Privacy Policy — MemoryBridge
Last updated: 27 July 2026
MemoryBridge (the "app") is made by VietCodex. It helps you turn old photos into family stories told in your relative's own voice. This policy explains what we do — and don't do — with your information. It is written in plain English on purpose.
The short version
- Private by default. Your photos, recordings and stories are stored on your device. There is no public feed and nothing is shared until you choose to share it.
- AI features are optional and opt-in. Nothing leaves your device unless you turn an AI feature on and agree to it.
- We never use your content to train AI.
- No ads, and we never sell your data.
- You can export or delete everything at any time (Settings → Export my data / Delete all my data).
1. What we store, and where
Everything you create — photos, voice recordings, transcripts and story text — is kept locally on your device. We do not upload or back it up unless you use an optional AI feature, or you deliberately share a memory with your family circle. Both are described below.
2. Family circle (only if you create or join one)
A family circle is a private group you invite relatives to with a code. It is off until you create one, and nothing is uploaded until you pick a specific memory and share it.
- What is uploaded: only the memories you choose — the photo, the recording, the transcript and story text — plus the display name you type for yourself and your role in the circle (owner / contributor / viewer / helper).
- Where: Google Firebase (Firestore and Cloud Storage), on servers in the European Union. Google acts as our processor.
- Who can see it: only members of your circle. There is no public feed, no search, and no way for another circle to read your data — access is enforced per-circle on the server.
- Sign-in: the app signs you in anonymously. We never ask for your name, email or phone number, and we cannot identify you from the anonymous account id.
- Removing it: un-sharing a memory deletes the photo, recording and text from the cloud. Leaving or deleting a circle removes your access to it.
3. Optional AI features (only when you turn them on)
When you choose to use an AI feature, that specific item is sent over a secure connection to our processing service and on to a third-party AI provider only to perform that task, then deleted.
| Feature | What is sent | Third party | Purpose |
|---|---|---|---|
| Story transcription & cleanup | the voice recording | OpenAI (US) | turn speech into written text |
| Photo restoration | the photo | Replicate (US) | improve colour / sharpness / scratches |
| No-app family recording | the recording your relative makes via a link | OpenAI (US) | transcribe their story |
For each of these: we ask for your explicit consent before the first use and you can withdraw it at any time in Settings; the content is used only to perform the task you asked for; it is never used to train any AI model. Providers retain inputs briefly for abuse monitoring (OpenAI: up to 30 days) and then delete them. Our own service keeps nothing on disk beyond the moment of processing, except no-app recordings, which sit in your family album until you import them.
International transfers (UK/EU users)
The AI providers process data on servers in the United States. Where you are in the UK or EU, that transfer relies on the providers' standard data-protection safeguards (Standard Contractual Clauses / the EU–US Data Privacy Framework).
4. Signing in and cloud backup (optional)
The app works without an account. If you choose to sign in with Google or Apple, we receive your name and email address from them and attach that identity to the anonymous account you already had, so it keeps the same id.
Signing in unlocks cloud backup (a Pro feature). When you press Back up now, a copy of your memories — photos, recordings, transcripts and story text — is uploaded to Google Firebase in the European Union, stored under your own account id, and readable only by you: the security rules refuse every other account, and refuse anonymous accounts entirely. Nothing is uploaded automatically; each backup is something you ask for. Delete all my data deletes the cloud backup as well as the copy on your phone.
5. Crash reports
If the app crashes we receive a crash report through Firebase Crashlytics: the error and stack trace, the app version, and general device information (model, OS version) plus a random installation identifier Google generates. It contains none of your photos, recordings or stories. Crash reporting is only active in the released app, not in development builds.
6. Anonymous usage statistics
To learn which parts of the app are actually used, we record a small number of events — for example "a story was saved", "the memory book was previewed", "the paywall was shown" — together with a random installation id created on your device. That id is not derived from you or your hardware, is not shared with anyone, and Delete all my data throws it away, after which this install cannot be linked to any earlier event. These events carry counts only (such as how many memories you have) — never your photos, recordings, transcripts or story text. They go to our own service in the European Union, not to an advertising network. You can turn this off in Settings at any time.
If you ask us to email you about the printed memory-book service, we store the email address you type for that purpose only, and delete it if the service does not launch.
7. Purchases
MemoryBridge Pro is sold through Google Play. Payment is handled by Google — we never see your card details. We receive only the fact that a purchase is active, so the app can unlock Pro features.
8. Your rights
- Access / portability: Settings → Export my data gives you a ZIP with your photos, recordings, transcripts and a machine-readable
memories.json. - Erasure: Settings → Delete all my data permanently removes everything from your device, deletes your anonymous account and the memories you shared with your family circle, and discards the usage-statistics id. AI providers delete their short-lived copies on their own retention schedule.
- Withdraw consent: toggle any AI feature off in Settings at any time; we stop sending content immediately. Usage statistics have their own switch in the same place.
- Objection / complaint: contact us at the address below, or complain to your national data-protection authority.
The data controller is VietCodex (contact below). We keep your content for as long as you keep the app installed; cloud copies live until you un-share them or delete your data.
9. What we don't do
- We don't sell or rent your data.
- We don't build advertising profiles or show ads.
- We don't create AI voice or face "deepfakes" of people.
- We don't publish your content anywhere public.
10. Children
MemoryBridge is intended for adults preserving family memories. It is not directed at children under 13 (or 16 in parts of the EU) and we do not knowingly collect their data.
11. Changes to this policy
We may update this policy; changes are published here with a new "last updated" date.
12. Contact
Questions or requests: [email protected]