Privacy Policy

My Memory Mailbox (“My Memory Mailbox,” “we,” “us,” or “our”) helps parents capture memories about their children through gentle weekly prompts, and turns those memories into keepsake books and gifts. This Privacy Policy explains what we collect, how we use and protect it, how long we keep it, and the choices and rights you have.

Because our service is built around memories of children — written by the parent, not the child — we treat that information with particular care. Please read this policy closely.

Who holds the account

The account holder is the parent or guardian. The parent is the author of every memory and the owner of the account. Children do not create accounts, do not log in, and are not asked to provide information to us directly. The service is not directed to children, and children are not our users.

Information we collect

• Account and contact details you provide — such as your name, email address, and, if you opt in to text prompts, your mobile phone number.
• Memory content you choose to share in reply to a prompt. Because you write about your child, this content can include personal information about a minor — for example a first name, an age or milestone, a photo, or a story. What you include is always your choice.
• Order and fulfillment details if you purchase a printed keepsake, such as a shipping address and the information needed to process payment (payment card data is handled by our payment processor, not stored by us).
• Basic technical and usage information needed to operate and secure the service, such as log data and device information. We do not embed third-party advertising or behavioral-tracking analytics that ingest the content of your memories.

How we protect your information

• Memory content and personal information are encrypted in transit (TLS) and encrypted at rest.
• Access to memory content is limited to what is needed to operate the service and produce your keepsakes.
• We do not allow third-party analytics tools to ingest the content of your entries.
• We do not use the content of your memories to train machine-learning or AI models, and we do not use your content for advertising or marketing, without your separate, explicit opt-in.

How we use your information

We use the information above to:

• Send you the prompts you signed up for, by text and/or email.
• Store and organize the memories you reply with, so you can revisit and export them.
• Produce, print, and ship the keepsake books and gifts you order.
• Provide support, keep the service secure, and meet our legal obligations.

Sharing and subprocessors

We do not sell your personal information or the content of your memories. We share information only with service providers (“subprocessors”) that help us run the service — for example messaging, email delivery, hosting, payment processing, and print fulfillment — and only as needed to perform those functions on our behalf under contract.

A current list of our subprocessors is available on request, and we maintain data processing agreements (DPAs) with subprocessors that handle personal information. To request the list, contact us using the details below.

Retention, cancellation, and deletion

We keep your information only as long as needed for the purposes above, subject to the following:

• If you cancel: prompts stop immediately. Your memories are retained in a read-only state for 12 months so you don’t lose them, and you can export them at any time during that window. We never delete your content for a failed payment alone.
• After 12 months of inactivity: before any deletion, we send three reminders over a 60-day period to the contact details on file. If the account remains inactive after those reminders, the data is deleted.
• If you ask us to delete your data: we delete it within 30 days of your request, including from our backups on their next rotation cycle.

Export your memories

Your memories are yours. You can request an export of your content at any time — while active, or during the read-only retention window after cancellation.

Your privacy rights (GDPR / CCPA and similar laws)

Depending on where you live, you may have rights to access, correct, export (data portability), and delete your personal information, to object to or restrict certain processing, and to withdraw consent. Specifically:

• Access & export — request a copy of your personal information and memories in a portable format.
• Deletion — request deletion as described above.
• Correction — ask us to fix inaccurate information.
• Opt-out — we do not sell personal information; you may withdraw any optional consents (such as marketing or model-training opt-ins) at any time.
• Subprocessor list & DPAs — available on request.

To exercise any of these rights, contact us using the details below. We will verify your request and respond within the timeframes required by applicable law.

Children’s information (COPPA note)

The service is intended for parents and guardians, not for children. Children do not use the service directly. Because memories are written by the parent and may describe a child, we handle that content with heightened care and limit its use to operating the service and producing your keepsakes. If you believe a child has provided information to us directly, contact us and we will address it.

Changes to this policy

We may update this policy as the service evolves. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

Contact us

Questions about privacy, or want to exercise a right above? Contact us at [email protected].

Note: this contact address is a placeholder pending confirmation of the client’s monitored support inbox and mailing address.