Draft under legal review. Details in brackets are still being defined.

Privacy policy

Last updated: October 11, 2026

Memouring is a place to record your family's history: a family tree, memories, a diary, photos and documents, built together with the relatives you invite. This policy explains what personal information we handle, why, who we share it with, and the choices and rights you have.

1. Who we are

Memouring is operated by [Razão social — a definir / Company name — TBD] ([CNPJ — a definir / TBD]), [Endereço — a definir / Address — TBD] ("Memouring", "we", "us").

Questions about this policy or your information: [e-mail de contato — a definir / contact email — TBD]. Data protection officer: [Encarregado — a definir / Data protection officer — TBD].

2. Information we collect

Account information. Your email, password (held by our authentication provider; we never see it), name, profile photo, the language you picked, your country of residence (which sets the law that governs the terms of use) and, if you used one, your beta access code.

Age and guardian. We ask for your date of birth at sign-up but don't keep it. If you are under 18 we keep only the day you turn 18 and the email address of the parent or legal guardian you asked to agree. Once they answer, we also keep their answer (agreed or declined) and when they gave it, and their name if they agreed.

Content you create. Family trees; people in them (names, birth and death dates and places, gender, biography, whether they are living, photos); life events and relationships; diary entries (text and voice); photos, documents and voice recordings; questions and answers in the advice forum; the written versions of voice notes made for you; and your Family Book.

Files you send for tree extraction. When you use tree extraction, we keep the photo, scan or PDF you uploaded and what the AI read from it.

Written versions of voice notes. When you choose to have a voice note written down, we keep the transcript made from it, the short guide where there is one, and any changes you make to them.

Invitations. The email address and role of each person you invite to a tree.

Payment information. If you subscribe to Pro, Stripe processes the payment. We keep your Stripe customer ID, card brand and last four digits, and the subscription status. Your full card number stays with Stripe.

Technical and security information. Logs of sign-ins and sensitive actions (such as deleting an account), including IP address and time; when you accepted which version of these terms and this policy, and whether on the website or an app; notifications; and each tree's activity history. The sign-in, sign-up, password-reset and access-code forms run a bot check from Cloudflare (Turnstile), which receives your IP address and technical details about your browser to tell people from automated traffic. When our servers hit an error, an error report is sent to Sentry. It holds technical details only: the error message, the stack trace, and the internal account or record IDs our code logs. It never holds the contents of requests, passwords, or diary or media content.

Information about other people. A family tree naturally includes relatives who don't use Memouring, living or deceased, including children. See section 7.

Sensitive information. We don't ask for it, but family stories can mention religion, racial or ethnic origin, health or sex life if you or your relatives write about them. We use it only to store your content and show it to you and the people who can see the tree.

Photos you add to the gallery, the diary or a profile are stored as uploaded, including file metadata (such as when and where the photo was taken), and are visible to everyone with access to the tree. Remove that metadata before uploading if you don't want to share it.

3. How we use it

• To create and run your account and sign you in.
• To store, organize and show your content to you and to the people you invite.
• To read a family tree from a photo, scan or PDF when you ask us to.
• To write down a voice note when you ask us to and, for advice, make a short guide to it.
• To send the invitations you ask us to send.
• To bill your Pro subscription and meet tax obligations.
• To keep the service secure, prevent abuse and keep the access records the law requires.
• To tell you about the service and about changes to this policy.

We don't sell your personal information, we don't use it for advertising, and we don't use tracking cookies or third-party analytics.

4. AI features

Memouring uses third-party AI providers for two features. Each runs only when you choose to use it. None of your other content is sent to AI providers.

Tree extraction reads the names and relationships in a family tree from a photo, scan or PDF you upload. To do that, the file is sent to a third-party AI provider — Anthropic (Claude) or OpenAI, depending on how the service is configured — which processes it under its commercial terms.

Before it is sent, the file is converted to an image, downscaled and stripped of metadata (including the GPS location in phone photos). The image itself, with the names and dates on it, is sent. We keep your original file and the result so you can review and correct it before anything is added to your tree.

Written versions of voice notes. When you record advice or a diary entry on a tree whose owner has the Pro plan, you can tick "Create a written version with AI". If you do, the recording is sent to OpenAI to write it down word for word, and the resulting text is sent to OpenAI again to write a short guide to it. For a diary entry we only write it down; there is no guide. OpenAI processes both under its commercial terms. The transcript and guide are shown to everyone who can see the voice note; for a private diary entry, that's only you. You can edit them, and they are deleted with the voice note. If you leave the box unticked, the recording is not sent. Accounts under 18 don't see this option.

5. Who we share it with

We share information only with the service providers that help us run Memouring, and only what each one needs:

• Supabase — authentication, database and file storage
• Render — API hosting
• Vercel — website and web app hosting
• Cloudflare — the bot check on the sign-in and sign-up forms (Turnstile) and protection of the API against abusive traffic
• Sentry — error reports from our servers (technical details only), hosted in the US (or EU)
• Stripe — payment processing
• Resend — email delivery (invitations, notices)
• Anthropic or OpenAI — tree extraction, only for the files you send for it
• OpenAI — written versions of voice notes, only for the recordings you choose to have written down

Inside Memouring, your content is visible to the people you invite to each tree, according to their role. Diary entries marked private are visible only to you.

We may also disclose information when the law requires it, in response to a court order, or to establish or defend legal claims.

6. Where your information is stored

Our providers store and process information mainly in the United States. If you are in Brazil, these transfers are made with the safeguards required by the LGPD (art. 33), such as standard contractual clauses.

7. Relatives and children

When you add living relatives to a tree, you should have a genuine family connection with them and only share what is appropriate for recording your family's history. Take particular care with information about children: keep it to what is needed and respect what their parents or guardians want.

If you appear in a tree but don't use Memouring, you can ask us to correct or remove your information using the contact in section 1.

Accounts are for people aged 13 and over. We don't create accounts for children under 13, or knowingly collect information directly from them; they can take part through a parent's or guardian's account. People aged 13 to 17 need a parent's or legal guardian's agreement, which we ask for by email and keep as proof until the account is deleted. Until they turn 18 they can't subscribe to Pro, send invitations, use AI tree extraction or have voice notes written down by AI, so nothing they upload or record is sent to an AI provider.

If you are 13 to 17

• Your parent or guardian has to agree before you can use Memouring, because the law says people under 18 need an adult's help to accept terms like ours.
• Besides what section 2 lists for every account, we keep the day you turn 18 (not your birthday) and your parent's or guardian's email, plus their name if they agree.
• Until you're 18 you can't buy Pro, send invitations, use the AI scan or have voice notes written down by AI. That keeps your files and recordings away from AI companies and keeps money matters with an adult.
• You, or your parent or guardian, can ask us at any time to see or delete your information: write to [e-mail de contato — a definir / contact email — TBD]. You can also delete your account yourself in Settings or, if your parent or guardian said no, from the waiting screen.
• If your parent or guardian says no, you can't use this account until you turn 18, but you can delete it.
• When you turn 18, these limits end by themselves.

8. How long we keep it

• Account and content: for as long as your account exists. When you delete your account, we delete your trees, people, diary, photos and other content.
• A parent's or guardian's agreement (ages 13 to 17): the request and the answer, kept as proof until the account is deleted.
• A minimal record of deleted accounts: we keep the email of a deleted account to prevent abuse and meet legal obligations and, if you ever paid, the Stripe customer ID that links to your payment records. Your name, photo, country, preferences and card details are erased.
• Access records: at least 6 months, as Brazilian law requires (Marco Civil da Internet, art. 15), or longer when the law or an authority requires it.
• Payment records: for as long as tax law requires.
• Invitations: expire after 7 days.

Content you added to someone else's tree is part of that tree and stays there after you delete your account. Ask the tree's owner or us if you want it removed. Your private diary entries are the exception: only you could see them, so they are deleted wherever they are.

9. Your choices and rights

In Memouring you can:

• download a copy of your data from Settings (a JSON export, or a ZIP with all your photos, recordings and documents) and export any tree as GEDCOM;
• correct your name, photo and the content you created;
• delete your account from Settings.

For anything else, see our privacy contact page or email [e-mail de contato — a definir / contact email — TBD]. We respond within 15 days.

US residents

Depending on your state (for example California, Colorado, Connecticut, Virginia and others with consumer privacy laws), you may have the right to know what personal information we collect and how we use and disclose it, to access it and get a copy, to correct it, to delete it, and not to be discriminated against for using these rights. We don't sell personal information or share it for cross-context behavioral advertising, and we don't use sensitive personal information to infer characteristics about you, so there is nothing to opt out of.

To make a request, email [e-mail de contato — a definir / contact email — TBD]. We will verify your request by confirming it from the email address on your account. You can use an authorized agent; we may ask the agent for proof of authorization. If we deny your request, you may appeal by replying to our decision.

We don't respond to browser "Do Not Track" signals, because we don't track you across sites.

Residents of Brazil

If you are in Brazil, you have the rights in article 18 of the LGPD, and the Portuguese version of this policy describes them and the legal basis for each use of your data in detail. You can also complain to the Brazilian data protection authority (ANPD).

10. Cookies and local storage

We only use what is needed for the service to work:

• session cookies from our authentication provider, to keep you signed in;
• a cookie that remembers whether the side menu is open;
• a cookie that remembers the language you picked;
• your browser's local storage for your selected tree and whether you have seen the introduction;
• a service worker that caches the site's pages and files so it loads faster and works offline.

We don't use advertising or analytics cookies.

11. Security

We use encrypted connections (HTTPS), per-tree and per-role access control, and restricted internal access to data. No system is perfectly secure. If a security incident could put you at risk, we will tell you and the authorities as the law requires.

12. Changes to this policy

We may update this policy. If a change is material, we'll let you know by email or in the app before it takes effect. The date at the top shows when it was last updated.