Privacy Policy — MemoryVault Box Cloud

1. Who we are

Pet Poochie Ltd, trading as The MemoryVault Box, is a company registered in England and Wales (company number 14480756), with its registered office at 34 Pinfold Lane, Nottingham, NG9 8DL, United Kingdom.

For any questions about this policy or your data, contact us at info@memoryvaultbox.com.

2. What information we collect

Account information: your email address and password (stored securely, never in plain text) when you create an account, either directly or via Google sign-in.

Photos and content you upload: the images you scan and upload using your MemoryVault Box, along with any details you choose to add — names, dates, locations, and any custom tags you create.

Usage information: basic technical data needed to operate the Service, such as your storage usage against your account's limit.

We do not collect payment information at this time, as MemoryVault Box Cloud is currently free to use.

3. Why we collect it and our legal basis

We process your data to:

• Provide the core Service — storing, organizing, and displaying your photos back to you
• Authenticate your account and keep it secure
• Communicate essential service messages (password resets, account notices)

Our legal basis for this processing (under UK/EU GDPR) is performance of a contract — we need this data to provide the Service you've signed up for — and, where applicable, your consent (for example, if you choose to sign in with Google).

4. Where your data is stored

Your account data and photo metadata are stored using Supabase, hosted in the EU (Ireland). Your photos and thumbnails are stored using Cloudflare R2, a global cloud storage provider. Transactional emails (such as password reset codes) are sent via Resend.

Because some of our service providers operate internationally, your data may be processed outside the UK/EU. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses, as required by data protection law.

5. Who we share your data with

We share data only with the service providers necessary to run MemoryVault Box Cloud:

• Supabase — authentication and database hosting
• Cloudflare — photo and file storage
• Resend — transactional email delivery
• Google — only if you choose to sign in with Google

We do not sell your personal data, and we do not share your photos with any third party for marketing or advertising purposes.

6. How long we keep your data

We retain your account and photos for as long as your account remains active. If you delete a photo or an album, it is permanently removed from our storage. If you delete your account entirely, contact us at info@memoryvaultbox.com and we will delete your account and all associated data within 30 days, except where we're required to retain limited records for legal or accounting reasons.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Request a copy of your data in a portable format
• Object to or restrict certain processing
• Withdraw consent at any time, where processing is based on consent

UK and EU residents can also lodge a complaint with the Information Commissioner's Office (ICO) or their relevant supervisory authority. California residents have additional rights under the CCPA/CPRA, including the right to know what personal information is collected and to request its deletion.

To exercise any of these rights, contact us at info@memoryvaultbox.com.

8. Photos of other people

Many photos you upload will include images of family members and other individuals who are not the account holder. By uploading these photos, you confirm you have the right to do so and that you're using the Service for personal, non-commercial purposes — such as preserving your own family's memories.

9. Children's privacy

MemoryVault Box Cloud is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

10. Security

We use industry-standard measures to protect your data, including encrypted storage, secure authentication, and row-level access controls that ensure only you can access your own account and photos.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you by email or via a notice within the Service.

12. Contact us

info@memoryvaultbox.com
Pet Poochie Ltd, trading as The MemoryVault Box
34 Pinfold Lane, Nottingham, NG9 8DL, United Kingdom