Privacy Policy
Last updated: May 17, 2026
Effective date: May 17, 2026
CoreMems ("we," "us," or "our") is operated by Keepsake Studios LLC, a New Hampshire limited liability company. This Privacy Policy explains what information we collect when you use the CoreMems mobile application (the "App") and our website at mycoremems.com (the "Site"), how we use it, and the choices you have.
We built CoreMems to help parents preserve family memories. We treat your memories with the care we would want for our own — and that includes how we handle the data behind them.
1. Who we are and how to reach us
CoreMems is operated by:
Keepsake Studios LLC
221 Main St, Ste N
Nashua, NH 03060
United States
For any privacy question, request, or concern, email us at support@mycoremems.com.
2. Information we collect
We collect only what we need to run the App. We do not sell your data.
Information you provide to us
- Account information. When you sign up, we collect your email address and first name. If you sign in with Apple, we receive an Apple-issued identifier and the name and email you choose to share. If you use Apple's "Hide My Email" feature, we receive a private relay address — we do not see your real email.
- Your memories. This is the heart of the App. Memories may include voice recordings, photos (up to five per memory), text notes, the date of the memory, and any tags you apply. You decide what to capture and what to save.
- Preferences. Your weekly reminder settings (enabled/disabled, day of week, time of day) and similar in-app preferences.
Information collected automatically
- Push notification token. If you enable reminders, we store a device identifier issued by Apple so we can send you the reminder you asked for.
- Usage events. We record lightweight events — for example, when you open the home screen or save a memory — along with timestamps and your account identifier. We use this to understand which parts of the App are working and where people get stuck.
- Device timestamps. Each memory and account record carries a server-side
created_at timestamp.
Information we do not collect
- We do not collect your precise location.
- We do not access your contacts.
- We do not use third-party analytics, advertising, or tracking SDKs.
- We do not run third-party crash reporting tools.
- We do not collect data for advertising of any kind. CoreMems has no ads.
3. How we use your information
We use the information we collect to:
- Provide the App and its core features — capturing memories, playing back voice notes, displaying your timeline, sending the reminders you set.
- Authenticate you and keep your account secure.
- Transcribe your voice notes into text (see Section 5 below).
- Send transactional communications, such as password resets, important service notices, or responses to your support requests.
- Improve the App — understanding usage patterns, identifying bugs, and shaping future features.
- Comply with legal obligations and protect against fraud or abuse.
We do not use your memories — voice recordings, photos, or notes — to train artificial intelligence models, ours or anyone else's.
4. Where your data is stored
Your data is stored on infrastructure operated by Supabase, Inc. in the United States. Data is encrypted in transit (HTTPS/TLS) and at rest (AES-256). Voice recordings and photos are stored in private storage buckets and accessed through time-limited signed URLs. Database access is governed by row-level security, meaning your data is scoped to your account and not accessible to other users.
We do not maintain offices or servers outside the United States.
5. Voice transcription and AI processing
When you record a voice memory, the audio file is sent from our servers to OpenAI for automatic transcription using their Whisper speech-to-text model. The resulting transcript is stored alongside your memory so you can read it back.
We want to be transparent about this because voice recordings are personal:
- OpenAI processes the audio only to return a transcript. Per OpenAI's API data usage policy, API inputs and outputs are not used to train OpenAI's models. You can read OpenAI's policy at https://openai.com/policies/api-data-usage-policies.
- Audio sent to OpenAI is transmitted over encrypted connections.
- We do not send your photos, text notes, account information, or other memory metadata to OpenAI — only the audio file for the specific voice note being transcribed.
- If you delete a memory, the transcript is deleted from our systems. OpenAI's retention is governed by their own policy.
Future versions of CoreMems may use additional AI services (for example, to help you compose stories from your memories). If we add such a feature, we will update this Privacy Policy and clearly explain what is being processed and by whom before you opt in.
6. Third parties we work with
We use a small number of service providers to operate CoreMems. We share data with them only as needed to provide the service.
| Service |
What they do |
What they receive |
| Supabase |
Hosts our database, file storage, authentication, and serverless functions |
All account data, memories, voice files, photos, and analytics events |
| Apple |
Sign in with Apple, push notifications (APNs), and In-App Purchase |
Apple ID identifier, device push token, subscription transaction data |
| OpenAI |
Voice transcription via the Whisper API |
Audio files for voice notes you choose to record |
| RevenueCat |
Subscription management (when subscriptions are active) |
Anonymous subscription identifiers and entitlement status |
| Expo / EAS |
Build and deployment infrastructure for the App |
No user data — used only for compiling and distributing the App |
| Netlify |
Hosting for mycoremems.com |
Standard web server logs (IP, user agent) when you visit the Site |
We do not sell your personal information to anyone. We do not share your information with advertisers or data brokers.
7. Your content belongs to you
You own the memories you create in CoreMems. You retain all rights to your voice recordings, photos, and notes.
By using the App, you grant us a limited, non-exclusive license to store, process, transmit, and display your memories back to you so we can provide the service. This license exists only to operate CoreMems and ends when you delete your content or your account.
We may, in rare cases, view individual memories — for example, if you contact support with a specific question, or if we need to investigate a technical bug. We do not browse user content for any other purpose, and we do not share it with third parties beyond the service providers listed in Section 6.
8. Your privacy choices and rights
You have control over your data.
- Access and edit. You can view and edit your memories at any time inside the App.
- Delete individual memories. You can delete any memory from the App. When you do, the memory and its associated files (audio and photos) are removed from our active systems.
- Delete your account. You can delete your entire account from the Profile screen inside the App. This permanently removes your account, memory bank, memories, voice recordings, photos, transcripts, and analytics events from our active systems.
- Export your data. A data export feature is planned. In the meantime, you can request a copy of your data by emailing support@mycoremems.com.
- Turn off reminders. You can disable weekly reminders any time from the Reminder Settings screen.
When you delete a memory or your account, the data is removed from our active systems. Encrypted backup copies may persist for up to seven days before being overwritten in the normal course of backup rotation. After that period, the deleted data is no longer recoverable.
State and country-specific rights
We currently operate primarily in the United States, but users in other regions may use CoreMems.
- California residents (CCPA/CPRA). You have the right to know what personal information we have collected, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of your personal information. We do not sell or share personal information in the sense defined by the CCPA. To exercise any of these rights, email support@mycoremems.com.
- European Economic Area, United Kingdom, and Switzerland residents (GDPR/UK GDPR). You have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. The legal basis for our processing is your consent (when you create an account and choose to record memories) and our legitimate interest in operating and improving the App. To exercise any of these rights, email support@mycoremems.com.
- Other jurisdictions. Wherever you are, you can email support@mycoremems.com with any data request, and we will do our best to honor it consistently with applicable law.
We will respond to verifiable requests within 30 days, or sooner where required by law.
9. Children's privacy and content about your family
CoreMems is designed for parents to preserve memories of their family life. Because of this, the App has a specific stance on data about children:
- Users must be 18 or older. CoreMems is not directed at children, and we do not knowingly allow anyone under 18 to create an account.
- Content you record may include your children. As the parent or legal guardian, you are responsible for the content you choose to record and store in CoreMems. By using the App, you represent that you have the right to capture and store any content involving other people, including minors.
- We do not separately collect data from your children. Your children are not users of CoreMems, and we do not knowingly create profiles for them or collect their personal information independently of your account.
If you believe a child under 13 has provided personal information to us directly (for example, by creating an account using a falsified age), please contact us at support@mycoremems.com and we will delete that information promptly.
10. Subscriptions and payments
CoreMems may offer paid subscriptions. All payments are processed through Apple's App Store. We do not receive, store, or have access to your credit card number, bank details, or other payment instruments.
We receive only what Apple shares with us through its in-app purchase system: an anonymous transaction identifier, the subscription product purchased, and the current entitlement status. RevenueCat helps us read and manage this subscription status on our side.
Refunds for subscription purchases are handled by Apple. You can manage your subscription, view your purchase history, or request a refund at any time from your Apple ID account settings.
11. Security
We take reasonable measures to protect your information, including:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of data at rest (AES-256, provided by Supabase)
- Private storage buckets accessed only via time-limited signed URLs
- Row-level security ensuring your data is scoped to your account
- Limited internal access, granted only as needed to operate or support the service
No system is perfectly secure. If we ever become aware of a security incident that affects your personal information, we will notify you as required by applicable law.
12. If we ever wind down the service
CoreMems is a small, independent product, and we want to be honest about that. If we ever stop operating the service, we will:
- Give you reasonable advance notice through the App, by email, or both
- Provide a way to export your memories before the service shuts down
- Delete remaining user data from our systems in line with applicable law
Your memories are important. If we can't keep them safe, we want to make sure you can take them with you.
13. Changes to this policy
We may update this Privacy Policy from time to time as the App evolves or as laws change. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you in the App or by email. Continued use of CoreMems after a change means you accept the updated policy.
Older versions of this Privacy Policy are available on request by emailing support@mycoremems.com.
14. Contact us
For any question about this Privacy Policy or how we handle your information: