Privacy Policy

oMemories is designed with your privacy as a top priority. Your memories are encrypted on your device and are visible only to you and the people you share them with. In normal operation, oMemories does not access your content.

The exception is content that is reported: to keep the platform safe and comply with the law, reported content may be decrypted and reviewed by our moderation team where we hold or can recover the key. This is explained in detail below.

Your content is encrypted on your device before upload, using keys held on your device. We store account metadata (such as your phone number and name) on Google's Firebase platform.

• Your photos and videos
• Your text contributions and captions
• Your voice notes
• Memory titles
• Your encryption private key

• Your phone number and display name
• Memory participant lists and timestamps
• Storage usage and file sizes
• Push notification tokens

• All data transmission uses TLS/SSL encryption
• Account metadata is encrypted at rest on Google's servers
• We never sell or share your data with advertisers or third parties

• Delete your account and all data anytime
• Export a copy of your memories from within the app
• Report privacy concerns to bomayed@gmail.com

Your content is protected using strong encryption:

• Algorithm: AES-256-GCM (Advanced Encryption Standard with 256-bit keys)
• All content is encrypted on your device before upload
• Photos, videos, text, voice notes, and titles are all encrypted
• Only participants with the decryption key can read the content
• Our servers store encrypted data, not plaintext

Each memory has its own unique encryption key, providing isolation between your memories.

With Advanced Protection, your key never leaves your device and oMemories cannot decrypt that memory's content. With Standard Protection, an encrypted backup of your key is stored on our servers so you can switch devices — which means we are technically able to access that key. Reported content may be decrypted for moderation only where we hold or can recover the key.

Your encryption keys are generated and stored on your device:

• A unique key pair is generated on your device when you create your account
• Your private key never leaves your device
• Your public key is shared so others can encrypt content for you
• Memory keys are exchanged securely between participants
• Each memory has its own unique encryption key

• You can create a PIN-protected backup of your encryption key
• This lets you recover your key on a new device
• Without a backup, switching devices means losing access to encrypted content
• We cannot recover your key for you — only your PIN backup can. Your PIN is rate-limited but your backup is never destroyed.

• Only you and your chosen participants can read your content during normal use
• With Advanced Protection, oMemories cannot decrypt your content
• Your content is stored encrypted, not as plaintext

• Reported content may be decrypted and reviewed by our moderation team where we hold or can recover the key
• We cannot recover your data if you lose your key without a backup

oMemories can use Face ID, Touch ID, or your device passcode for exactly one purpose: unlocking memories you have chosen to hide.

• Authentication happens entirely on your device, performed by Apple's Face ID / Touch ID system
• The app only receives a simple yes/no answer — "authenticated" or "not authenticated"
• We never see, collect, store, or transmit your face data, fingerprints, or any other biometric information
• Your biometric data never leaves your device and is never sent to our servers — we could not access it even if we wanted to
• This is entirely optional: if you never hide a memory, Face ID is never requested

You can stop using this feature at any time by unhiding your memories, or by turning off Face ID access for oMemories in your device Settings.

Access to your content is limited by encryption:

You (the memory owner) — Full access to all your memories and their content. Decryption happens on your device using your private key.

Invited collaborators — Only memories you explicitly share with them. They receive the memory's encryption key when they join, and access can be revoked at any time.

oMemories staff — Do not browse or read your content in normal operation. Staff can see account metadata (names, participant lists, timestamps). When content is reported, our moderation team may decrypt and review that specific content. With Advanced Protection, we do not hold the key and cannot decrypt that memory's content, even for moderation.

Our servers store content as encrypted data, not plaintext.

When you join or share a memory, the following information is visible to other participants:

• Your display name (first name, last name)
• Your nickname/username (if set)
• Your phone number
• Your profile photo (if set)

• Text, photos, and videos you add to shared memories
• Timestamps of when you contributed
• Your reactions and comments

You can control some of this visibility through your profile settings.

To comply with app store requirements and maintain a safe platform:

• Users can report content that violates our Community Guidelines
• When content is reported, the reporter provides context about the violation
• Our Trust & Safety team reviews reports and takes appropriate action
• We may remove content or suspend accounts based on reports
• All moderation actions are logged for accountability
• We are required by law to report certain illegal content (such as child sexual abuse material) to the authorities

This is necessary because Apple requires apps to act on objectionable-content reports within 24 hours, because we must be able to remove illegal content, and because we must protect users from harassment and abuse.

oMemories offers optional AI features — text enhancement and memory summaries — powered by Google's Gemini AI.

• These features are opt-in. The first time you use one, we ask for your consent.
• When you use an AI feature, only the specific text you choose to process is sent to Google's Gemini AI to generate a result.
• We do not send your photos, videos, voice notes, or any content you have not chosen to process.
• Generated results are stored in your memory like any other content (encrypted).
• Please don't include anything you wouldn't want shared with Google in text you process with AI.

If you never use the AI features, no content is ever sent to Google's AI. Your use of these features is also subject to Google's terms and privacy policy.

Your photos and videos are encrypted:

• Encryption: Files are encrypted on your device before upload
• Storage: Encrypted files are stored in Firebase Cloud Storage (private buckets)
• Decryption: Only participants with the memory key can decrypt and view files
• Transmission: Always over HTTPS/TLS encrypted connections
• URLs: Signed and time-limited; never publicly accessible
• oMemories does not view your photos or videos in normal operation; reported media may be decrypted for moderation

• When you upload photos, the app may detect GPS coordinates from the photo's metadata
• You are shown a suggestion and can choose to accept or decline saving the location
• If you accept, the country and city names are stored with your photo for organization; precise coordinates are encrypted
• You can edit or delete location data at any time from the photo details
• Location data is only visible to you and invited collaborators

We collect only what's necessary for the app to function:

• Phone number (for login and verification — phone number is the only way to sign in)
• Display name (shown to collaborators)
• Profile photo (optional, shown to collaborators)
• Date of birth (used to confirm you meet the minimum age)

• Memory counts and statistics
• Timestamps (for sorting and display)
• Device tokens for push notifications
• Aggregated app-usage analytics (Firebase Analytics) — screen views and feature usage, not your content
• Crash reports (Firebase Crashlytics) — technical diagnostics when the app crashes, not your content

• Photo location data (GPS coordinates, country, city) — only if you accept the suggestion

• Contact lists
• Device identifiers for advertising
• Browsing history
• Precise location tracking

Push notifications are used to inform you about:

• New invitations to shared memories
• Activity in memories you participate in
• Important account updates

So notifications are useful at a glance, they may include the memory's title and the type of activity (for example, “3 new photos”). The encrypted content itself — your photos, videos, text, and voice notes — is never included in a push payload.

If you choose to set up a legacy plan, you designate one trusted contact who can receive access to the memories you own after a period of inactivity that you choose (90, 180, or 365 days):

• Your contact must accept the designation; you can revoke it at any time
• Your memory keys are encrypted for your contact's key in advance, but remain sealed and unreadable to them
• If you are inactive past your chosen period, we send you repeated warnings over several weeks; any activity cancels the process
• Only if the warnings go unanswered is access released to your contact

If you never set up a legacy plan, none of this applies and no keys are prepared for anyone.

You have full control over your data:

• Delete individual memories at any time
• Delete your account to remove all your data
• Leave shared memories to remove your access

When you delete your account, you choose (in Privacy Settings) what happens to content you added to shared memories:

• “Preserve shared content” (default): your contributions remain in shared memories for the other participants, with your identity anonymized
• “Remove all my content”: your contributions are removed from shared memories too

Your data is stored in secure Google Cloud data centers. Data may be stored in multiple regions for reliability, but is always protected by Google's infrastructure security, encrypted at rest, and transmitted only over encrypted connections.

oMemories is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or via email. Continued use of the app after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, reach us below. We respond to all privacy inquiries within 30 days.