Privacy Policy
Last updated: 31 August 2026
This Privacy Policy explains how Memory Bunny ("we", "us", "our") collects, uses, and protects your information when you use our app (the "App").
We are committed to protecting your privacy and being transparent about how your data is used.
1. Information We Collect
We intentionally collect as little personal information as possible.
Information You Provide
When you register and use the App, we collect:
- Email address
- Display name (chosen by you)
We use this information solely to:
- Create and manage your account
- Identify you within the App
- Enable sharing and collaboration features
- Send essential service emails
Content You Upload
When you create or interact with memories, you may upload:
- Photos
- Videos
- Text or other memory components
This content:
- Remains owned by the person who uploaded it - see our Terms & Conditions for how ownership works within a shared Memory
- Is only visible to users with granted access
- Is processed solely to provide App functionality
Photos, videos, and other Memory Content can be personal data - not just about you, but about anyone identifiable in it. The Information Commissioner's Office (ICO) treats photographs as personal data where the person shown is identified or identifiable. If you upload content showing another person, you are responsible for ensuring you have any permission needed to do so, as set out in our Terms & Conditions.
Reports You Submit
If you report content or another user for breaching our Terms & Conditions, or raise a complaint about a decision we've made, we collect:
- Your email address
- The reason for your report
- Any additional free-text details you provide
- Identifiers for the Memory or content concerned
- Information about the user who owns or contributed the reported content, where relevant to investigating your report
We use this information to investigate and respond to reports and complaints, and to enforce our Terms & Conditions.
Automatically Collected Information
We collect limited technical and usage data, such as:
- Device type and browser
- App usage events (e.g. feature interactions)
- Pages or screens viewed
- Error and performance data
This data does not include the content of your memories.
2. How We Use Your Information
We use your information to:
- Provide and operate the App
- Enable memory sharing and collaboration
- Send transactional emails (e.g. invitations, approvals, notifications)
- Improve performance, reliability, and user experience
- Monitor and maintain platform security
- Investigate reports and complaints, and enforce our Terms & Conditions
We do not sell your data or use it for advertising.
3. Artificial Intelligence
Our Terms & Conditions note that we may introduce features that use artificial intelligence or machine learning in the future, for example to help you organise, search, or enhance your Memory Content.
This does not give us a general right to use your photos, videos, or other Memory Content to train AI models. We do not use Memory Content to train AI models, and we do not use AI to analyse or monetise your memories.
If we ever introduce AI processing of Memory Content itself, we will treat that as a separate privacy and product decision - this Policy will be updated to explain what is involved, and additional consent will be obtained where required, before any such feature is introduced.
See our AI Policy for more detail on how we use and don't use AI.
4. Legal Basis for Processing (UK GDPR / GDPR)
We process your data under the following legal bases:
- Contractual necessity – to provide the App and its features
- Legitimate interests – to improve and secure the App, and to investigate reports and complaints
- Consent – for analytics cookies and optional features where required
- Legal obligation – where required by law
5. Sharing Your Information
We only share your data in the following limited circumstances.
Other Users
Your display name and memory content are shared only with users you (or a memory admin) have granted access to.
Service Providers
We use trusted third-party providers to operate the App:
- Resend – email delivery (transactional emails only)
- PostHog – product analytics and usage insights
- Cloudflare – hosting and infrastructure
- Neon – database hosting for account data and memory metadata
These providers process data on our behalf and are required to protect it.
Access to Memory Content by Memory Bunny
We do not routinely access or review Memory Content. Access by authorised personnel is restricted, and only takes place where reasonably necessary to:
- Investigate reported issues or complaints
- Respond to support requests
- Comply with legal obligations
- Protect the security of the App
- Enforce our Terms & Conditions
Where access does take place, it may include user accounts, Memory Content, and audit logs or activity history.
Legal Requirements
We may disclose information if required by law, regulation, or legal process.
6. Cookies & Tracking Technologies
We use cookies and similar technologies to operate and improve the App.
Essential Cookies
Required for:
- Authentication and security
- Session management
- Core app functionality
These cookies cannot be disabled.
Analytics Cookies
We use PostHog to understand how the App is used. These cookies help us:
- Identify popular features
- Improve usability and performance
Analytics cookies are only used with your consent where required.
Managing Cookies
You can:
- Accept or reject analytics cookies via the cookie banner
- Change preferences in the App (where available)
7. Data Retention
We retain different types of data for different periods, as follows.
Account data: we retain your account data (such as your email address and display name) for as long as your account remains active.
Memory Content: we retain Memory Content for as long as it remains part of an active Memory and the relevant account remains open.
Deleted content and backups: when content is deleted (a “Hard Delete” under our Terms & Conditions), it is no longer available to users through the App. We may retain limited copies or associated information for a reasonable period afterwards, where necessary for backups, security, fraud prevention, or legal or regulatory purposes, after which it is permanently removed.
Report records: where you report content or raise a complaint, we may retain records of that report to allow us to handle appeals, demonstrate compliance with our Terms & Conditions, and meet legal obligations.
You may request deletion of your account and associated data, subject to:
- Legal obligations
- Shared memories where other users have rights
and the retention periods set out above.
8. How to Delete Your Account and Data
You can delete your account directly within the App at any time (see our Terms & Conditions). If you no longer have access to the App, you can request deletion of your account and associated data by emailing help@memorybunny.com.
Deleting your account triggers a Hard Delete, as described in our Terms & Conditions, and cannot be reversed. Some data may be retained for a limited period afterwards - see Data Retention above for details.
We aim to action deletion requests within 30 business days.
9. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent (where applicable)
- Request data portability
To exercise your rights, contact us using the details below.
You can also download media you have personally uploaded directly from ‘My Uploads’ in the App, without needing to contact us - see our Terms & Conditions for details.
10. Data Security
We take reasonable technical and organisational measures to protect your data, including:
- Secure hosting infrastructure
- Access controls
- Encrypted connections where appropriate
No system is completely secure, but we work hard to protect your information.
11. International Data Transfers
Some service providers may process data outside the UK or EU.
Where this occurs, we ensure appropriate safeguards are in place.
12. Children's Privacy
The App is not intended for children under 13.
We do not knowingly collect personal data from children under this age.
If we become aware that a child under 13 has created an account or provided personal data without appropriate parental or guardian consent where required by law, we may suspend or delete the account and associated data - see our Terms & Conditions for more detail.
13. Changes to This Policy
We may update this Privacy Policy from time to time.
Material changes will be communicated within the App or by email.
14. Contact Us
If you have any questions about this Privacy Policy or your data, contact us at: help@memorybunny.com.