privacy policy

semory is operated by BuildingPP OÜ (registry code 17224732), Laulupeo 3-2, Tallinn, Estonia. Questions? Email sander@bilt.me.

• Account data — your email address (or your name and email if you sign in with Apple), your username, display name, optional profile picture, and the date of birth you enter at the age gate.
• Photos and notes — the photos you shoot in the app are uploaded to our servers and held there until they “develop” and are returned to you. This is the core of the service. We also store the notes you and your friends leave on developed pictures.
• Social data — your friendships, the people you block, and reports you make or that are made about your content.
• Waitlist data — if you join the waitlist on our website, we store your email address and signup time.
• Device data — standard technical logs such as device model, OS version, and IP address, collected automatically to keep the service running and secure.
• Payments — Apple App Store transaction IDs. We never see your card numbers; Apple handles payment details.

We do not knowingly collect data from people under 13 years of age.

• Run the service — store your photos, develop them, and return them to you.
• Manage your account and subscription.
• Send emails — about your photos, your account, and product updates. You can opt out of non-essential emails at any time.
• Keep purchase records for tax and accounting.
• Fix bugs and keep the service secure.
• Keep the community safe — review reported content and enforce our rules.

Your photos are yours. We never sell them or use them to train anything. Once a photo develops, it is visible to the friends you have accepted, who can leave notes on it — that is how semory works. Our staff does not look at your photos, with one exception: if a picture is reported, a moderator may view it to review the report.

We process your data to perform our contract with you (running the app, storing your photos, billing), based on your consent (marketing emails, waitlist), and for our legitimate interests (security, preventing abuse, safety and content moderation, legal compliance).

• Photos and account data — for as long as your account exists. Delete your account and we erase them within 30 days.
• Waitlist emails — until launch-related communication ends, or until you ask us to remove you.
• Purchase records — 7 years, as required by Estonian accounting law.

Your developed pictures, and the notes on them, are shared with the friends you have accepted — no one else on semory can see them. Beyond that, we share data only with service providers who help us run semory, and only for that purpose:

• Cloudflare — hosting and secure storage.
• Our email delivery provider — for sending the emails described above.
• Apple App Store — app distribution and payments.

We never sell your personal data.

You can access, correct, download, or delete your data, withdraw consent, and object to processing. EU residents can complain to their data protection authority (in Estonia: the Data Protection Inspectorate). California and similar-state residents can additionally ask us to disclose or delete their personal information and to not “sell or share” it (we don’t). To exercise any right, email us — we respond within 30 days and will never treat you differently for using your privacy rights.

Our website and app do not use advertising or analytics trackers. We only use what is strictly necessary for the service to function.

Data in transit is encrypted (HTTPS) and data at rest is encrypted on our servers. Access to personal data is limited to those who need it. If a data breach ever affects you, we will notify you as soon as reasonably possible.

If we make important changes, we will notify you in the app or by email before they take effect.