Privacy policy

Who we are

Memoroam (memoroam.app) is run by The Trustee for Schneiders Future Trust, ABN 85 686 321 507, in Australia (“we”, “us”). We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You can reach us at hello@memoroam.app.

What we collect

When you join the beta waitlist

Your email address, and your name and where you’re heading if you tell us.
That you agreed to this policy and to beta emails, and when.
We don’t store your IP address with your waitlist entry.

When you use the app

Account details: name, email address, password (stored only as a secure hash), profile photo if you add one, your timezone and the time you want your evening reminder.
Trips: destinations, dates, plans and activities, chat messages, ideas, polls and votes, shared costs, and the people on each trip.
Posts: the words, photos and short clips you share, with reactions and comments.
Bookings: flight, stay and ticket details and any documents you upload.
Location, only if you give it: place names you type (for example a destination or an activity), and the location stored inside a photo by your camera, if it has one. We remove that location from the photo file itself and keep it with the photo’s details so it can appear on your trip map.
Followers: if you follow a trip, the name and email address given when you were invited or signed up to follow, how often you want updates, your reactions and comments, and when you last opened the trip (the trip’s Organiser can see this).
Notifications: if you turn on push notifications, the subscription your browser gives us so we can send them.
Email events: whether an email to you bounced, was marked as spam or was unsubscribed from, so we stop sending when we should.
Support: what you tell us when you contact us, and a record of any support session you agree to.
Server logs: like most websites, our servers briefly record technical details of requests (such as IP address, browser and time) to keep the service secure and working.

Payments are switched off during the beta. When they are switched on, payments are handled by PayPal; we receive a record of the purchase, never your card details.

How we use it

To run Memoroam: your trips, posts, evening reminders, follower updates and the trip book.
To send the emails you expect: waitlist confirmation and invites, sign-in and security emails, reminders and updates you have chosen.
To keep the service secure, fix problems and prevent abuse.
To ask for and act on your feedback during the beta.

We don’t sell personal information, rent it out, or use it for advertising.

The people on your trip see what you share with the trip. Group-only posts and private photos and bookings stay with the group or with you, as you set them.
Followers see the posts and photos meant for followers, and the plan if the trip allows it. They never see the planning chat or bookings.
A travel agency, if your trip was set up by one, can see the trip details it needs to help the Organiser. Agencies are never trip members and can’t see chat, posts, photos or costs.
Our team can see account and trip details when needed to run the service. Looking inside your account to help you needs your consent (for one or 24 hours), except in an emergency, which we tell you about by email straight away. Every such action is logged.
Service providers listed below, only to do their job for us.
Authorities, if the law requires it.

Services we use

DigitalOcean hosts our servers and database, and stores photos and clips (DigitalOcean Spaces, in its San Francisco data centre, sfo3).
Twilio SendGrid sends our emails.
Your browser’s push service (from Google, Mozilla or Apple, depending on your browser) delivers push notifications.
OpenStreetMap: the trip map loads map images from OpenStreetMap, and place names are turned into map positions through its Nominatim service. No account details are sent.
PayPal, once payments are switched on.

Where it is stored

Some providers store or process information outside Australia, mainly in the United States (photos and clips are stored in San Francisco). We choose providers with strong security and privacy commitments, and take reasonable steps so they handle your information consistently with the Australian Privacy Principles.

How long we keep it

Your account and trips stay until you delete them.
Deleting a trip removes its photos, clips and booking files.
Deleting your account removes your account, your posts, photos, clips, comments and reactions, your private bookings and your place on each trip. Chat messages, ideas and polls stay, without your name, so the group’s plans still make sense, and bookings you shared with the group stay with it. A trip you organised that has other people on it passes to one of them, so their memories aren’t lost; one with nobody else on it is deleted. Records of payments are kept, without the trip, where tax law requires.
Evening reminder links stop working after 7 days.
Waitlist entries are kept while the beta runs, so we know who we’ve invited. Ask us and we’ll remove yours.
Copies in backups disappear as the backups are replaced.

Your choices and rights

Download your data: your profile in the app gives you a zip of everything you’ve shared.
Delete your account: also from your profile.
Emails: every optional email (evening reminders, follower updates, recaps, “a year ago today”, beta news) has a one-click unsubscribe link, and your settings let you turn them off.
Access and correction: you can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing hello@memoroam.app.

Security

Connections use HTTPS. Passwords are stored as secure hashes. Photos and clips are stored privately and shown through short-lived links. Evening reminder links are stored only as a fingerprint, and staff access needs two-factor sign-in. No system is perfectly secure; if a breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the law requires.

Cookies and tracking

This site sets no cookies and uses no analytics or advertising trackers. The app keeps your sign-in in your browser’s local storage so you stay signed in; it is removed when you sign out.

Children

Memoroam accounts are for people aged 13 and over. A parent can invite their own child under 13 to a trip; the parent agrees on the child’s behalf and, with any partners they choose, controls what the child shares. The parent gives us the child’s name, age and the email address they sign in with (a family address is fine). The child’s posts stay with the trip’s group unless their parent or one of those partners shares one with followers, and only they can change the child’s age or prayer times. Younger children can also come on a family trip without an account. Children can appear in a family’s posts and photos; please think about what you share about them and who follows the trip.

Changes

We will update this policy as Memoroam changes, and change the date at the top. If a change matters, we will tell you by email or in the app before it takes effect.

Questions and complaints

Email hello@memoroam.app. We aim to reply within 30 days. If you’re not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.