Privacy policy

Last updated November 5, 2026

This policy covers the Legacy: Memory Moments app and the website at legacymemorymoments.app. They're provided by myStuf, LLC, a Georgia company ("Legacy", "we").

In short: your memories are yours. We keep them only so Legacy can work for you, we protect them with encryption, we never sell them, show you ads or use them to train AI, and you can delete them whenever you like.

What we collect

Your account

• Your email address, and the name you give us if you give one.
• Your password, stored only as a one-way hash. Nobody, including us, can read it.
• The phones and browsers signed in to your account, with a device type and when each signed in, so a sign-in can be ended. To help with support, we can see which phones have held your account in the last 30 days, but never what's in it.

Legacy needs an account, which keeps a copy of your archive safe and lets you see it on the web. Your phone keeps its own copy too, so it works offline.

Several accounts on one phone. If more than one person signs in to Legacy on the same phone, each account gets its own encrypted archive there. Nothing is ever copied between them, and each one opens only after signing in to its account. Signing out leaves that account's memories on the phone, locked behind the sign-in. To remove them, choose "Sign out and remove from this phone", or go to Settings, then Account, then Accounts on this phone. Legacy won't remove a copy while changes are still waiting to be backed up, and removing it never affects the backup in your account.

What you put in Legacy

Everything you add once you sign in: the people in your life, memories, the words you write about them, stories told in your own voice or on video, photos, videos, voice recordings, families, dates and places.

• About other people. Legacy is made for keeping memories of the people you love, so much of it is about them: names, birthdays, relationships, and photos and stories of your children, parents and grandparents.
• How to reach them. If you add an email address or phone number to someone in Legacy, it's kept encrypted and used only when you choose to send them something: a letter, an invitation, or a request for their story.
• In your photos. Photos and videos are kept exactly as you took them, so the original is never lost. That includes the details your camera saved in the file, which can include when and where it was taken.

How what you put in is protected, at every stage

• On your phone. Legacy's whole database is encrypted with AES-256 (SQLCipher), and so is every photo, video and recording it stores. The keys are made on your phone, kept in its secure, hardware-backed key store, and never leave it. A photo or video is only decrypted while you're looking at it. You can also lock Legacy with your fingerprint, face or phone PIN.
• On the way. Everything travelling between your phone and our servers is encrypted with HTTPS (TLS), and browsers are told to always use a secure connection to our server.
• On our servers. What you write is encrypted field by field with AES-256: people's names, nicknames, relationships, notes, email addresses and phone numbers; memory titles, descriptions and places; stories; captions; family, show and tag names; the notes on story requests, and the names and words of stories sent to you; and your display name. The key is kept separate from the database, so a copy of the database on its own can't be read. Dates, the kind of each memory and whether it's a favorite stay readable, so your timeline can sort and filter quickly.
• Photos, videos and recordings in storage. They're kept in Cloudflare's storage, which encrypts everything at rest with AES-256. They're private: only your signed-in account can open them.
• In backups. Our nightly backups are encrypted with AES-256 under their own separate key before they leave the server, and kept for 30 days.

What this means, plainly. Legacy is encrypted on your phone, on the way and at rest, but it isn't end-to-end encrypted: our server holds the keys to your archive, because it has to read it to sync it to your other devices, back it up and show it to you on the web. That's the same trade almost every photo and backup service makes. If that ever changes, we'll say so here.

When we would ever look at it. Our staff don't open your memories. We'd look at a specific item only if you ask us to while we're helping you with a problem, and only what you point us to, or if the law requires it. Access to our servers is limited to the few people who run them, and to what they need to keep Legacy working.

Stories sent to you by people without an account

When you ask someone for their story, they open a page at app.legacymemorymoments.app from your link. It shows what you chose to show and asks for their name and their story, recorded in their browser or written down. What they send is kept for you, encrypted like your own memories, until you add it to your archive or decline it; a declined story is deleted. The page uses no cookies or tracking. The link works for 30 days, or until you stop it.

Technical information

Our servers keep short-term logs, such as IP addresses, times and error details, to keep the service running and secure. Legacy has no advertising and no analytics or tracking of any kind.

Cookies and browser storage

legacymemorymoments.app uses no cookies, no analytics and no trackers. Its fonts come from Google Fonts, so your browser asks Google for them. The Legacy web app at app.legacymemorymoments.app uses two secure cookies that only our server can read: one keeps you signed in, and one lets your browser show your own photos and videos. It also remembers a few choices in your browser, such as which timeline view you last chose and your reminder settings. Nothing else. Because we don't track you, there's nothing to opt out of, and we treat a browser's Global Privacy Control or Do Not Track signal as already honored.

Permissions on your phone

• Camera: to take photos and videos for a memory.
• Microphone: to record your voice, a story or a video.
• Photos: Legacy opens your phone's own photo picker, and only the photos and videos you pick are added. It can't see the rest of your library.
• Fingerprint, face or PIN: only if you turn on the app lock. Your phone checks it; Legacy never sees it.
• Notifications: only if you turn on reminders. They're worked out on your phone from your own archive; nothing is sent to us to make them.

Legacy doesn't ask for your contacts or your location.

How we use your information

• To provide Legacy: keep your archive, sync it between your devices, back it up, and show it to you.
• To send account emails, such as password resets, and the emails you ask Legacy to send, such as family invitations and letters delivered on the day you chose.
• To keep the service secure, fix problems and answer you when you contact us.

We don't sell your data, we don't show ads, and we don't use your memories to train AI or for anything else. No AI reads your memories. If we ever add a feature that does, such as turning a recorded story into text, it will be your choice to turn it on, and this policy will say who does it and how.

Who we share it with

• Only the people you choose. Nothing is shared until you invite someone to a family or an event, or a keeper to your household. You choose for each memory who sees it, and you can stop sharing at any time. The people you share with never see your letters, your tags, or the email addresses and phone numbers you keep for people.
• What you send on purpose. A memory you share by text or email, a letter delivered to the address you give, or a link asking for someone's story goes where you send it.
• Service providers that run parts of Legacy for us, under contracts that limit them to doing so:
  • Render: hosts our servers and database.
  • Cloudflare: stores photos, videos, recordings and encrypted backups.
  • Resend: sends our account emails, and the invitations and letters you send.
• The law. If we're legally required to, or to protect someone's safety. We'll ask for a valid legal order, such as a subpoena or warrant, give only what it requires, and tell you before we hand anything over, unless the law or a court forbids us, or there's an emergency.
• If Legacy changes hands. If myStuf, LLC is sold or merged, your information would move with the service, and this policy would keep applying to it. We'd tell you first, and you could delete your account.

We don't sell or "share" your personal information as US state privacy laws define those words, and we never have.

Where your data is kept

Legacy is run from the United States, and our servers and database are there. Photos, videos, recordings and backups are kept in Cloudflare's storage, which may hold copies in its data centers in other countries, always encrypted. If you use Legacy from outside the United States, your information is transferred to and kept in the United States.

If something goes wrong

No system is perfectly secure. If someone gets into your information without permission, we'll tell you by email as soon as we can, and within 60 days at most, with what happened, what was involved and what you can do. Where the law requires, we'll also tell the authorities.

How long we keep it, and deleting it

• We keep your archive while you have an account, including after a trial or plan ends: nothing is deleted because a plan ended.
• Something you delete disappears from all your devices the next time they sync, and is permanently erased from our servers and storage within 30 days.
• You can delete your account, and everything in it, in the app: Settings, then Account, then Delete account. It's removed from our servers straight away, with its photos, videos and recordings, and any copy in our backups is gone within 30 days. See Delete your account, including what to do if you can't sign in.
• Deleting your account doesn't touch the copy on your phone. To remove that too, uninstall the app.
• You can download everything at any time, on every plan: in Settings, every original in a folder for each memory, with a page you can open in any browser.

Your choices and rights

You can see, change and delete everything yourself in the app, and sign out at any time. If you'd like help, or want to know what we hold about you, email us.

Your rights under US state laws. Depending on where you live (for example California, Colorado, Connecticut, Texas, Virginia or Washington), you have the right to:

• know what personal information we have about you, and get a copy of it;
• correct it;
• delete it;
• opt out of its sale, targeted advertising and profiling (we do none of these);
• limit how sensitive information is used (we already use it only to provide Legacy to you).

To make a request, email us from the address on your account, or have someone you've authorized do it for you. We'll confirm it's you, answer within 45 days, and won't treat you differently for asking. If we turn down your request, you can appeal by replying to our answer with "Appeal" in the subject. We'll answer the appeal within 45 days, and if you still disagree you can contact your state's Attorney General.

Information about other people

Legacy is full of the people you love, often your children. Please only add what you have a right to keep, and keep it with the care you'd want for your own. If someone asks us to remove information about them that's in your account, we'll pass the request on to you, because what's in your account is yours to manage.

Children

Accounts are for people 13 and older, and under-18s need a parent or guardian's agreement. Legacy isn't directed at children under 13, and we don't knowingly collect their information. Parents and grandparents keep memories of their children and grandchildren in their own accounts; those memories belong to the account holder, not to the child.

Changes to this policy

If we change this policy in a meaningful way, we'll update the date at the top and tell account holders by email or in the app before the change applies.

Contact

Questions or requests about your privacy: support@legacymemorymoments.app.

myStuf, LLC, Gwinnett County, Georgia, USA.