Memory Pages Privacy Policy

1. Who we are

Memory Pages is a service of K-Stack LLC, a Pennsylvania limited liability company ("K-Stack", "we", "us"). This policy covers the Memory Pages website at memory-pages.kstack.app and the Memory Pages apps for iPhone, iPad and Android. K-Stack is the data controller for the information described here. Questions: privacy@kstack.app.

Memory Pages lets invited groups — families, classes, schools, clubs — collect photos and videos in private collections and arrange them into albums, yearbooks, flyers and other publications that they can print or share.

2. Who Memory Pages is for, and children

Memory Pages is for adults: parents, guardians, teachers, school staff and other organizers. Accounts are by invitation only, and a collection's owner approves who joins. Memory Pages is not directed to children under 13, and we do not knowingly let children under 13 create accounts. If we learn that a child under 13 has an account, we delete it.

Collections — school yearbooks in particular — often contain photos of children. Those photos are uploaded by parents, guardians or the school, who are responsible for having the permission needed to share them with the collection's members. Memory Pages helps with this:

• Collections are private. Only people the owner invites and approves can see them, and only the parts (collection, folder or album) they were given access to.
• A person can be marked "don't publish"; photos tagged with that person cannot be placed in albums or exported for printing.
• A parent or guardian can ask for a child's photos, name or tags to be removed — see section 9.

Schools using Memory Pages for school activities remain responsible for their own obligations (for example FERPA and their photo-release policies). We act on the school's or parent's instructions for that content and do not use it for any other purpose.

3. Information we collect

Information you give us

• Account information: your name, email address and password (stored only as a secure hash), or the name and email your Apple or Google sign-in shares with us; an optional profile photo.
• Photos and videos you upload, including their embedded metadata (date taken, camera, and location if your device recorded it), and edited versions you create.
• Content you create: collection, folder and album names; captions, notes, comments and messages; album pages and layouts; photographer credits; and the names of people on a collection's People list and who is tagged in which photo.
• Invitations: the email addresses you invite and who approved whom.
• Support messages you send us.

Information collected when you use Memory Pages

• Usage and activity: what you upload, edit, export or share inside a collection (shown to the collection's members as its activity), and sign-in times.
• Device and technical data: app version, device type and operating system, IP address, and diagnostic and crash logs.
• Notification tokens from Apple or Google so we can send you notifications you turn on.
• Video calls: calls use your camera and microphone only while you are in a call. Calls run on K-Stack's own servers and are not recorded; we keep only that a call happened, who started it and how many people joined.

We do not use advertising identifiers, we do not track you across other companies' apps or websites, and there are no ads in Memory Pages.

4. How we use information

• To provide Memory Pages: store and show your photos to the people you share them with, build albums and print files, send invitations and notifications, and run video calls.
• To keep accounts and collections secure, prevent abuse, and enforce collection owners' settings such as "don't publish".
• To provide features you choose to use, such as photo editing, tagging, and AI-assisted tools (section 5).
• To fix problems and improve the service, using diagnostic data.
• To answer support requests and send service messages (for example, that an export is ready).

We do not sell or rent your personal information, we do not share it for advertising, and we do not use your photos to train AI models.

5. AI-assisted features

Some optional features use AI — for example removing an object from a photo ("Clean Up") or the in-app Page Assistant. Where possible these run on K-Stack's own servers, so your photos stay with us. If a feature uses an outside AI provider, we send only what that feature needs, under terms that do not allow the provider to keep it or train on it, and we name the provider in the list in section 6. AI features are only used when you start them.

6. Who we share information with

• Members of your collections — according to the access the owner gives them. Content you add to a collection is visible to its members.
• Printers you choose — when you export print files and send them to Jostens or another printer, the files go to that printer, which handles them under its own privacy policy.
• Service providers that run parts of Memory Pages for us:
  • Apple (Sign in with Apple; Apple Push Notification service) and Google (Google sign-in; Firebase Cloud Messaging; Google Workspace for sending email).
  • Our hosting and storage run on K-Stack-operated servers in the United States, with encrypted off-site backups we control.
• Legal reasons — if required by law, or to protect the safety of a person, especially a child, or the rights of K-Stack and our users.
• Business transfers — if K-Stack is involved in a merger or sale, under this policy's protections.

7. How long we keep information

• Your account and content are kept while your account is active and you remain a member of the collections that hold it.
• Deleted photos go to the collection's Recently Deleted for 30 days, then are removed.
• Export files (print PDFs, page images) are deleted 7 days after they are made.
• When an account is deleted, its information is removed from our live systems within 30 days. Encrypted backups are kept for up to 90 days, so deleted information disappears from them as they age out.
• Diagnostic and server logs are kept for a limited time, normally no longer than 90 days.

8. Security

Data is encrypted in transit (HTTPS/TLS). Photos are stored on K-Stack servers and reached only through links that expire and require permission. Passwords are stored as one-way hashes, access to production systems is limited to K-Stack staff who need it, and backups are encrypted. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Memory Pages needs to read your photos on our servers to show previews, render albums and make print files, so photos are not end-to-end encrypted.

9. Your choices and rights

• Access and correct: view and edit your profile and your content in the app.
• Download: download your original photos at any time.
• Delete your account: in the app or on the web, open your profile (account menu → My profile; on the web, click your name at the top of the page) and choose Delete account. If you can't sign in, see kstack.app/memory-pages/delete-account. Collections you own are deleted with your account unless you hand them to another member first; photos you added to other people's collections are removed.
• Remove a child's photos or name: a parent or guardian can ask the collection's owner, or email privacy@kstack.app with the collection's name, and we will remove the photos, tags or name.
• Notifications: turn them on or off in the app or in your device's settings.
• Depending on where you live, you may have further rights (for example under the CCPA or GDPR), such as the right to know, to delete, or to object. Email us to use them; we will not treat you differently for doing so.

10. International users

Memory Pages is operated from the United States, and information is stored there. If you use it from elsewhere, your information is transferred to and processed in the United States.

11. Changes to this policy

If we change this policy we will update the date above, and for significant changes we will tell you in the app or by email before they take effect.

12. Contact

K-Stack LLC — privacy@kstack.app. Support: kstack.app/memory-pages/support.