Who can see your memories?

What is encrypted, and what is not

On the way: every connection to The Memory Palace uses HTTPS with TLS 1.2 or higher, and browsers are told to use nothing else (HSTS). Nobody between your device and our servers can read along.

In storage: your account and the details of your memories are in a Supabase database in Frankfurt, Germany. Your photos, videos and recordings are stored with Cloudflare R2, in a location we chose in Western Europe. Both are encrypted at rest by those providers, who also manage the keys. That protects your memories against someone who gets hold of a disk or a server.

Not end-to-end: your device does not encrypt anything before it uploads, and our servers can read what you store. That is how we can show a room to the people you invite, make thumbnails, build your ZIP export and, only if you ask, run an AI feature. With end-to-end encryption only your own devices would hold the key, and none of that could happen on our side. If something needs that level of secrecy, such as passwords, keep it in an end-to-end encrypted service.

Your photos and recordings are not public files. Each time one is opened, we first check that you may see it (it is yours, it was shared with you, or it is in a wing its owner published). Only then does your browser get a link to the file that stops working after one hour.

Your password is stored only as a hash (bcrypt, through Supabase Auth), and you can switch on two-step sign-in with an authenticator app.

Who can see your palace

You. Everything you add is private from the start.

People you invite. When you share a room or a wing, the people you invite see that room or wing, and nothing else. The rest of your palace stays private.

Anyone, only when you choose it. A wing you publish, your public profile if you switch it on (it starts switched off), a share link you make (optionally with a passcode and an end date) and the QR codes in a printed book or monthly letter can be opened by whoever has them. You can withdraw them again; old QR codes stop working as soon as you make new ones.

Your legacy contacts, only if you set this up. You choose who, what and when. If you stay away for the period you chose, we email you first and wait thirty days. Only then does each contact receive a personal link to what you chose for them. That link does not expire, so anyone holding it can view and download that content; you withdraw it by removing the contact.

Our team. We do not look at the content of your palace. The only exceptions: you ask us to (for example for support, and only with your permission), a report of illegal content, or a legal obligation. Technically the small team that runs The Memory Palace could access stored data, because your palace is not end-to-end encrypted and we hold the keys to the database and the file storage, which is why we have these rules. Our software has no screen for browsing members' memories, and our terms allow us to use your content only to provide the service to you.

Our service providers store or process data on our behalf, under data processing agreements: Supabase, Cloudflare, Vercel and the providers listed in our privacy policy. We never sell your data and never use it for advertising.

AI features: what leaves The Memory Palace

AI features are optional and switched off for every new account. They only work after you switch on AI features (Settings, Profile, AI features), and most of them only run when you press a button for them. The free photo restorer is the one exception: it works without an account, see the table. When a feature runs, this is what is sent:

You can switch AI features off again in the same place at any time; from then on, nothing is sent to these providers.

What the providers do with it, according to our privacy policy: Anthropic does not use data sent through its API to train its models by default; Mistral says it does not use API data to train its models; Replicate deletes photos and results from its systems within about an hour. We never use your content to train AI models ourselves.

Text that AI wrote is marked as made with AI, and the recording itself stays exactly as it is. We never imitate a voice.

Where your data lives

Database: Supabase (PostgreSQL) in Frankfurt, Germany. Files: Cloudflare R2, in a location we chose in Western Europe; files uploaded before April 2026 can still be in Supabase Storage in the EU. The app itself runs on Vercel in Frankfurt.

Some services are outside the EU: the AI providers above, email (Resend), payments (Stripe and Apple) and push notifications (Apple and Google). Those transfers are covered by the EU-US Data Privacy Framework or standard contractual clauses. The full list is in our privacy policy.

Taking everything with you, or deleting it

On every plan, including the free one, you download your whole palace in one ZIP: every photo, recording, video and story in its own format, all your data in one file, and a page that opens without internet and without an account. You find it under Settings, Security and privacy.

When you delete your account (Settings, Security and privacy, Delete account), your profile and your data are deleted and we remove your files from storage. Backups disappear within 30 days. Want confirmation that everything is gone? Email contact@thememorypalace.ai. Basic server logs can be kept for up to 12 months and billing records for 7 years, because the law requires it.

Who makes this

The Memory Palace is made by a small team in Leuven, Belgium. Questions about your privacy: privacy@thememorypalace.ai.

Questions