1. Who we are

MyLogacy is operated by Jay Emm Systems. In this policy, "we" and "us" mean Jay Emm Systems, and "you" means the person whose account holds the memories. We are the controller of the personal information described here.

The way to reach us about anything on this page is the contact page. If you need a postal address for a written request, ask us there and we will provide one.

2. What we collect

Information you give us when you sign up

• Your email address, which is how you sign in.
• Your name, if you give one.
• A date of birth, if you choose to add one. It is optional and we do not require it.
• If you sign in with Google, Apple or Facebook, the identifier and email address those services return to us.

The memories you add

• Photographs and video.
• Audio recordings, including voice notes and recorded answers.
• Text you write, such as titles, captions, stories and recipes.
• The names and relationships of the people you add to your network, and the email addresses or phone numbers you use to invite them.
• Which circles a memory belongs to, and any correction you make when the software files something in the wrong place.
• The answers you record to the questions MyLogacy asks you over time, which are kept as your own written record and are only ever repeated back to someone else word for word as you wrote them.

Payment and delivery information

• Card details are entered on Stripe's own checkout and are handled by Stripe. We never see or store your card number. We keep a record that a payment happened, what it was for, and Stripe's reference for it.
• When you place a print order we hold the delivery address you give us for as long as the order needs it. It is encrypted in our database with a key held separately from the data itself, and it is passed to the print partner that makes and posts the item.

Information about how you use the service

Our servers keep ordinary operational records: the requests your app makes, the time they were made, error and diagnostic messages, and the network address the request came from. We use these to keep the service working, to find faults, and to stop abuse of the public link pages, where the address is stored only as an irreversible hash rather than as the address itself.

There is no analytics SDK and no crash-reporting SDK in the MyLogacy app, and none on this website. We do not run advertising trackers, we do not build advertising profiles, and we do not sell or share your information for cross-context behavioural advertising.

3. Information inside your files

Photos and videos usually carry hidden details recorded by the camera. We read them, because they are what makes the timeline and the map work:

• The date and time the picture was taken.
• The camera or phone that took it.
• The location, if your camera or phone saved coordinates with the file. This is what places a memory on the map.
• Any caption, keyword or person tag another photo app already wrote into the file. If you export a library from Apple Photos or Google Photos, the names it had attached to faces travel with the files, and we read them.

Coordinates are turned into a readable place name using a mapping service. Only the coordinates are sent for that lookup, never the photograph.

Setting a place on a memory by hand is a separate, deliberate act: you are asked to agree to it, and you choose whether it is recorded to the city or to the exact spot. Coordinates that were already inside the file are read automatically as part of filing it.

You can change or clear the place on any memory, and you can leave a memory off the map. Clearing the place changes what MyLogacy shows and uses; it does not rewrite the original file you uploaded, which we keep exactly as you sent it. If you would rather we never received the coordinates at all, remove them from the files before you upload them, or turn location off in your camera app.

4. Face grouping

Face grouping is off until you enable it in onboarding or Settings. With your permission, MyLogacy looks at the faces in your photos and groups the ones that appear to be the same person, so that you can open a person and see every memory they are in. You name those groups yourself, and you can correct or remove a grouping.

To do this we use Amazon Rekognition, a face analysis service run by Amazon Web Services. It produces a mathematical summary of each face — not a picture, and not something a person can look at — and stores it in a collection that belongs to your account alone and is never combined with anyone else's. That summary is what lets a photo you upload next year be matched to a person you named this year.

The collection is kept for as long as your account exists and is deleted as part of deleting your account. If the deletion cannot be confirmed automatically, the account deletion is held open until a person completes it, rather than being marked done.

Deleting a photograph hides its face groupings and requests removal of its face summaries. If the provider cannot confirm removal, the request remains pending and may need support to complete. Account closure also removes the entire face collection.

Face grouping only ever runs on photographs inside your own account, only for you, and never to identify a stranger, to verify anyone's identity, or for law enforcement. We do not sell, lease, trade or otherwise profit from face data. Depending on where you live, this may be treated as biometric information under laws such as the Illinois Biometric Information Privacy Act, and you may have specific rights over it; see Your rights below, and use the contact page for help. You can turn off new face grouping in Settings at any time. Existing groupings and summaries remain until deleted with the photographs or account. Enabling grouping applies to new processing, not photographs that were previously skipped.

5. AI processing

Your files are processed automatically so the product can work. That includes:

• Suggesting which circles a photo, video or recording belongs to.
• Transcribing audio and video so you can search it and read it back.
• Reading handwriting on a scanned recipe card.
• Writing captions, titles and draft stories you can edit or discard.
• Building the things you ask for, such as a documentary, a podcast episode, a photo book or a reel.
• Answering questions you ask the assistant, using the memories in your own account.

The providers we send content to for this are OpenAI, for writing, image understanding and speech transcription, and Google, for image understanding and for generating an avatar video from a portrait when you ask for one. What is sent is the specific item being worked on and the text around it — the photograph being described, the recording being transcribed — and never your whole account.

We reach these providers through their paid business APIs, whose terms state that content sent that way is not used to train their models. We do not train any model of our own on your memories, and we do not use them to improve a product for anyone else.

6. Voice and likeness

MyLogacy can narrate in a voice trained on recordings you provide, and can build an avatar. Training is off unless you turn it on, and each generation that uses a cloned voice asks you to consent at the time.

Turning training on records a consent: who agreed, which person the voice belongs to, the version of the wording they were shown, when they signed, and the exact recordings used to train it. You can see that record and revoke it. Revoking it deletes the trained voice at the provider, and anything mid-generation is stopped and its output withdrawn rather than finished.

The trained voice is held by ElevenLabs, our voice provider, and is tied to your account. We never move a cloned voice to a different provider, because the consent was given for one. It is kept while your account exists and is deleted at ElevenLabs as part of deleting your account, before your account record is finally removed. As with face data, if that deletion cannot be confirmed the account deletion stays open until a person completes it.

You can also record whether your voice and avatar may be used after your death, and that setting can only be changed while you are living.

Do not train a voice on a recording of somebody who has not agreed to it. Voice and likeness are protected separately from copyright in many places, and the permission you need is yours to obtain.

7. Sharing and public links

Nothing in your account is public by default. Memories reach other people in three ways, and all three start with you:

People you invite

An invited person sees the circles you gave them, and nothing else. You can remove their access.

Scan and Watch pages

A printed keepsake carries a QR code that opens a page for one memory. That page is public. Anyone who has the printed object, or the link, can open it.

Tribute pages

A tribute page is not listed anywhere and is not searchable, but anyone who has the link can open it. Treat the link itself as the key.

We do not sell your memories, we do not share them for advertising, and we do not hand them to anyone except the service providers listed below, who act on our instructions. We may disclose information if the law requires it, or to protect someone's safety.

8. Who processes data for us

We use service providers to run the product. Each one is given only what it needs for its part of the job, is required to use it for that job and nothing else, and is not permitted to keep it afterwards or to use it for its own purposes:

Amazon Web Services

Hosting, file storage, the database, and the Rekognition face grouping described above. Receives everything the service stores.

Amazon Simple Email Service

Sends sign-in codes, invitations and account notices. Receives email addresses and the contents of those messages.

OpenAI

Writing, image understanding and speech transcription. Receives the individual memories being processed.

Google

Image understanding, and avatar video generation when you ask for one. Receives the photograph being processed, and the portrait an avatar is built from.

ElevenLabs

Voice training and narration, when you turn it on. Receives the recordings you supply and the text to be spoken.

Stripe

Payments. Receives your card details directly and the amount being charged. We do not see the card details.

Print partners

RPI Print for books, and Printful for keepsakes such as ornaments, cards and framed prints. Each receives the finished print file and the delivery address for the order it is making.

MapTiler

Turns coordinates into place names and draws the map. Receives coordinates, never photographs.

9. Where your files are kept

Files and account data are stored with Amazon Web Services in the United States, in the US East (N. Virginia) region. Our AI, voice, messaging, payment, mapping and print providers are companies that may process data in the United States and elsewhere, so if you use MyLogacy from outside the United States your information will be transferred there.

10. How we protect it

• Everything travels over an encrypted connection, and files and database contents are encrypted where they are stored.
• Your files are never served from a public bucket. Every image, video and recording is reached through a short-lived signed link issued for that request and that viewer.
• Sign-in codes, account recovery secrets and public link tokens are stored only as irreversible hashes, under keys that can be rotated without touching the data. A sign-in code expires after ten minutes and after five wrong attempts. Print delivery addresses are encrypted with a separate key.
• Access to production data is limited to the small number of people who need it to run the service, and administrative actions are logged.
• No system is perfectly secure. If a breach affects your information we will notify you and the relevant regulators as the law requires.

11. Keeping, exporting and deleting

How long we keep your memories

We keep your memories for as long as your account is open, because that is the point of the product. We do not delete an account for being quiet, and we do not put an expiry date on a family archive. If we ever needed to change that, we would tell you first and give you time to take an export.

Deleting one memory

A memory you delete disappears from your account straight away and stops being reachable, including through any link. The underlying files are then held for 30 days and permanently destroyed, which is the window in which we can undo a deletion you did not mean to make.

Getting a copy of everything

You can create a portable archive of your account from your settings. It contains your account details, your memory information as JSON and CSV, your circles, and the original files where they are available. The download link is short lived, and the archive itself is deleted 24 hours after it is prepared, so a stale link cannot be used later.

Deleting your account

When you delete your account, access is revoked immediately and your private files, your face collection and any trained voice are permanently removed. If our automatic cleanup cannot confirm that every external item was removed, the deletion is held open and our support team completes it by hand rather than reporting a deletion that did not finish.

One thing to know before you delete

Keepsake links stay playable for one year after an account is deleted, so that a photo book or an ornament already in someone's hands does not stop working the day the account closes. Only the single memory printed on that object stays reachable. If you need a keepsake link switched off sooner, ask us and we will revoke it.

What outlives a deletion

• Encrypted backups roll forward continuously, so deleted content can persist in a backup for a limited period after it disappears from the service, until that backup is overwritten in the ordinary cycle. Backups exist to recover the service after a failure and are never used to restore an individual deleted account.
• Records we are required to keep, such as payment and tax records for an order you placed, are kept for as long as the law requires.
• Ordinary server and security logs age out on a short rolling window.
• An invitation you sent leaves a record in the recipient's own account, because it is their data as much as yours.
• A memorial account is not a deleted account. When a passing is reported and the 30 day grace period has run, the account becomes read only in the care of the heir you named, and its contents are kept.

12. Children

MyLogacy is made for adults, and an account is for an adult. We do not knowingly collect personal information directly from a child, and we do not offer accounts to children.

Photographs and video of children are an ordinary part of a family archive, and they are added by the adult who holds the account. That adult is responsible for having the right to add them. A child may be shown a shared circle by their parent or guardian, on the account holder's device or through an invitation the parent or guardian controls.

If you believe a child has created an account, or that a child's information has reached us in a way it should not have, tell us through the contact page and we will remove it.

13. Your rights

You can see, correct, export and delete your memories from inside the app at any time, and those controls are the fastest route for all of it.

Whatever else the law where you live gives you, we will honour:

• Access. A copy of what we hold about you, through the export in your settings or on request.
• Correction. Fix anything that is wrong, in the app or by asking us.
• Deletion. Delete individual memories, or the whole account.
• Portability. The export is a machine-readable archive you can take elsewhere.
• Objection and restriction. Ask us to stop a particular kind of processing, including face grouping or AI enrichment, without closing your account.
• Withdrawing consent. Turn off voice training, or withdraw a post-mortem permission, at any time while you are living.
• Non-discrimination. Exercising any of these does not get you a worse service or a worse price.

Write to us through the contact page and we will respond within the time the applicable law allows, and in any case without undue delay. If we cannot do what you asked, we will tell you why, and you can appeal by replying to that answer. You can also complain to your data protection authority or state Attorney General.

14. Changes to this policy

When this policy changes we post the new version on this page and change the date at the top. If a change materially affects how we handle what is already in your account, we will tell account holders by email before it takes effect and give you the chance to export or delete first.

15. How to reach us

Privacy questions and requests go to Jay Emm Systems, and a person reads them. The routes are on the contact page, which is also where to ask for a postal address if your request has to be made in writing.