Last updated: 15 June 2026
Privacy Policy
Who we are
Memoist is a small UK-based service that lets a group create a shared audio "card" for someone — a birthday, a leaving gift, a congratulations. We're the data controller for the personal data described below. Get in touch on privacy@memoist.net with any questions or requests.
What we collect
- Your Google account email and display name when you sign in. We use these to identify you across sessions and to address you in the interface.
- Audio recordings you contribute and a small amount of metadata: which card the clip belongs to, when it was uploaded, its duration, and its position in the card's order.
- Email addresses of people you invite to contribute to a card you own. You provide these; we send the invitation email and track whether it was delivered.
- Standard server logs — IP address, browser user-agent, the URL requested, and a timestamp. Retained for 30 days for security and diagnostics, then deleted.
What we don't collect
We don't use analytics, advertising trackers, third-party marketing pixels, or any other behavioural-tracking technology. We don't sell, rent, or share your data with marketers.
Legal basis (UK GDPR Article 6)
- Performance of a contract for everything you actively ask us to do — host your card, deliver invitations, play back clips.
- Legitimate interest for the short-term server logs, to keep the service secure and to diagnose problems.
Who else processes your data
We use a small set of subprocessors. All data stays in the United Kingdom or European Union (AWS region eu-west-2, London) except for the authentication round-trip with Google.
- Google — for OAuth authentication only. We receive your email and display name from Google when you sign in. Google's handling is governed by their privacy policy.
- Amazon Web Services — Lightsail (web hosting), S3 (audio storage), Lambda (audio processing), and Simple Email Service (sending invitations). All in the London region.
Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to withdraw any consent you've given. Email privacy@memoist.net and we'll respond within 30 days.
You can also complain to the UK Information Commissioner's Office (ICO) if you think we've mishandled your data. We'd much rather you give us a chance to put things right first.
How long we keep things
Cards and the audio clips on them stay while the card owner's account is active. If you delete a clip or a card, we honour that immediately. If you delete your account, we honour that within 30 days. Server logs roll off after 30 days automatically.
Children
Memoist isn't designed for people under 16. We don't knowingly collect data from anyone under 16. If you think we have, please contact us and we'll delete it.
Changes to this policy
If we make material changes to this policy we'll notify account holders by email at least 14 days before they take effect. Smaller wording changes will simply update the "Last updated" date at the top.