Privacy Policy
Last updated: August 31, 2026
1. Who we are
Memora is operated by Kyrylo Kovalenko, an individual entrepreneur registered in Ukraine ("we", "us"), who is the data controller for the processing described here. This policy covers the Memora mobile app and the website memoraphotos.com. Postal address: 38 Obolonskyi Avenue, Apt. 9, Kyiv 04214, Ukraine. Questions, requests and complaints: support@memoraphotos.com.2. The short version
The app has no accounts: you never give us a name, an email address or a password. Photos are restored in memory on our servers and deleted as soon as the result reaches your device — we keep no copies and never train models on them. Your restored library lives only on your phone. We do not sell personal data. Since version 1.0.1 the app uses an advertising identifier to measure which ads bring people to Memora — on iPhone only if you allow it when asked, and you can switch it off at any time; section 5 explains exactly what that means. The one place where we do ask for an email address is the free web preview on memoraphotos.com, and only because you asked us to send the photo somewhere — section 6.3. Your photos
A photo you choose to restore is sent over an encrypted connection, processed in the memory of our servers, and deleted as soon as the restored copy is delivered to your device. We store no copies, we do not use your photos to train models, and no human reviews them. Restored photos are kept only on your device unless you save or share them yourself, and your original photo is never modified.One honest exception: Bring to life produces a video, and video generation is not instant. The clip is created by our AI provider and stays briefly in that provider's processing queue and on its content delivery network until your device has downloaded it. It is not stored by us and is not kept afterwards.
4. What the app collects
Only what the service needs to work:• an anonymous identifier created on first launch (Firebase Anonymous Authentication) — it is not linked to your identity, we cannot tell who you are from it, and reinstalling the app produces a new one;
• how many free restorations you have used, so the free limit can be applied;
• your subscription status (active, trial, expired) received from the App Store or Google Play through RevenueCat — we never see your card details;
• device integrity signals from Apple App Attest or Google Play Integrity, used solely to block automated abuse of our servers;
• anonymous usage statistics — which screens were opened, whether a restoration succeeded or failed, which mode was used, plus standard technical data such as device model, operating system version and country;
• advertising and device identifiers, and your IP address, used to measure advertising — see section 5, which explains what is collected, when, and how to stop it.
Photos, image data and the names you give your restored photos are never included in statistics or in our logs.
5. Advertising, and what we never collect
We pay to advertise Memora, and we need to know which of those ads actually bring people to the app. Two different things do that.Which campaign an install came from. Apple gives us a one-time token for installs that came from an ad on the App Store, and Google Play tells us the campaign tag of the link an install came through. Neither carries any identifier of you or your device.
Advertising identifiers. We also collect the advertising identifier your device provides (the IDFA on iPhone and iPad, the Google Advertising ID on Android), the identifier your device gives to apps from us, and your IP address. This is what lets an advertising platform connect an ad you saw to an install and a purchase, and it is tracking in the sense Apple's rules use the word. It is used for nothing else: we do not build profiles about you, and Memora shows no ads.
You can say no, and change your mind. On iPhone and iPad we ask first, with the system dialog — decline it and no advertising identifier is collected at all. You can change the answer later in Settings → Privacy & Security → Tracking. On Android there is no system dialog; you can switch the identifier off in Settings → Google → Ads, and the app will have none to collect. Turning it off changes nothing about how Memora works.
In the EEA, the UK and Switzerland the app asks you itself, first. The system dialog is Apple's requirement, not a legal basis, and on Android there is no system dialog at all — so in those countries Memora shows its own question before anything is collected, and nothing is collected unless you allow it there. Declining means the iPhone dialog is never even shown. You can change the answer at any time in the app, under Settings → Advertising → Ad measurement, and changing it to "Not allowed" stops any further collection — though it cannot recall what was already sent.
Who receives it. RevenueCat, Amplitude and Google, as described in section 9, and the advertising platforms we buy from — currently Apple and Google — so they can measure their own campaigns.
What we never collect, before or after this change: no name, no phone number, no contacts, no precise location, no biometric or face recognition data, and no profiles about you. We run no third-party advertising code inside the app, and we do not sell personal data.
6. The free preview on our website
memoraphotos.com lets you restore one photo in the browser before installing the app. There, in addition to the data above, we process: your answers to the short questionnaire; the photo you upload, under the same rule as in the app — restored in memory, not stored; and, if you ask us to send the result to you, your email address and whether you agreed to receive occasional product emails.To deliver a photo by email we generate a full-resolution copy and place it in Google Cloud Storage behind a private link. Those files are deleted automatically after 7 days — that is what the "link is valid for 7 days" note in the email means. Email is delivered through Resend. Product emails are sent only with your consent and every one of them has an unsubscribe link; the delivery email itself is a service message you asked for.
7. If you write to support
We receive your email address and whatever you put in the message, and keep it for as long as we need to answer you and to keep a record of the request. Writing from Settings → Contact us also attaches your app version, platform and anonymous identifier, so we can find what went wrong — you can delete those lines before sending.8. Why we are allowed to process this (GDPR)
Restoring your photos, applying free limits and giving you what you paid for is performance of a contract with you. Blocking abuse of our servers, keeping the service secure and understanding anonymously how the app is used rest on our legitimate interests. Product emails rest on your consent, which you can withdraw at any time by unsubscribing or writing to us.Advertising measurement (section 5) rests on your consent too. In the EEA, the UK and Switzerland you give it in the app itself, on a screen that asks before anything is collected and that treats no answer as a no; you can withdraw it there at any time under Settings → Advertising. Elsewhere the control is the system one — the tracking dialog on iPhone and iPad, the advertising ID setting on Android. If you have not allowed it, no advertising identifier is collected.
9. Who processes data for us
Google (Firebase — authentication, database, cloud functions, hosting, file storage, analytics and App Check), fal.ai (the AI models that restore your photos), RevenueCat (subscription status), Amplitude (product analytics), Apple and Google (payments and refunds, under their own privacy policies), and Resend (email delivery for the website). Each processes data only on our instructions, under a contract. Processing may take place outside your country, including in the United States, with appropriate safeguards in place.Advertising is the exception to that rule. When Apple or Google measure a campaign we have paid for (section 5), they decide for themselves what to do with that data under their own privacy policies — there they are not acting on our instructions, and are not our processors.