Privacy Policy

Who is responsible for your data

GalaxyCrafter AB (org. nr 559467-6677), Erikslustvägen 32B, 217 73 Malmö, Sweden, is the data controller for MemoryCrafter. That means we decide how and why your personal data is used, and we're accountable for it.

You can reach us about anything privacy-related at info@memorycrafter.ai.

What we collect

Account data: your name, email address, and a securely hashed version of your password. We never store your password in readable form.

Your content: the stories you write, the photos and files you upload, and the books you build. We know these are among the most personal things you own — life memories — and we treat them that way.

Technical data: basic logs (like IP address, device type, and timestamps) that we need to keep the service secure and running. We don't build advertising profiles from any of this.

Why we use your data, and on what legal basis

To provide the service you signed up for — storing your stories, powering the editor, printing your book, handling your subscription. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).

To keep MemoryCrafter secure, prevent abuse, and improve how the product works. Legal basis: our legitimate interest in running a safe, functioning service (Art. 6(1)(f)) — always weighed against your rights.

For anything optional beyond that, we ask first. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw anytime.

AI providers

MemoryCrafter's writing help is powered by Anthropic (Claude), and image generation by Google (Gemini). When you use these features, the relevant text or photos are sent to these providers so they can generate a response — that's the only reason.

Both act as our processors under data processing agreements. Your content is not used to train their models or ours, and it isn't kept by them beyond what's needed to provide the feature.

Other companies that help us

A small number of trusted providers process data on our behalf: our hosting provider (which stores the app and your content), our email provider (which sends transactional emails like receipts and password resets), and our print partner (which receives your book file when you order a printed copy).

Payments are handled by Stripe. Your card details go directly to Stripe and never touch our servers; Stripe processes them under its own strict obligations.

All of these providers work under data processing agreements and only on our instructions. We never sell your data — to anyone, ever.

Where your data lives

We store your data in the EU/EEA wherever possible. Some providers, such as our AI providers, may process data outside the EEA.

Whenever data leaves the EEA, we rely on recognized safeguards — such as the European Commission's Standard Contractual Clauses or an adequacy decision — so your data keeps its GDPR-level protection wherever it travels.

How long we keep things

We keep your account data and content for as long as you have an account. When you delete your account, everything is removed immediately.

Copies may live on in our backups for up to 14 days after deletion, and then they're gone too. We may keep a small amount of data longer where the law requires it — for example, invoices for bookkeeping.

Your rights

Under the GDPR, you can ask us to: access the data we hold about you, correct anything inaccurate, erase your data, hand it over in a portable format, restrict how we use it, or object to processing based on legitimate interest. Just email info@memorycrafter.ai and we'll respond promptly, at the latest within one month.

If you feel we've handled your data badly, you have the right to complain to a supervisory authority. Ours is the Swedish Authority for Privacy Protection (IMY, imy.se), but you can also contact the authority in your own country.

Deleting your account yourself

You don't need to ask us to leave. From the security page in your account, you can delete your account yourself — immediately and permanently.

Deletion removes your account, your stories, your photos, and your books. It cannot be undone, so please save or print anything you want to keep first.

Cookies

We use one essential cookie: the session cookie that keeps you signed in. That's it.

No tracking cookies, no analytics cookies, no advertising cookies. If that ever changes, we'll update this policy and ask for your consent where the law requires it.

Children and family photos

MemoryCrafter is not directed at children under 16, and accounts should be created by adults — or by younger teens only with a parent or guardian involved.

That said, MemoryCrafter is a family-memories product: baby books and life stories naturally include photos of children and other family members. Those photos are uploaded by you, the adult account holder, and you're responsible for having the right to share them. We treat such content with the same care and protection as everything else you entrust to us.

Changes to this policy

If we change how we handle your data, we'll update this policy and change the date at the top. For significant changes, we'll tell you directly — by email or in the app — before they take effect.

Contact

For anything about your privacy or your data, write to info@memorycrafter.ai, or by post to GalaxyCrafter AB, Malmö, Sweden. A real person will read it.