Privacy policy
Memory Tin, the iPhone app, and memorytin.app, this website. Last updated 30 July 2026.
The one line that matters: your photos never leave your iPhone. Memory Tin has no account system, no upload, and no server that could receive an image even if we asked it to.
The short version
- No sign-up, no account, no password.
- No photo, thumbnail, or filename is ever transmitted off your device.
- The app counts anonymous product events (“a chapter was finished”) so we know which parts work.
- This website sets no advertising cookies and loads analytics only after you agree.
- If you email support, we obviously have your email address until the conversation is done.
Your photos
Memory Tin asks iOS for access to your photo library so it can show your photos in date order and, when you empty the tin, delete the ones you chose. Everything it does with them — building chapters, counting sizes, grouping screenshots, making your Year in Photos card — happens locally on the device.
We do not receive your photos, we cannot see them, and there is no “anonymised” copy sitting somewhere. The delete itself is performed by iOS, which moves the photos to Recently Deleted, where they remain for 30 days under your control.
What the app collects
| Data | Why | Linked to you? |
|---|---|---|
| Product interaction events (screens opened, chapter finished, purchase started) | To see which parts of the app help and which confuse | No. Grouped by a random device identifier, never by name or email. |
| Crash and performance diagnostics | To fix crashes | No. |
| Purchase status (which plan, if any, is active) | To unlock what you paid for and restore it on a new phone | Pseudonymous. Apple handles the payment; we never see card details. |
| Email address and message, if you contact support | To reply to you | Yes, until the conversation is closed. |
The app is built so that photo-identifying information cannot be attached to an analytics event; that rule is enforced in the code, not just in this document. We do not use advertising identifiers, we do not track you across other apps or websites, and we do not sell or share data with data brokers.
What this website collects
- No analytics until you agree. The PostHog script is only fetched after you choose “That's fine”. Choosing “No thanks” means it is never loaded and nothing is sent.
- Three things are written to your browser's local storage before any choice, because the page cannot work without them: your consent answer itself, whether you dismissed the install bar, and any campaign parameters (utm_source and friends) that were in the link you arrived on. They are read by this site only, never sent anywhere unless you enable analytics, and clearing site data removes them. We set no cookies at all.
- Server logs. Our host, Cloudflare, keeps standard request logs (IP address, user agent, path) for security and abuse prevention.
- The contact form. If you write to us, we store exactly what you typed, so we can reply. There is no mailing list on this site and no sign-up.
Who processes what
| Service | Role | Where |
|---|---|---|
| Apple (App Store) | Distribution, payments, subscription management | Global, per Apple's terms |
| RevenueCat | Tells the app which plan is active | United States |
| PostHog | Anonymous product analytics for app and website | European Union |
| Cloudflare | Hosting and delivery of this website | Global edge network |
| Our support desk | Handling support conversations you start | European Union |
Legal basis and retention
Under the GDPR, we rely on legitimate interest for anonymous product analytics in the app and for security logging, on contract for delivering the app and your purchases, and on consent for website analytics. Support conversations are kept for up to 24 months. Analytics events are retained for up to 12 months, and server logs follow Cloudflare's own short retention. We do not run a mailing list.
Your rights
You can ask us for a copy of anything we hold about you, ask us to correct or erase it, object to processing, or withdraw consent at any time — the analytics choice on this site can be reopened from the footer. Because the app has no account, in practice the only data tied to a person is a support conversation. Write to support@peidusproducts.com and we will answer within 30 days. You also have the right to complain to your national data protection authority.
Children
Memory Tin is not aimed at children and does not knowingly collect data from anyone under 13. There is no account to create and no social feature in the app.
Changes
If this policy changes in a way that affects you, we will update the date at the top and note the change in the app's release notes. Older versions are available on request.
Contact
Peidus Products OÜ, Estonia
support@peidusproducts.com