MEMOURING
PortuguêsEspañol

Draft under legal review. Details in brackets are still being defined.

Privacy policy

Last updated: October 18, 2026

Memouring is a place to record your family's history: a family tree, memories, a diary, photos and documents, built together with the relatives you invite. This policy explains what personal information we handle, why, who we share it with, and the choices and rights you have.

1. Who we are

Memouring is operated by [Razão social — a definir / Company name — TBD] ([CNPJ — a definir / TBD]), [Endereço — a definir / Address — TBD] ("Memouring", "we", "us").

Questions about this policy or your information: [e-mail de contato — a definir / contact email — TBD]. Data protection officer: [Encarregado — a definir / Data protection officer — TBD].

2. Information we collect

Account information. Your email, password (held by our authentication provider; we never see it), name, profile photo, the language you picked, your country of residence (which sets the law that governs the terms of use) and, if you used one, your beta access code.

Age and guardian, when you sign up yourself. We ask for your date of birth at sign-up but don't keep it. If you are under 18 we keep only the day you turn 18 and the email address of the parent or legal guardian you asked to agree. Once they answer, we also keep their answer (agreed or declined) and when they gave it, and their name if they agreed.

Child accounts. A parent or legal guardian can create an account for a child under 18 (section 7). For it we keep the child's name, a profile photo if one is added, the username and password the adult chose (the password is held by our authentication provider), the country of residence copied from the adult's account and the language, the day the child turns 18 (not the date of birth), which adult manages the account, whether it is paused, and the adult's agreement: their name, when they agreed and the version of the terms. A child account has no email address. For the adult, we also keep a record of the card check: Stripe's reference, the amount and when it was refunded, never the card number.

Content you create. Family trees; people in them (names, birth and death dates and places, gender, biography, whether they are living, photos); life events and relationships; diary entries (text and voice); photos, documents and voice recordings; questions and answers in the advice forum; the written versions of voice notes made for you; and your Family Book.

Files you send for tree extraction. When you use tree extraction, we keep the photo, scan or PDF you uploaded and what the AI read from it.

Written versions of voice notes. When you choose to have a voice note written down, we keep the transcript made from it, the short guide or summary where there is one, and any changes you make to them.

Invitations. The email address and role of each person you invite to a tree.

Reports and blocks. When you report something, we keep what you reported, the reason and any note you add, a copy of its text at that moment (so we can review it even if it's deleted), who wrote it and which family it's in. When you block someone, we keep who you blocked and when. Only the Memouring team sees reports. The person you report is never told who reported them, and the person you block isn't told.

Payment information. If you subscribe to Pro, Stripe processes the payment. We keep your Stripe customer ID, card brand and last four digits, and the subscription status. Your full card number stays with Stripe.

Technical and security information. Logs of sign-ins and sensitive actions (such as deleting an account), including IP address and time; when you accepted which version of these terms and this policy, and whether on the website or an app; notifications; and each tree's activity history. The sign-in, sign-up, password-reset and access-code forms run a bot check from Cloudflare (Turnstile), which receives your IP address and technical details about your browser to tell people from automated traffic. When our servers hit an error, an error report is sent to Sentry. It holds technical details only: the error message, the stack trace, and the internal account or record IDs our code logs. It never holds the contents of requests, passwords, or diary or media content.

Information about other people. A family tree naturally includes relatives who don't use Memouring, living or deceased, including children. See section 7.

Sensitive information. We don't ask for it, but family stories can mention religion, racial or ethnic origin, health or sex life if you or your relatives write about them. We use it only to store your content and show it to you and the people who can see the tree.

Photos you add to the gallery, the diary or a profile are visible to everyone with access to the tree. Shortly after upload we remove the file metadata from JPEG, PNG and WebP photos (such as where and when the photo was taken, and the camera), keeping only the picture. HEIC and GIF files are stored as uploaded, metadata included: remove it before uploading if you don't want to share it.

3. How we use it

We don't sell your personal information, we don't use it for advertising, and we don't use tracking cookies or third-party analytics.

4. AI features

Memouring uses third-party AI providers for two features. Each runs only when you choose to use it. None of your other content is sent to AI providers. Dictation, described at the end of this section, uses your web browser's own speech service instead.

Tree extraction reads the names and relationships in a family tree from a photo, scan or PDF you upload. To do that, the file is sent to a third-party AI provider — Anthropic (Claude) or OpenAI, depending on how the service is configured — which processes it under its commercial terms.

Before it is sent, the file is converted to an image, downscaled and stripped of metadata (including the GPS location in phone photos). The image itself, with the names and dates on it, is sent. We keep your original file and the result so you can review and correct it before anything is added to your tree.

Written versions of voice notes. When you record advice or a diary entry, or upload an audio file to the media library, on a tree whose owner has the Pro plan, you can tick "Create a written version with AI". If you do, the recording is sent to OpenAI to write it down word for word, and the resulting text is sent to OpenAI again to write a short guide to it. For a diary entry we only write it down; there is no guide. For an audio file, the second step writes a short summary instead. A long audio file is split into parts on our server before it is sent, and audio files count toward a daily limit of minutes. OpenAI processes both under its commercial terms. The transcript and the guide or summary are shown to everyone who can see the recording; for a private diary entry, that's only you. You can edit them, and they are deleted with the recording. If you leave the box unticked, the recording is not sent. Accounts under 18 don't see this option.

Dictation. When you write a diary entry, you can click "Dictate" and speak instead of typing. Your web browser's own speech recognition turns what you say into text, not Memouring: Chrome sends the audio to Google, Edge to Microsoft and Safari to Apple, under the browser maker's terms. We never receive the audio, only the text you save in the entry. Nothing is heard until you click Dictate, and it stops when you click "Stop dictating" or close the form. It's open to every account, including those under 18, like the dictation on a phone's keyboard. Browsers without speech recognition, such as Firefox, don't offer it.

5. Who we share it with

We share information only with the service providers that help us run Memouring, and only what each one needs:

Inside Memouring, your content is visible to the people you invite to each tree, according to their role. Diary entries marked private are visible only to you.

We may also disclose information when the law requires it, in response to a court order, or to establish or defend legal claims.

6. Where your information is stored

Our providers store and process your information in the United States, as section 5 says. Cloudflare handles your connection at its data center nearest to you, which may be in Brazil if you are; none of the others stores or processes your information in Brazil. If you are in Brazil, the transfers abroad are made with the safeguards required by the LGPD (art. 33), such as standard contractual clauses.

7. Relatives and children

When you add living relatives to a tree, you should have a genuine family connection with them and only share what is appropriate for recording your family's history. Take particular care with information about children: keep it to what is needed and respect what their parents or guardians want.

If you appear in a tree but don't use Memouring, you can ask us to correct or remove your information using the contact in section 1.

People aged 13 and over can create their own account. Those aged 13 to 17 need a parent's or legal guardian's agreement, which we ask for by email and keep as proof until the account is deleted. A parent or legal guardian can also create and manage an account for a child of any age under 18 (see below and our notice on children's accounts). Children under 13 can't sign up by themselves, and we don't knowingly collect information directly from them any other way. No one under 18 can subscribe to Pro, send invitations, use AI tree extraction or have voice notes written down by AI, so nothing a minor uploads or records is sent to the AI providers we work with. Dictation in the diary (section 4) is open to them too: as with a phone keyboard's dictation, their browser sends what they say to its own speech service, not to us.

Child accounts

If you are 13 to 17 and signed up yourself

8. How long we keep it

Content you added to someone else's tree is part of that tree and stays there after you delete your account. Ask the tree's owner or us if you want it removed. Your private diary entries are the exception: only you could see them, so they are deleted wherever they are.

9. Your choices and rights

In Memouring you can:

If you manage a child's account, you can do the same for the child from the Children page: download a copy of their information, see and delete their diary entries, files and advice posts, and delete the account.

For anything else, see our privacy contact page or email [e-mail de contato — a definir / contact email — TBD]. We respond within 15 days.

US residents

Depending on your state (for example California, Colorado, Connecticut, Virginia and others with consumer privacy laws), you may have the right to know what personal information we collect and how we use and disclose it, to access it and get a copy, to correct it, to delete it, and not to be discriminated against for using these rights. We don't sell personal information or share it for cross-context behavioral advertising, and we don't use sensitive personal information to infer characteristics about you, so there is nothing to opt out of.

To make a request, email [e-mail de contato — a definir / contact email — TBD]. We will verify your request by confirming it from the email address on your account. You can use an authorized agent; we may ask the agent for proof of authorization. If we deny your request, you may appeal by replying to our decision.

We don't respond to browser "Do Not Track" signals, because we don't track you across sites.

Residents of Brazil

If you are in Brazil, you have the rights in article 18 of the LGPD, and the Portuguese version of this policy describes them and the legal basis for each use of your data in detail. You can also complain to the Brazilian data protection authority (ANPD).

10. Cookies and local storage

We only use what is needed for the service to work:

We don't use advertising or analytics cookies.

11. Security

We use encrypted connections (HTTPS), per-tree and per-role access control, and restricted internal access to data. No system is perfectly secure. If a security incident could put you at risk, we will tell you and the authorities as the law requires.

12. Changes to this policy

We may update this policy. If a change is material, we'll let you know by email or in the app before it takes effect. The date at the top shows when it was last updated.