This Privacy Policy explains how Albmemo (the "App") handles your personal information. By using this App, you agree to the terms of this Policy.
The App stores the following information locally on your device. Information transmitted to external services is described in the "Communication with External Services" section.
| Type of Information | Purpose | Storage Location |
|---|---|---|
| Memory records (title, dates, destinations) | Memory management and display | Device (also stored in the cloud while signed in) |
| Event information (title, notes, time) | Recording events within memories | Device (also stored in the cloud while signed in) |
| Photo files and thumbnails | Photo display in memories | Device (while signed in, photos used in scenes or covers and photos added to shared groups are also stored in the cloud) |
| Photo EXIF data (date/time, GPS coordinates) | Auto-filling event date/time and location | Device (also stored as metadata in the cloud while signed in) |
| App settings (theme, display style) | App personalization | Device only |
| Purchase information | Subscription management | App Store / Google Play (external) |
If you use cloud backup or sharing features, the following information is stored on our servers:
| Type of Information | Purpose | Storage Location |
|---|---|---|
| Email address | Account identification and login | Cloudflare D1 (server) |
| Display name | Profile display and member identification in Shared Rooms | Cloudflare D1 (server) |
| Profile image | Profile display and member identification in Shared Rooms | Cloudflare R2 (image) + D1 (URL reference) |
| Authentication tokens (OAuth) | Google / Apple sign-in | Device (SecureStore) + server (session management) |
| User ID | Data association | Cloudflare D1 (server) |
Account registration is optional. If you do not create an account, none of the above information is collected, and all data is stored exclusively on your device.
The App does NOT collect:
When searching for or registering trip destinations, the App sends queries to the following external services:
Only search keywords or coordinates are transmitted to these services. No user-identifying information (account details, device identifiers, etc.) is sent.
The App sends crash and error information to Sentry (Functional Software, Inc.) to improve app stability.
Information that IS sent:
Information we do NOT intentionally send:
However, error diagnostic data may include the type of database operation and error cause. User content itself is not included in diagnostic data by design.
Crash reporting is only active in production builds and is not sent during development. For details, see Sentry's Privacy Policy.
To inform product improvement decisions, the app sends usage statistics to a developer-managed server (Cloudflare D1). No third-party analytics services are used.
Data transmitted:
Data NOT transmitted or stored:
Data carrying the install identifier is merged into anonymous aggregate counts after 90 days, at which point the identifier is deleted. Statistics are only sent in production builds.
When you use the in-app "Send Feedback" feature, the following information is transmitted:
Feedback is submitted anonymously. No personally identifiable information such as email address, user ID, or device identifier is sent. Submitted feedback is not stored on our servers and is immediately forwarded to the development team's internal communication tool (Discord).
Subscription purchases and management are processed through the App Store or Google Play. Subscription status is managed through RevenueCat, Inc. Purchase history and subscription status are sent to RevenueCat. For details, see RevenueCat's Privacy Policy.
When you sign in, your memory records, event information, and the photos used in scenes or covers are also stored in the cloud. Photos not used in any scene or cover are not saved automatically. Photos you add to a shared group are stored in the cloud when you add them. Photos already stored in the cloud are not automatically deleted just because they are no longer used in a scene or cover (you can remove them in "Usage details"). Personal cloud storage capacity is 1 GB on the free plan and 15 GB on the Pro plan. Creating shared groups and editing them together requires the Pro plan. Records you create while not signed in are not saved to the cloud automatically. Data already stored in the cloud is not deleted when you sign out. Cloud-stored data is hosted on Cloudflare servers (records in a database, photo files in storage).
Data stored in the cloud may be processed on the server side for the following purposes:
The following third parties are involved in data processing for the App's services:
Cloud-stored data is retained and deleted according to the following policy:
After account deletion, we retain the following for a limited purpose and period.
While your account exists, we keep identifiers of photos you removed from your personal cloud storage in "Usage details" (a hash value computed from the photo content and the photo ID). This is so that a removed photo does not come back through sync. The photo itself is not kept. When you delete your account, this information is deleted as well.
Cloud-stored data is encrypted both in transit (TLS) and at rest (Cloudflare standard encryption). End-to-end encryption (E2EE) is not used, as server-side data processing is required for planned AI features.
The App provides a "Shared Room" feature that allows you to share trip memories with other users. Data added to a Shared Room can be viewed or edited by the room's members. The scope of sharing is managed by the room owner.
When using Shared Rooms, your display name, profile image, and email address may be visible to other members of the room.
When you report a member of a shared group, we receive the reason and the identifiers of the group and members involved (no free-text input). Reports are recorded on our server, and the operator is notified only that a new report exists, with the received time and report number, by email to a mailbox provided by Google LLC (Gmail). The content of the report is not included in the email; the operator reviews it on our server. Report records on our server are deleted 90 days after receipt, and the operator deletes the notification emails within 90 days of receiving them. Reports are used only to handle the report.
When using cloud features, your data may be stored and processed on servers operated by the third-party processors listed above (all US-based companies). These servers may be located outside your country of residence. By using cloud features, you consent to this cross-border data transfer.
Report notification emails (received time and report number) are received through a mail service provided by Google LLC (USA).
The App imports only photos explicitly selected by the user. During import, EXIF data (date/time, GPS coordinates) is read to assist with event date/time and location input.
EXIF data extracted from photos imported while you are not signed in is used only on the device. While signed in, EXIF data is also stored in the cloud as part of the metadata.
Records you create while not signed in are not saved to the cloud automatically and are stored only on your device (except billing information). When you sign in, data is stored both on your device and in the cloud. Data already stored in the cloud is not deleted when you sign out. See the "Cloud Storage and Processing" section for details.
You can delete your data by:
Data on the device that requested deletion is removed as well. Other devices that were signed in at the time of the request and run a supported app version are signed out and remove their local data the next time they connect to our server. Data may remain on devices you have not used for a long time or that run an older app version; please delete the app on those devices to remove it.
You can check the progress with the request number issued when you apply, while the request is being processed and for 30 days after completion (no sign-in required).
The App does not sell your information to third parties. However, as described in the "Cloud Storage and Processing" section, data processing is delegated to Cloudflare and Anthropic to the extent necessary for providing cloud features. When using the Shared Room feature, shared data can be viewed and edited by room members.
The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
The App implements the following security measures:
To prevent abuse, we use the connecting IP address for request-rate checks (rate limiting). Records older than 120 minutes are deleted every hour, so they are kept for up to about 3 hours. This IP address is not used for analytics or advertising.
This Policy may be updated as necessary. Significant changes will be communicated through the App. Your continued use of the App after changes constitutes acceptance of the updated Policy.
For questions or concerns about this Policy, please contact us at:
Under the Act on the Protection of Personal Information (APPI) of Japan, you have the following rights:
To exercise these rights, please contact us at the email address listed above. We will respond within a reasonable period after verifying your identity.
This Policy shall be governed by and construed in accordance with the laws of Japan.