Our privacy stance

Your family archive
is yours.

MemoryTapestry is built around one idea: a family memory system only works if the family trusts it. So privacy isn't a page — it's the shape of the product.

Private by default.

Every album, trip, story, and person is private to your family workspace until you deliberately share it. Nothing is public unless you say so.

You control who does what.

For every album and story, you decide who can view, contribute, identify people, comment, download web-size files, download originals, share externally, and invite others.

Face recognition stays with you.

Face embeddings and clusters live only inside your family workspace. We never share them, and never use them to identify people outside your archive.

Our commitments, plainly.

Original files are preserved. We never rewrite or downscale your originals.
You can export your data — media, metadata, albums, people, relationships, stories — at any time.
You can delete your account and all content it owns. Deletion is real, not archived.
Public links are optional, revocable, and never leak private album content through preview metadata.
Social sharing never changes the underlying album privacy — it creates a distinct, revocable public surface.
Row-level security enforces permissions in the database itself, not just in the interface.

SMS & phone numbers

Transactional SMS only. Never sold.

Providing a mobile phone number is optional. If you opt in, we send only transactional SMS — user-requested journaling reminders and memory prompt notifications, account verification codes, login authentication, and account security notifications. We do not send marketing SMS.

Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help at any time. You can also disable SMS from your account notification preferences.