Privacy Policy

Memory Stamp is operated by Ana Carolina Magalhães ("we", "our", or "us"), an individual developer based in Coimbra, Portugal. This Privacy Policy explains what information the Memory Stamp app collects, how it is stored, and how it is used.

Memory Stamp lets you create memory stamps and organize them into volumes (collections). When you create an account and use the app, we collect:

• Your email address and password, handled by our authentication provider, Firebase Authentication (or your Google account details if you choose to sign in with Google)
• The display name you enter when signing up
• Stamps you create — titles, places, dates, categories, and notes you type in
• Photos you choose to add to your stamps or profile
• Volume (collection) information, such as titles and organization of your stamps
• A record of your acceptance of these Terms of Service and this Privacy Policy, including the version accepted and the date

We do not use analytics, advertising, or crash-reporting SDKs, so we do not collect device identifiers, usage analytics, or diagnostic data beyond what is described above.

Your information is used solely to provide the app's functionality:

• To display and sync your stamps and volumes across your devices
• To show your name and profile photo within the app
• To let you sign in with a password or with Google
• To keep a record of your consent to these documents

Your data is stored in two places: locally on your device (so the app works offline), and in our cloud backend (Firebase, using Cloud Firestore and Cloud Storage) so your stamps and volumes stay in sync across devices.

Photos you add are uploaded to a storage bucket associated with your account. Only your account can create, modify, or delete your own stamps, photos, and volumes — this is enforced at the database level (Firestore and Storage Security Rules), not just in the app.

We use the following third-party service providers to operate Memory Stamp. We do not use advertising networks or analytics/tracking SDKs.

• Firebase (Google) — authentication, database (Cloud Firestore), and file storage (Cloud Storage). See Google's Privacy Policy at https://policies.google.com/privacy.
• Google Sign-In — only if you choose to sign in with your Google account, in which case Google processes your sign-in on our behalf.

Memory Stamp only asks for device permissions at the moment you use a feature that needs them — never in advance and never during onboarding. The app does not request location/GPS access; the "place" field on a stamp is text you type in yourself.

• Photo Library — requested only when you tap "Add Photo," so you can choose an existing picture for a stamp or your profile.
• Camera — requested only when you tap "Take Photo," so you can capture a new picture for a stamp.

We do not sell your data, and we do not share it for advertising purposes. Your data is shared only with the service providers listed in "Third-party services" above, to the extent necessary for them to provide authentication, database, and storage functionality on our behalf.

We retain your account data (stamps, volumes, photos, profile information, and consent records) for as long as your account is active, so the app can function and stay in sync across your devices.

When you delete your account (see "Account deletion" below), your stamps, photos, volumes, and account record are deleted immediately upon confirmation — we do not keep a backup copy after deletion, except where we are required to retain limited records by applicable law.

You can permanently delete your account and all associated data at any time.

• Requests can be submitted from within the Memory Stamp app (Settings → Privacy & Legal → Delete Account) or via the web-based request form on this site.
• This action is irreversible: once confirmed, your stamps, photos, volumes, and account record are permanently and immediately removed.

Depending on where you live (including under Brazil's LGPD and the EU/Portugal's GDPR), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these rights directly from within the app:

• View, edit, or delete any stamp or volume
• Change your profile photo and display name
• Review the Terms of Service and Privacy Policy versions you accepted
• Permanently delete your account and all associated data

For any request you can't complete in the app (for example, requesting a copy of your data), contact us through our support form and we will respond within a reasonable time.

Memory Stamp is not directed at children and is not intended for use by anyone under 13 years of age. We do not knowingly collect personal information from anyone under 13. If we become aware that we have collected personal information from a child under this age, we will delete it promptly.

Because we use Firebase (Google Cloud) to run our backend, your information may be stored and processed in countries other than the one you live in, including the United States. Google maintains contractual safeguards (including Standard Contractual Clauses) for these transfers to help protect information processed on our behalf, consistent with GDPR and LGPD requirements.

We rely on Firebase Authentication for sign-in, and Firestore/Storage Security Rules to ensure that only your account can read or write your own stamps, photos, and volumes. Data in transit to and from Firebase is encrypted. That said, no method of storage or transmission over the internet is guaranteed to be 100% secure.

We may update this Privacy Policy from time to time. Material changes will require you to review and re-accept the updated policy before continuing to use the app, and the "last updated" date and version at the top of this page will reflect the change.

We process personal information on the following legal bases: performance of a contract (providing the app's core features to you), and your consent (for example, when you accept these documents). If you are located in the European Union, the United Kingdom, or Brazil, applicable data protection law (GDPR or LGPD) governs how we handle your personal information, in addition to the rights described in "Your rights" above.

As an individual developer rather than a company, we act as the data controller for Memory Stamp. Data protection questions or requests can be directed through our support form.

Questions about this Privacy Policy, or requests relating to your personal information, can be sent through our support form.