Mems / Legal
Privacy policy
Mems turns photos you choose into physical prints. This policy explains the information used to provide that service and the controls available to you.
1. Who this policy covers
This policy applies to the Mems mobile app, its support service and related ordering systems (together, the “Service”). In this policy, “Mems”, “we”, “us” and “our” mean the operator of the Mems Service. Questions and privacy requests can be sent to [email protected].
2. Information we process
- Account information: your account identifier, email address, name if supplied, authentication status and sign-in provider.
- Preferences and consent: print plan, cadence, people or selection preferences, notification settings, consent records and policy versions accepted.
- Order and delivery information: recipient name, delivery address, selected pack details, print-file checksums, order status, provider reference and support history.
- Payment information: Stripe customer, payment-method and transaction identifiers, amount, currency, payment status and refund status. Mems does not receive or store your full card number.
- Photos: face crops used for optional people matching and the final, metadata-stripped JPEGs you approve for printing. We do not upload your whole photo library.
- Device and operational information: app installation identifier, push token if notifications are enabled, time zone, security and consent events, and limited error or service logs. Raw PhotoKit errors and photo identifiers are designed to stay on the device.
3. How photo and face processing works
Mems asks for photo access so it can find or use photos you choose. Photo-quality scoring and most recommendation data are processed on your iPhone. Person labels, PhotoKit identifiers, local face-reference data, candidate matches and corrections are stored in account-scoped storage on your device.
If you choose people matching and accept the separate disclosure, temporary face crops—not full photos—are sent through Cloudflare to AWS Rekognition to create and search a collection isolated to your account. AWS stores mathematical face vectors for that collection until they are deleted. Face processing is used only to help find the people you selected; it is not used for advertising, unrelated identification or automated decisions about eligibility, credit, employment or similar matters.
Only the final print JPEGs you approve are uploaded to private Cloudflare R2 storage and made available to authorised fulfilment operators and, when configured, a print provider. Location and other embedded image metadata are removed during export.
4. Why we use information
We use information to create and secure accounts; remember your preferences; recommend and prepare packs; process payments; manufacture, ship and support orders; send service notifications you enable; prevent abuse; comply with law; and investigate errors or disputes. We rely on your instructions and consent for photo and face processing, performance of our contract for orders and account services, and legitimate interests or legal obligations for security, fraud prevention and records we must retain.
5. Service providers and disclosures
We disclose only the information needed for each provider to perform its role:
- Clerk for authentication and account management.
- Convex for account, preference, consent, payment-status, order and fulfilment records.
- Stripe for payment methods, charges, fraud checks and refunds.
- Cloudflare for the secure Worker service and private temporary print-file storage.
- Amazon Web Services (AWS Rekognition) for optional face-vector creation and matching.
- Prodigi, if used for an order, for print production, delivery and order support.
- Expo and Apple Push Notification service if you enable push notifications.
We may also disclose information when required by law, to protect users or the Service, or as part of a business reorganisation subject to appropriate safeguards. We do not sell your personal information or photos, and we do not allow them to be used for third-party advertising.
6. Storage locations and international transfers
Our providers may process information in Australia, the United States, the United Kingdom, the European Economic Area and other countries where they operate. Privacy protections may differ from those in your home country. We use provider contracts and available transfer safeguards to protect information transferred internationally.
7. Retention
- Temporary face crops are deleted from the device after their request completes; cloud face vectors remain only while the related people-matching collection is active or until you delete it or your account.
- Final print files are removed from Mems-controlled R2 storage after fulfilment confirms download, with a seven-day lifecycle rule as a backstop. If an order is submitted to Prodigi, it may retain submitted or transformed print files for up to 30 days for production, support and reprints.
- Account, preference and notification data is kept while your account is active and then deleted or de-identified following a valid deletion request.
- Order, payment, refund, consent and tax records may be retained for up to seven years where needed for legal, accounting, fraud-prevention or dispute purposes. Access is restricted and the records are not used to operate a deleted account.
- Support messages are normally kept for up to two years after the matter closes, unless a longer period is reasonably needed for a dispute or legal obligation.
8. Your choices and rights
You can limit photo access in iOS, turn notifications off, remove saved people, change pack preferences, disable automatic printing, or delete your account in the app. Depending on where you live, you may also request access, correction, deletion, restriction, portability or objection, or withdraw consent. Withdrawing consent does not affect processing already completed. You may complain to your local privacy regulator; in Australia, this is the Office of the Australian Information Commissioner.
See Account and data deletion for instructions. We may need to verify your identity before completing a request.
9. Children and other people in photos
Mems is intended for adults. Do not create an account if you are under 18. Photos may contain children or other people; only upload and print photos you are permitted to use. If you use people matching for another person, you are responsible for having their permission or another lawful basis, including any consent required for a child.
10. Security and your responsibilities
We use access controls, scoped upload links, integrity checks, private storage and deletion controls designed to protect information. No service can guarantee absolute security. Keep your device and account secure, and contact us promptly if you suspect unauthorised access.
11. Changes
We may update this policy as the Service or law changes. We will publish the new effective date and, where a change is material, provide notice in the app or ask for renewed consent.
12. Contact
Email [email protected]. Include “Mems privacy request” in the subject. Do not send photos, identity documents or card details unless we specifically request them through a secure method.