Privacy Policy

Last updated: March 2026 | Version 1.0

1. Data Controller

Living Memories ("we", "us", "our") is the data controller for personal data processed through the Living Memories application. For questions about this policy, contact us at privacy@livingmemories.app.

2. Data We Collect

We collect the following personal data: account information (name, email address), uploaded photographs, AI-processed images and videos, payment information (processed by Stripe, we do not store card details), usage data and analytics (with your consent), and cookie consent preferences.

3. How We Use Your Data

We process your data for the following purposes: providing our photo restoration, colorization, and video animation services; managing your account and processing payments; improving our services through analytics (with your consent); communicating with you about your account and our services; complying with legal obligations.

4. Legal Basis for Processing

We process your data based on: contract performance (providing our services), legitimate interest (improving our services, security), consent (analytics cookies, marketing communications), and legal obligation (tax records, fraud prevention).

5. Third-Party Processors

We use the following third-party data processors: Vercel (EU region) for hosting, database (Neon PostgreSQL), and file storage (Vercel Blob); Google AI (Gemini API) for photo restoration and video generation -- your photos are processed but not stored or used for training; Stripe (EU) for payment processing. All processors are GDPR-compliant and process data within the EU.

6. Cookies

We use essential cookies required for site functionality. With your consent, we may also use analytics cookies to understand site usage and marketing cookies for relevant advertising. You can manage your cookie preferences at any time through the cookie settings banner.

7. Your Rights

Under GDPR, you have the right to: access your personal data (export from Settings > Data Management), rectify inaccurate data (edit in Settings), erase your data (request account deletion from Settings > Data Management), restrict processing, data portability (export your data as JSON), object to processing, and withdraw consent at any time. To exercise these rights, visit your Settings page or contact us at privacy@livingmemories.app.

8. Data Retention

Active accounts: data is retained while your account exists. Deleted accounts: all data is permanently deleted within 30 days of your deletion request. Processing logs: retained for 90 days for debugging, then anonymized. Gift links: content retained until expiry plus 30 days, then purged.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls and authentication, regular security reviews, and EU-based data storage.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification. The current version is always available at /privacy.

11. Contact

For privacy-related inquiries or to exercise your data rights, contact us at: privacy@livingmemories.app. You also have the right to lodge a complaint with your local data protection authority.