Privacy Policy
Memory Weaver — স্মৃতিসুতা
Operated by Prism Spectrum, Dhaka, Bangladesh
Last updated: October 9, 2026
1. Information We Collect
- Account data: Name, email, profile photo (via Google or Apple sign-in)
- Photos & media: Photos you upload for memory timelines, albums, and AI analysis
- Voice recordings: Voice notes you record yourself (Vocal Legacy, campfires)
- Face data: Face detection runs in your browser (face-api.js). To group the same person across your photos, the resulting numerical face signatures (not face images) are stored in your private, access-controlled space. You can delete them anytime via People or Account Deletion.
- AI interactions: Prompts, story generations, and narrative outputs
- Usage data: Pages visited, features used, analytics
- Payment data: On the website, payments are processed by SSLCommerz (cards, bKash, Nagad and internet banking, in taka). The Memory Weaver mobile apps do not sell plans today. We do not store card numbers.
2. How We Use Your Data
- Preserve and organise your photo memories and family stories
- Generate AI photo insights, stories, pictures and photo touch-ups
- Make your photos searchable (labels and a numerical image signature)
- Process payments
- Improve service quality
3. Third-Party Services
- Supabase — Database, sign-in and private photo storage
- Anthropic (Claude) — Photo insights and stories (server-side)
- Google Gemini API — Photo analysis, stories, photo touch-ups and AI pictures when our main picture service is unavailable (server-side)
- Google Cloud Vertex AI — Photo search signatures, longer stories, and a backup route for Claude (server-side)
- Leonardo.ai — AI pictures such as memory covers and card art (server-side)
- ElevenLabs — Voice narration, and voice preservation with its own separate consent (server-side)
- Resend — Invitations and account emails
- Vercel — Website hosting
- SSLCommerz — Payments on the website
- Google Analytics 4 — Anonymous analytics
Face detection runs in your browser. Stored face signatures stay in your private, owner-only space (Row Level Security) and are never shared with third parties or used for advertising. AI providers receive only the content needed to run the feature you use.
4. Data Retention
Data retained while account is active. Delete via Account Deletion.
5. Your Rights
Access, correct, delete, or export your data. Contact: privacy@memory-weaver.net
6. Sensitive Data
Memory Weaver stores emotionally sensitive content (family photos, memorial tributes, voice recordings). We treat this data with the highest care and never use it for advertising or share it with third parties for marketing.
7. Children's Privacy
Designed for users aged 13+. We do not knowingly collect data from children under 13.
8. Security
HTTPS/TLS encryption, Row Level Security, JWT auth, rate limiting, and private Supabase Storage buckets.
9. Contact
Email: privacy@memory-weaver.net
Company: Prism Spectrum, Dhaka, Bangladesh