Privacy Notice

1. Who we are

Memories for Keepsake is operated by Uncapp BV, a company registered in the Netherlands. Uncapp BV is the data controller responsible for your personal data when you use the Service. You can contact us at support@memoriesforkeepsake.com.

2. Personal data we collect

We collect: account data (email, display name, password hash, avatar); content data (photos, videos, captions, comments you upload); memorial metadata (titles, dates, member roles, invites you send); usage and technical data (IP address, device and browser type, log timestamps, error reports); and support correspondence you send us.

3. Why we use it and the legal basis

We process the data above to: (a) provide the Service — create your account, host memorials and media, deliver invites and notifications (legal basis: performance of our contract with you); (b) keep the Service secure and prevent abuse — fraud, spam, copyright and policy enforcement (legitimate interest); (c) comply with legal obligations — accounting records, lawful requests (legal obligation); (d) communicate with you about service changes and support (contract / legitimate interest); (e) optional product analytics and marketing only with your consent where required.

4. Sharing your data

We share personal data only with the following categories of recipients, and only as needed:

• Payment processing — Paddle.com Market Limited acts as the Merchant of Record for all paid transactions, and processes payment, billing, tax and refund data on our behalf. • Hosting and infrastructure subprocessors that store the database, files and serve the application. • Email delivery providers for transactional notifications. • Professional advisers (legal, accounting) where strictly necessary. • Public authorities where we are required to do so by law.

We never sell your personal data or the memorial content you upload.

5. International transfers

Some of our subprocessors may process data outside the European Economic Area. When this happens we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision recognised by the European Commission.

6. How long we keep your data

We keep memorial content for as long as the memorial is active on its chosen plan (one-time plans include 10 years of hosting). When you delete a memorial or account, we remove personal data and media within 30 days, except where we are legally required to retain certain records (for example, invoicing data) for longer.

7. Your rights

If you are located in the EU/EEA or UK, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. To exercise any of these rights, email support@memoriesforkeepsake.com. We will respond within one month. You also have the right to lodge a complaint with your local data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).

8. Security

We use appropriate technical and organisational measures to protect your data: encrypted transport (HTTPS/TLS), encryption of data at rest in our hosting infrastructure, role-based access control on memorials, signed upload URLs, and access logging. No system is perfectly secure, so we encourage you to use a strong, unique password.

9. Cookies

We use only essential cookies needed to sign you in and keep your session active. We do not run advertising trackers. If we add analytics in the future, we will ask for your consent first where required by law.

10. Changes to this notice

We may update this Privacy Notice from time to time. We will post the new version here with an updated date and, for material changes, notify you by email.