Privacy
Proposed effective date: October 1, 2026
Operator: Jamato, LLC doing business as Memory Bright (“Memory Bright,” “we,” “us”)
Contact: support@mymemorybright.com; (231) 714-4533; 6625 West Echo Valley Road Empire, MI 49630
This notice covers the consumer website at mymemorybright.com, the Memory Bright application at app.mymemorybright.com, and related consumer support and communications. A separate arrangement may govern services provided through a care organization.
Please read this notice carefully. By accessing or using the website or the application, you acknowledge that you have read and understood this notice. If you do not agree with our practices, please do not use the service. If you are a California resident, please also review our California Privacy Notice in Annex A, which supplements and is incorporated into this notice.
At a glance
Memory Bright lets families make and share Life Albums containing photographs, audio, video, names, descriptions, personal stories, and Joy Journaling. You control the content you add and whom you invite. People with access to an album or a valid Magic Link may see its contents. Please share links thoughtfully. We do not use private family content in advertising or public testimonials without separate permission. We do not sell personal information or share it for cross-context behavioral advertising.
Information we handle
| Category | Examples and source | Why we use it |
|---|---|---|
| Account and invitation information | Name, email, LoginID, encrypted or otherwise protected password credential, login code or Magic Link, participant role, and contact details supplied by you or an inviter | Create accounts, deliver invitations, authenticate access, support sharing, and prevent misuse |
| Family content | Uploaded photos, audio, videos, album titles, names and descriptions of people/places/things, stories, Joy Journal entries, and related metadata | Store, display, organize, and share Life Albums as instructed |
| Information about other people | Names, likenesses, voices, relationships, and possibly details about memory loss or care included in an album or message | Provide the album experience to the people the account holder authorizes |
| Activity and service records | Pages or albums viewed, dates and times, activity choices, game scores, and support interactions to the extent the application actually records them | Operate features, troubleshoot, understand use, and protect accounts |
| Purchase information | Plan, billing status, transaction identifiers, and payment details handled via Stripe; we store credit card information for monthly and annual subscriptions. | Activate paid service, process charges/refunds, maintain records |
| Website and device information | IP address, device/browser information, referral and visit data, cookies or similar storage | Deliver pages, maintain sessions, secure the service, and measure use where permitted |
| Communications | Contact form fields, emails, support messages, and any optional marketing preferences | Reply, provide support, send essential service notices, and send optional marketing where permitted |
Content can reveal sensitive information, including health-related circumstances, family relationships, and the image or voice of a child. Please limit uploads and invitations to what is appropriate for your family and obtain any necessary permissions. We do not ask you to, and you shall not, upload medical records or other personal, sensitive information.
How we use information
We process information to deliver and maintain the service; authenticate users and Magic Links; show and share albums under your settings; provide support; process subscriptions; send transaction and security messages; detect fraud and technical problems; comply with law; and improve the product using appropriate usage information. We send promotional emails only where permitted and provide an unsubscribe method. We do not make medical decisions, diagnose conditions, or use uploaded media to train a general-purpose AI.
If EU/UK privacy law applies, our bases may include performance of our contract for accounts and albums; legitimate interests in security, support, and proportionate product improvement; legal obligations for records; and consent where required for optional marketing, nonessential tracking, or particular sensitive information.
Cookies and similar technologies
We may use cookies, local storage, pixel tags, and similar technologies on the website and the application. These tools help us keep you signed in, remember your preferences, secure the service, and understand how the service is used. You can set your browser to refuse or delete cookies.
Sharing and access
We share information with: (1) people you invite or who receive a valid Magic Link, according to the permissions actually provided; (2) providers who host data, deliver email/text, process payments, maintain security, provide support, or supply analytics, subject to appropriate agreements; (3) authorities or parties when legally required or reasonably necessary to protect rights and safety; and (4) a successor in a merger or sale, subject to applicable law.
A Magic Link may grant access to the recipient without another password. Anyone who obtains a working link may potentially use it until it expires or is revoked, depending on the current product design. Please avoid forwarding it. Feature Albums are separate ready-made content; your personal Life Albums are not public merely because Feature Albums exist.
Storage, security, and retention
We use reasonable administrative, technical, and organizational safeguards appropriate to the information. No online service can guarantee absolute security. We maintain regular security audits and customers have full access to all uploaded data and records. Note: Our support staff has access to customer data only while providing direct support. We keep information as needed to provide the service and for documented security, legal, and accounting needs. Specific periods: active account and content expired trial or canceled subscription – [60 Days]; deleted content and backups – [60 Days]; billing records – [1 Year]. We will explain any exceptions when responding to a deletion request. Please keep your own copies of irreplaceable media. Memory Bright does not provide an export feature.
Account security
The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal information, including your password, login codes, and Magic Links, against unauthorized use, disclosure, and access.
Your choices and rights
You may update account details and sharing settings that the product makes available, revoke invitations or links if the product supports it, and unsubscribe from promotional emails. Email support@mymemorybright.com to request access, correction, a copy, deletion, or help with account closure. We will verify identity and honor applicable rights and exceptions. If another person created an album about you, we may need to balance your request with their rights and applicable law. Residents of jurisdictions with additional privacy rights may request those rights through the same contact; we will explain available appeals or opt-outs where required
Your State Privacy Rights
Depending on your state of residency, you may have additional or different rights related to your Personal Data, including:
Access and Data Portability. You may confirm whether we process your Personal Data, access the categories of Personal Data that we process, access a copy of the Personal Data we process. To the extent feasible and, required by state law, depending on your state, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information, and it will be included in the response to your access request. We may provide the requested information free of charge:
once during any 12-month period if you reside in Connecticut, Delaware, Maryland, Montana, New Hampshire, New Jersey, Oregon, Rhode Island, and Utah;
once annually if you reside in Indiana;
twice during any 12-month period if you reside in California;
twice per calendar year if you reside in Colorado; and
twice annually if you reside in Florida, Iowa, Kentucky, Minnesota, Nebraska, Tennessee, Texas, or Virginia.
Correction. You may request that we correct inaccuracies in your Personal Data that we maintain, taking into account the information’s nature and processing purpose.
Deletion. You may request that we delete Personal Data about you that we maintain, subject to certain exceptions that may permit its retention under applicable law.
Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales. You may request that we do not use your Personal Data for purposes of: (i) selling Personal Data; (ii) targeted advertising; (iii) profiling for any decision producing legal or similarly significant effects; and (iv) Personal Data collection through voice recognition or facial recognition features.
Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request, or we may voluntarily choose to fulfill your request even if you aren’t afforded certain rights. We will not retaliate against you for exercising a Personal Data right. However, the goods and services that Memory Bright is able to provide to you may be limited if you exercise any such right. To exercise any of these rights, please submit a written request to us by email to: support@mymemorybright.com
You have the right to appeal an adverse decision on a request to exercise a Personal Data right for sixty (60) days following your receipt of an adverse decision. To appeal our decision, you may contact us using one of the following methods:
| By Mail: | Memory Bright 6625 W Echo Valley Road Empire, MI 49630. |
|---|---|
| By E-Mail: | support@mymemorybright.com |
In your appeal, please include:
Your name and contact information
The original request reference number (if available)
A description of the request you submitted
The reason you believe our decision should be reconsidered
We will review your appeal and respond with a written explanation of our decision within 45 days of receiving your appeal (or as otherwise required by applicable law). If we require more time, we will notify you and explain the reason for the delay.
Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of data processing, including data “sales” as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.
Nevada residents.
Nevada law allows residents to opt out of the sale of certain covered information. You may submit an opt-out request to support@mymemorybright.com.
California residents.
Please see the California Privacy Notice in Annex A for additional rights and disclosures.
Children and information about loved ones
The service is intended for adults over the age of 18 years. Children should not create accounts or send information directly to us without a parent or guardian where required. Adults may include family photos or recordings of minors only when they have appropriate rights and permissions. Please contact us if you believe a child has provided personal information directly. A family member or caregiver who adds information about another adult should respect that person’s wishes and any applicable authority or consent requirements. We do not infer that a caregiver has legal authority merely because they created an account.
International access and third-party links
The service is operated from the United States. Information may be processed in other places where our verified providers operate. If we transfer covered EU/UK data internationally, we will use a lawful transfer mechanism. links to other services are governed by those services’ notices.
Changes and contact
We will post an updated notice with a new effective date and give additional notice when material changes require it. For privacy questions or requests, contact support@mymemorybright.com or write to 6625 W Echo Valley Road Empire, MI 49630.
Should we make material changes to this notice, we will take reasonable steps to notify you by posting a prominent notice on our website for a reasonable period of time. Changes will be effective immediately for new users; otherwise, they will be effective thirty (30) calendar days after we post the notice. Continued use of the service after notice of the changes indicates your acknowledgement of, and agreement to be bound by, the changes.
Annex A – California Privacy Notice
This California Privacy Notice (“CCPA Privacy Notice”) supplements the Memory Bright Privacy Policy and applies solely to consumers who reside in the State of California (“consumers” or “you”). We have adopted this notice to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together, the “CCPA”). Terms defined in the CCPA have the same meaning when used in this CCPA Privacy Notice.
Information We Collect
We collect and use information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“Personal Information”). Personal Information does not include:
Publicly available information, including from government records, through widely distributed media, or that the consumer made publicly available without restricting it to a specific audience.
Lawfully obtained, truthful information that is a matter of public concern.
Deidentified or aggregated consumer information.
Personal Information we collect is set forth in the Information We Handle and How We Use Information section of the Policy and is incorporated by reference into this CCPA Privacy Notice.
The chart below identifies which categories of Personal Information we collected from our consumers within the last 12 months and the expected retention period.
| Category | Examples | Collected | Retention Period |
|---|---|---|---|
| A. Identifiers. | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. | Yes | 60 days beyond account deactivation |
| B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (“California Customer Records”). | A name, physical characteristics or description, photograph, address, telephone number, credit card number, debit card number, or any other financial information. Some personal information included in this category may overlap with other categories. |
Yes | 60 days beyond account deactivation |
| C. Protected classification characteristics under California or federal law (“Protected Classes”). | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, reproductive health decision-making, military and veteran status, or genetic information (including familial genetic information). | Yes | 60 days beyond account deactivation |
| D. Commercial information. | Records of personal property, products, or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Yes | 60 days beyond account deactivation |
| E. Biometric information. | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | No | |
| F. Internet or other similar network activity. | Activity on our websites, mobile apps, or other digital systems, such as internet browsing history, search history, system usage, electronic communications with us, postings on our social media sites. | Yes | 60 days beyond account deactivation |
| G. Professional or employment-related information. | Current or past job history. | No | |
| H. Inferences drawn from other personal information. | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | No | |
| I. Sensitive personal information. | Further identified in the chart below. | No |
Sensitive Personal Information is a subtype of personal information consisting of the specific information categories listed in the chart below. Importantly, the CCPA only treats this information as sensitive personal information when we collect or use it to infer characteristics about a consumer.
The chart below identifies which sensitive personal information categories, if any, we have collected from consumers to infer characteristics about them in the last 12 months.
| Sensitive Personal Information Category | Collected to Infer Characteristics? | Retention Period |
|---|---|---|
| I.1. Government identifiers, such as your Social Security number (SSN), driver’s license, state identification card, or passport number. | No | |
| I.2. Complete account access credentials, such as usernames, account logins, account numbers, or card numbers combined with required access/security code or password. | No | |
| I.3. Precise geolocation, such as physical store visits or physical locations when visiting websites or using mobile apps. | No | |
| I.4. Racial or ethnic origin. | No | |
| I.5. Citizenship or immigration status. | No | |
| I.6. Religious or philosophical beliefs. | No | |
| I.7. Union membership. | No | |
| I.8. Mail, email, or text messages not directed to the Company. | No | |
| I.9. Genetic data. | No | |
| I.10. Neural Data, such as information generated by measuring a consumer’s central or peripheral nervous system’s activity that is not inferred from nonneural information. | No | |
| I.11. Unique identifying biometric information. | No | |
| I.12. Health information. | No | |
| I.13. Sex life or sexual orientation information. | No |
Sources of Personal Information
Personal Information is sourced from you in the methods described in the Information We Handle and How We Use Information section of the Policy which is incorporated by reference into this CCPA Privacy Notice.
Use of Personal Information
Use of collected Personal Information is set forth in the Information We Handle and How We Use Information section of the Policy.
We will not collect additional categories of Personal Information or use Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice. If required by law, we will also seek your consent before using your personal information for a new or unrelated purpose.
Disclosing, Selling, or Sharing Personal Information
We may disclose your Personal Information to a third party for the business purposes described in the Information We Handle and How We Use Information section of the Policy and in the chart below, such as to engage third parties to support our business functions. For example, we may disclose information from your visits to the Site to a cybersecurity consultant to help secure the Site and your address to our shipping carrier to deliver your order.
Selling or Sharing Personal Information
We do not sell your Personal Information to third parties and have not sold it in the preceding 12 months. Do not share your personal information with third parties for cross-context behavioral advertising purposes and have not shared your personal information in the preceding 12 months.
Our personal information sales [and/or] sharing does not include information about consumers we know are under age 16.
Your Rights and Choices
The CCPA provides consumers (California residents) with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights.
Right to Know and Data Portability Requests
You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
The categories of Personal Information we collected about you.
The sources from which we collected your Personal Information.
Our business or commercial purpose for collecting and, if applicable, selling that Personal Information.
The categories of third parties with whom we share that Personal Information.
The specific pieces of Personal Information we collected about you (also called a data portability request).
If we sold or disclosed your Personal Information for a business purpose, two separate lists disclosing:
sales, identifying the Personal Information categories that each category of recipient purchased; and
disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained.
Right to Delete and Right to Correct
You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.
You also have the right to request correction of personal information we maintain about you that you believe is inaccurate. We may require you to provide documentation, if needed, to confirm your identity and support your claim that the information is inaccurate. Unless an exception applies, we will correct Personal Information that our review determines is inaccurate and notify our service providers, contractors, and other recipients to take appropriate action.
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
Comply with a legal obligation.
Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Personal Information Sales or Sharing Opt-Out and Opt-In Rights
You have the right to request that businesses stop selling or sharing your Personal Information at any time (the “right to opt-out”), including through a user-enabled opt-out preference signal. Similarly, the CCPA prohibits businesses from selling or sharing the personal information of consumers it actually knows are under 16 years old without first obtaining consent from consumers who are between 13 and 15 years old or the consumer’s parent or guardian for consumers under age 13 (the “right to opt-in”).
Right to Non-Discrimination
You have the right not to be discriminated or retaliated against for exercising any of your privacy rights under the CCPA.
How to Exercise Your Rights
To exercise the access, data portability, correction, and deletion rights described above and the right to opt-out and right to opt-in, please submit a verifiable consumer request to us by email at: support@mymemorybright.com. You can also submit your request to opt-out of personal information sales and sharing through an opt-out preference signal.
Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child if he or she is our consumer.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative, which may include a copy of your California Identity Card;
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.
Making a verifiable consumer request does not require you to create an account with us.
We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Response Timing and Format For Requests to Know, Delete, or Correct
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to ninety (90) days), we will inform you of the reason and extension period in writing.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.
Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Response and Timing on Rights to Opt-Out
In response to your request to opt-out, we will process your request, as soon as feasibly possible, but no later than 15 business days from the date we receive the request. We will only use Personal Information provided from your request to comply with the request.
We will also notify our service providers, contractors, and certain other downstream recipients of your request to opt-out and instruct them to both:
Comply with your request.
Forward the request to their own downstream recipients, if applicable.
Privacy Policy Changes
We reserve the right to update this CCPA Privacy Notice at any time. If we make any material changes to this CCPA Privacy Notice, we will update the policy’s effective date and post the updated policy on our Site. We encourage you to check our Site to review the current Privacy Policy in effect.
Contact Information
If you have any questions or comments about this CCPA Privacy Notice, the ways in which we collect and use your information described here, or your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
| By Mail: | Memory Bright 6625 W Echo Valley Road Empire, MI 49630. |
|---|---|
| By E-Mail: | support@mymemorybright.com |