Privacy Notice

Last updated: June 30, 2026

This notice explains how Laurence Fuller ("we", "us"), the operator of The Memory Bar (the "Service"), collects and uses personal data. We act as the data controller for the information described below.

1. Data we collect

Account data — email address and authentication credentials you provide when you sign up or sign in (including via Google OAuth).
Library & journal content — the cocktails, personal symbols, memory scenes and journal entries you create in the app.
AI-generated content — the scenes and images generated from your inputs, and a cached hash of the prompt.
Subscription metadata — plan, status and billing period (we do not store your card details; those are collected by Paddle).
Technical data — IP address, device/browser information, and basic usage telemetry needed to operate and secure the Service.
Support correspondence — messages you send us.

2. Why we use it (purposes & legal bases)

To create your account and provide the Service — performance of a contract.
To generate memory scenes and images on your request — performance of a contract.
To process payments and manage subscriptions (via Paddle) — performance of a contract.
To secure the Service, prevent fraud and abuse, and debug issues — legitimate interests.
To send transactional emails (welcome, subscription cancelled) — performance of a contract.
To comply with tax, accounting and other legal obligations — legal obligation.

3. Who we share data with

We share personal data only with the following categories of recipients:

Paddle.com — our Merchant of Record. Paddle processes payments, subscription management, tax compliance and invoicing on our behalf and as an independent controller for billing data. See Paddle's privacy notice.
Hosting & infrastructure providers — Lovable Cloud (which uses Supabase and Cloudflare as sub-processors) for hosting, database, authentication, storage and serverless functions.
AI providers — Google (Gemini) and OpenAI, accessed via the Lovable AI Gateway, to generate memory scenes and images from your inputs.
Email delivery — Resend, for transactional emails.
Professional advisers — legal, accounting and tax advisers where necessary.
Authorities — where required by law or to protect rights and safety.

We do not sell your personal data.

4. International transfers

Some recipients are based outside your country (including in the US). Where required, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or equivalent mechanisms.

5. Retention

We keep account, library and journal data for as long as your account is active. If you delete your account or your data, it is removed from live systems within a reasonable period and from backups in the normal backup-rotation cycle. Billing records are retained by Paddle for the period required by tax and accounting law.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. EU/UK residents may lodge a complaint with their supervisory authority. To exercise any of these rights, contact us through the in-app support channel. We aim to respond within one month.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, row-level security on our database, scoped access controls and signed webhooks. No system is perfectly secure; please use a strong, unique password.

8. Cookies

We use only the cookies and local-storage entries strictly necessary to keep you signed in and to operate the Service. We do not use third-party advertising or cross-site tracking cookies.

9. Children

The Service is not intended for users under the age of majority in their jurisdiction.

10. Changes

We may update this notice from time to time. Material changes will be highlighted in the app or by email.

11. Contact

Controller: Laurence Fuller. For privacy questions or to exercise your rights, contact us through the in-app support channel.