Sign in
Privacy and security
Your family's memories belong to your family.
Families have watched memory apps shut down, raise prices, lock exports behind top tiers, and show ads over their children's photos. Legacy is built on the opposite rules, and we put them in writing.
Our promises
Nothing is shared unless you share it. There is no public feed and never will be.
Not in the trial, not on any plan, and never based on what is in your memories.
Transcripts and tidied stories are extras. The original recording and photo are never replaced.
Every photo, video, recording, and story, with its metadata, in an open format. On every plan.
Saved on your phone the moment you tap. Uploads resume on their own when you are back online.
A durable archive format and a written continuity promise, so what you record today is readable in 2056.
How your memories are protected
Encrypted at every stage.
On your phone
The whole database, and every photo, video and recording, is encrypted with AES-256. The keys are made on your phone and never leave it. Lock the app with your fingerprint, face or PIN. When several accounts share a phone, each keeps its own encrypted archive, which opens only after signing in to that account.
On the way
Everything between your phone, your browser and our servers travels over HTTPS, and browsers are told to always use a secure connection.
On our servers
What you write is encrypted field by field with AES-256, with the key kept apart from the database. Photos, videos and recordings are private and encrypted at rest.
In backups
Nightly backups are encrypted under their own key before they leave the server, and kept for 30 days.
Links that ask for a story
A link you send opens one memory and only what you chose to show. It ends after 30 days or when you stop it, and what comes back waits for you to approve.
Shared only by you
Nothing is shared until you invite someone, and you choose who sees each memory. The people you share with never see the phone numbers and emails you keep, or your letters.
Plainly
What we can and cannot see.
Legacy is encrypted on your phone, on the way and at rest, but it is not end-to-end encrypted. Our server holds the keys to your archive, because it has to read it to sync it to your other devices, back it up and show it to you on the web. That is the same trade almost every photo and backup service makes. If that ever changes, we will say so.
Our staff do not open your memories. We would look at a specific item only if you ask us to while we help you with a problem, or if the law requires it. We never sell your memories, show you ads, or use them to train AI.
legacymemorymoments.app uses no cookies, no analytics and no trackers.
For the long run
If anything ever changes, you get your memories out.
Deleted things are erased within 30 days. You can delete your account, and everything in it, yourself at any time. If we ever remove something that holds your memories, or shut Legacy down, we will give you at least 30 days' notice and a way to get everything out. That promise is in our terms.
The full details are in the privacy policy.
Save the moment. Tell the story. Leave a legacy.
On the web now. Coming to iPhone and Android.