android through Firebase Cloud Messaging, and Google Play purchases); Facebook and X (only if you choose to sign in with them); and RevenueCat (subscription management — purchases made on the web are processed by Stripe through RevenueCat).
- With place-search providers, when you look for a place to add to a post. Our server sends your search text and coordinates to Komoot’s Photon service (built on OpenStreetMap data) or, for locations in mainland China, to AMap. We do not send your account details with those requests.
- For legal reasons, when we believe in good faith that disclosure is required to comply with the law, enforce our terms, protect the rights, safety, or property of our users or the public, or respond to a valid legal request.
- In a business transfer, such as a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Privacy Policy.
Media storage and access
Photos and videos you upload are stored in a private storage bucket and served only through our access-controlled media service. Media is never placed in a publicly browsable location: a media link works only for a short time and only for someone who is allowed to see the post it belongs to. On upload, photos are re-encoded: large photos are scaled down, formats such as HEIC are converted to a widely readable type, and the hidden camera metadata embedded in the file (such as the location where a photo was taken) is removed rather than stored. GIFs are stored as uploaded. Videos are compressed on your phone before they are uploaded.
Data retention
We keep your information for as long as your account is active. When you delete a post or comment, it is removed from the Service right away. When you delete your account, your profile, posts, comments, photos and videos, group memberships, and sign-in are deleted immediately and permanently. A few records outlast an account: reports you filed or that concern you, and the moderation decisions on them, stay in our moderation records; a group you handed to another member keeps the name, description, and cover image you gave it; @mentions of your username stay as plain text in other people’s posts and comments; and a deletion record holding only identifiers and times lets other members’ apps remove their copies. Residual copies can remain in our database backups and server logs for up to 7 days, and in caches for a limited period, before they expire, and we may retain limited records where we must do so to comply with legal obligations, resolve disputes, or enforce our agreements. The App Store, Google Play, and Stripe keep their own records of any purchase.
Your rights and choices
Much of your privacy is in your own hands, directly in the app:
- Choose Public, Group only, or Private for every post.
- Adding a place to a post is optional, and you can leave it off.
- Turn push notifications on or off in your device’s settings, and mute new-post notices for any group in that group’s settings.
- Block or unblock anyone at any time.
- Edit your profile, delete your posts and comments, and delete your account whenever you like.
Depending on where you live, you may also have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any right you cannot handle in the app, contact us at support@memocove.com. We will not treat you differently for exercising these rights.
Deleting your account
You can delete your account yourself at any time: on your phone, open the Me tab, then Settings, then Delete account; on the web, open Me and choose Delete account. Deletion is immediate and permanent, subject to the limited retention described above. The account guide walks through the steps. If you cannot sign in, email support@memocove.com and we will take care of it. Deleting your account does not cancel a MemoCove Pro subscription — cancel that where you bought it.
Children’s privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or the higher minimum age required in your country). If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
Security
We use industry-standard safeguards to protect your information, including encryption in transit, access controls, secure HTTP-only session cookies on the web, and storage of sign-in credentials in your phone’s secure storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but we work hard at it.
International data transfers
We and our service providers may process and store your information in countries other than the one in which you live. Where required, we use appropriate safeguards for such transfers.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, let you know within the Service. Your continued use of the Service after an update means you accept the revised policy.
Contact us
If you have questions about this Privacy Policy or our data practices, we would love to hear from you at support@memocove.com.