This page is maintained by the Memory Button team to answer common privacy questions about the Memory Button app. It describes our current practices and is not a legal certification.

What we collect

Account data: email address, sign-in metadata (timestamps, IP for security).
Content you save: memory text, photos, voice notes, tags, categories, reminders, and details about people you describe.
Device permissions you grant: microphone (for Voice/Dictate), camera and photo library (for Photo capture), notifications (for Reminders).
Diagnostic logs: minimal error logs to keep the service running. No advertising identifiers, no behavioral tracking.

How we use it

To show your memories back to you across your devices.
To categorize, summarize, tag, transcribe, and search your memories using AI.
To deliver reminders you schedule.
To respond to support requests you send us.

We do not sell your data. We do not use your data for advertising. We do not share it with data brokers.

AI processing

When you save a memory or ask a question, the relevant text (and optionally an image or short audio clip) is sent to a large language model provider so it can be categorized, tagged, transcribed, or answered. Providers process the content solely to return a response and, per our agreements, do not train foundation models on your data. We never send provider-side identifiers that could re-identify you outside our service.

Subprocessors

We rely on the following services to operate Memory Button. Each is contractually required to protect your data:

Lovable Cloud (Supabase infrastructure): account authentication, encrypted database, private file storage.
Lovable AI Gateway: routes requests to large-language-model providers (e.g. OpenAI, Google, Anthropic families) for categorization, transcription, and search.
App hosting (Cloudflare): serves the web app and static assets.

Storage & security

Your data is stored in an encrypted cloud database with row-level security, meaning queries are scoped to your account and no other user can read it. Photos and audio are held in private storage buckets and delivered through short-lived signed URLs generated for you. Passwords are handled by the auth provider and never stored by us in plaintext.

Data retention

Your memories, people, reminders, photos, and voice notes are retained until you delete them or delete your account. Backups may persist for up to 30 days for disaster recovery, after which they are overwritten.

Your rights & how to exercise them

Export: Settings → Export memories downloads a JSON copy of your data.
Delete individual items: tap any memory, person, or reminder → delete.
Delete your entire account: Settings → Delete account. This permanently erases your memories, people, reminders, photos, voice notes, and account. Alternatively, email us and we will do it within 7 days.
Access, correction, portability, or objection: email privacy@getpromethix.com.

Depending on where you live (EU/UK GDPR, California CCPA/CPRA, Brazil LGPD, etc.), you may have additional statutory rights. We honor verified requests regardless of jurisdiction.

Children

Memory Button is not directed at children under 13 (or under 16 in the EEA/UK) and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

International transfers

Our providers may process data in the United States and the European Union. Where required, transfers are covered by Standard Contractual Clauses or equivalent safeguards.

Changes to this policy

If we make material changes, we will update the "Last updated" date and notify you in-app. Continued use after changes means you accept the updated policy.

Contact

Privacy questions or data requests: privacy@getpromethix.com
General support: support@getpromethix.com · Support page

Privacy Policy