Privacy Policy

1. Who We Are

Memarti ("we", "us", "our") is a family art preservation platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service. For questions, contact us at support@memarti.com.

2. Information We Collect

• Account information: your name and email address when you register.
• Content you upload: photos, artwork images, voice notes, and any metadata you provide (titles, dates, tags).
• Children's information: names and artwork associated with children you add to your account. This is entered by you as a parent or guardian.
• Usage data: basic analytics about how you use the app (e.g. features accessed), to help us improve the Service.
• Payment information: billing is handled securely by Stripe. We do not store your full card details.

3. How We Use Your Information

• To provide and operate the Service (storing, displaying, and processing your artwork).
• To manage your account and subscription.
• To send transactional emails (e.g. subscription confirmations, password resets).
• To improve and develop new features based on usage patterns.
• To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Contractual necessity: processing required to provide the Service you have signed up for (e.g. storing your artwork, managing your account).
• Legitimate interests: improving and securing the Service, preventing fraud, and sending service-related communications, where these interests are not overridden by your rights.
• Legal obligation: where we are required to process data to comply with applicable law (e.g. financial record-keeping).
• Consent: for any optional communications or features where we ask for your explicit consent. You may withdraw consent at any time by contacting us at support@memarti.com.

5. Children's Privacy (COPPA & GDPR-K)

Memarti is designed exclusively for use by parents and guardians to preserve and manage their children's artwork. The Service is not directed at children and children are not permitted to create accounts or use the Service directly.

• COPPA (US): We do not knowingly collect personal information directly from children under the age of 13. All child-related data (including names and images of artwork) is provided solely by the verified parent or guardian account holder. If we discover that a child under 13 has directly submitted personal information without verifiable parental consent, we will delete that information immediately. If you believe this has occurred, contact us at support@memarti.com.
• GDPR (EEA/UK): For users in the EEA and UK, we do not knowingly process personal data of children under 16 without verified parental consent. Where child data is entered by a parent or guardian on behalf of a child, the parent or guardian is responsible for ensuring they have the appropriate authority to do so.
• Parental rights: Parents and guardians may request access to, correction of, or deletion of any child-related data stored on their account by contacting us at support@memarti.com.
• No advertising to children: We do not use children's data for advertising, profiling, or any purpose other than providing the Service to the parent or guardian.

6. How We Share Your Information

We do not sell your personal data. We share information only in the following limited circumstances:

• Service providers: trusted third parties that help us operate (e.g. cloud storage, payment processor Stripe, email delivery). They process data only on our instructions and are bound by data processing agreements.
• Family gallery members: artwork and child names you choose to share are visible only to people you explicitly invite to a family gallery.
• Legal compliance: if required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

7. International Data Transfers (GDPR)

Your data may be stored and processed in countries outside the EEA, including the United States. Where we transfer personal data outside the EEA or UK, we ensure adequate protections are in place through mechanisms such as Standard Contractual Clauses (SCCs) or adequacy decisions, as required by GDPR. For details of these safeguards, contact us at support@memarti.com.

8. Data Storage & Security

Your data is stored on secure cloud servers. We implement industry-standard security measures including encrypted connections (HTTPS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure, but we take all reasonable steps to protect your information. In the event of a data breach that affects your rights and freedoms, we will notify you and, where required, the relevant supervisory authority within 72 hours.

9. Data Retention

We retain your data for as long as your account is active or as necessary to provide the Service. If you delete your account, your personal data and uploaded content will be permanently deleted within 30 days, except where we are required to retain it for legal or financial compliance reasons (e.g. billing records may be retained for up to 7 years). You may request earlier deletion by contacting us.

10. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request deletion of your personal data, subject to certain legal exceptions.
• Restriction: request that we limit how we use your data in certain circumstances.
• Objection: object to processing based on legitimate interests or for direct marketing purposes.
• Data portability: receive your data in a structured, machine-readable format.
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Lodging a complaint: if you are in the EEA or UK, you have the right to lodge a complaint with your local data protection authority (e.g. your national DPA or the UK ICO).

To exercise any of these rights, contact us at support@memarti.com. We will respond within 30 days.

11. Cookies & Local Storage

We use essential cookies and local storage to keep you logged in and remember your preferences (e.g. theme, language). We do not use advertising cookies or third-party tracking technologies for marketing purposes. You may disable cookies in your browser settings, but this may affect the functionality of the Service.

12. Third-Party Links

The app may contain links to third-party products (e.g. on the Display and Preserve pages). We are not responsible for the privacy practices of those external sites and encourage you to review their privacy policies before submitting any personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notice at least 30 days before the changes take effect. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

14. Contact Us & Data Controller

Memarti is the data controller for personal data processed through the Service. If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

support@memarti.com

For EEA/UK users: if you are unsatisfied with our response, you may contact your local supervisory authority. A list of EU data protection authorities is available at edpb.europa.eu.