Privacy policy
Last updated 7 October 2026
Legacy: Memory Maker is a private family archive. You use it to keep photos, videos, voice recordings and stories about the people you love. This policy explains what we store, why, who else handles it, and what you can do about it.
What we store
- Your account: your email address, an optional display name, and a password hash. We never store your password itself.
- What you add: the people, memories, stories, photos, videos, recordings, families, events and tags you create, and the details you give them, such as dates, places and captions.
- Sign-in sessions: a record of each device you sign in on, so you can stay signed in and sign a device out.
- Server logs: our hosting provider keeps routine request logs, such as IP addresses and times, to run and secure the service.
We do not use analytics or advertising trackers. We do not build a profile of you.
How we use it
Only to run Legacy for you: to keep your archive in sync between your phone and the web, to let you search it, to back it up, and to email you about your account, such as when you reset your password. We never sell your data, never show advertising, and never use what is in your memories to target anything.
How it is protected
- On your phone: the database is encrypted, and your photos, videos and recordings are encrypted when stored. The keys stay in your phone's secure key storage.
- In transit: everything travels over encrypted connections (TLS).
- On our servers: the text you write is encrypted in the database, including names, titles, descriptions, stories, captions and places. Media files are kept in private storage that is encrypted at rest. Daily backups are encrypted with a separate key.
To be clear about what this means: Legacy is not end-to-end encrypted. Our servers hold the keys, because they need to read your archive to sync it, search it and back it up. Access is limited to running the service.
Who else handles your data
- Render hosts our servers and database.
- Cloudflare stores media files and backups (R2).
- Resend sends account emails.
Each of them processes data only to provide its service to us.
Your choices
- Export: you can export everything, originals included, on every plan.
- Delete: you can delete individual memories, or your whole account, in Settings. Deleting your account removes your data from our live systems. Copies in encrypted backups expire as the backups are rotated.
- Correct: you can edit anything you have added at any time.
Children
Legacy is for adults keeping memories of their families, including their children. Accounts are not intended for children under 13, and we do not knowingly collect information from them.
Changes
If this policy changes in a way that matters, we will tell you in the app or by email before the change takes effect.
Contact
See the support page.