Membrandt - Privacy Policy

Our Commitment to Your Privacy

At Membrandt, we are deeply committed to protecting your privacy and ensuring the security of your personal memories. This Privacy Policy explains how we collect, use, and safeguard your information. We believe in complete transparency about our data practices.

Core Privacy Principles

No Data Selling

We will never sell, rent, or trade your personal information or memories to third parties.

Your Data, Your Control

You own your memories and data. You can export or delete your information at any time.

Minimal Collection

We only collect information necessary to provide and improve our service.

Secure Storage

Your data is encrypted and stored securely using industry-standard practices.

Information We Collect

1. Account Information

When you create an account, we collect:

Email address (for account access and communication)
Password (encrypted and never stored in plain text)
Display name (optional)

2. Memory Content

The information you choose to store in Membrandt:

Text content of your memories
Images and attachments you upload
Tags and categories you create
Emotional importance ratings
Location data (only if you choose to add it)
Dates and timestamps

3. Usage Information

To improve our service, we collect minimal technical information:

Device type and browser information
IP address (for security purposes)
Login timestamps
Feature usage patterns (aggregated and anonymized)

How We Use Your Information

Primary Uses

Service Delivery: To provide you with access to your memories and all Membrandt features
Account Management: To maintain your account, authenticate your identity, and provide customer support
Service Improvement: To understand how features are used and improve the application (using aggregated, anonymized data)
Security: To protect against unauthorized access, fraud, and abuse
Communication: To send important service updates, security alerts, and respond to your inquiries

What We DON'T Do

We do NOT sell your personal information or memories to anyone
We do NOT share your memories with third parties for marketing purposes
We do NOT use your memory content to train AI models or for any purpose other than providing you with service features
We do NOT track you across other websites or apps

Data Security

We implement industry-standard security measures to protect your information:

Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
Password Security: Passwords are hashed using bcrypt and never stored in plain text
Access Controls: Strict access controls ensure only you can access your memories
Regular Security Audits: We regularly review and update our security practices
Secure Infrastructure: Data is stored on secure servers with regular backups

Your Rights and Control

Access Your Data

You can view all your memories and account information at any time through your dashboard.

Export Your Data

You can request a complete export of your data in a portable format.

Delete Your Data

You can delete individual memories or your entire account at any time. Deletion is permanent and cannot be undone.

Modify Your Information

You can edit or update your account information and memories whenever you wish.

Data Retention

We retain your information only as long as necessary to provide you with our services:

Active Accounts: Your data is retained as long as your account is active
Deleted Accounts: When you delete your account, all personal data and memories are permanently deleted within 30 days
Backups: Deleted data may persist in encrypted backups for up to 90 days for disaster recovery purposes, after which it is permanently removed

Third-Party Services

Membrandt uses minimal third-party services to operate:

Hosting Provider: We use secure hosting services to store and serve your data
Email Service: We use email service providers to send account-related emails
Analytics: We may use privacy-focused analytics to understand aggregated usage patterns (no personal data is shared)

All third-party services are carefully vetted and required to maintain strict data protection standards.

Cookies and Tracking

We use minimal cookies necessary for the application to function:

Essential Cookies: Required for authentication and security
Preference Cookies: To remember your settings (like dark mode)
No Advertising Cookies: We do not use cookies for advertising or cross-site tracking

Children's Privacy

Membrandt is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately, and we will delete it.

International Users

If you are accessing Membrandt from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our service, you consent to this transfer.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any material changes by email or through a prominent notice in the application. Your continued use of Membrandt after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: questions@membrandt.app
Response Time: We aim to respond to all privacy inquiries within 48 hours

Legal Disclaimer

Membrandt is a memory organization tool and is not a medical device or treatment for memory disorders. While we implement strong security measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Privacy Policy