Last updated: May 13, 2026
Plain-English summary:
We process the photos you choose to restore, briefly store them on secure servers, and automatically delete them within 24 hours. We do not sell your data. We do not require an account. The only personal information we hold long-term is an anonymous device-level subscription identifier and any email you voluntarily send us when contacting support. We use a marketing-attribution SDK and a crash-reporting SDK; details below.
Memoria ("we", "us", "our") is the operator of the Memoria iOS application ("the App"). For privacy questions you can reach us at support@memoria-app.com.
When you select a photo and tap "Restore," the App uploads that photo to our secure storage on Cloudflare R2. The photo is then sent to our AI processing partner, Replicate, who runs the restoration model and returns the result.
To manage your subscription we use RevenueCat. RevenueCat assigns your device an anonymous identifier (no email, no name, no account creation required) and tracks your subscription status to enable Premium features.
The App requests access to your iOS Photos library only when you tap "Choose photos" or "Save". You can change or revoke this permission at any time in iOS Settings → Memoria → Photos. The App never reads your photo library in the background.
We use AppsFlyer to measure which marketing channel brought you to the App so we can spend our marketing budget on the channels that actually work. AppsFlyer receives a privacy-preserving device identifier, install and subscription events (start, renew, cancel), and basic device metadata (OS version, country, language). If you grant the App Tracking Transparency permission, AppsFlyer may also receive Apple's IDFA; if you decline, attribution falls back to SKAdNetwork (Apple's privacy-preserving framework). We never share your photos or any photo metadata with AppsFlyer. See AppsFlyer's privacy policy.
When the App crashes or hits an unexpected error, we send anonymized diagnostics to Sentry to help us fix bugs. Diagnostics include the stack trace, device model, OS version, and an anonymous installation ID. They do not include your photos, your email, or any subscription identifier. See Sentry's privacy policy.
If you grant notification permission, the App registers an Apple Push Notification service (APNs) device token so we can notify you when a restoration or animation finishes. The token rides on the active job through our worker and Expo's push relay, and we do not store it beyond the duration of that job.
The App is not directed to children under 13 (or 16 in jurisdictions where that is the applicable minimum age). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
Because we hold so little data about you, most rights are exercisable directly through your device:
If you reside in the European Economic Area, the United Kingdom, Switzerland, California, or any jurisdiction with similar data-protection law, you also have the right to lodge a complaint with your local supervisory authority.
Photos are transmitted over TLS-encrypted connections. Storage is encrypted at rest by our providers. Access to processing infrastructure is limited and audited. No method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.
Your photos may be processed on servers in the United States and other countries where our providers operate. We rely on the providers' standard contractual clauses and equivalent transfer mechanisms.
We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, surface a notice in the App. Continued use of the App after the change constitutes acceptance of the revised Policy.
Questions, concerns, or requests? Email support@memoria-app.com. We aim to respond within 5 business days.