Privacy policy

Who is responsible

Memore Sweden AB, organisation number 559486-1931, Stationsgatan 6, 438 36 Landvetter, Sweden, operates Memore and Memore Capture. Contact privacy@memore.se for privacy matters and hello@memore.se for support.

Memore is controller for account administration, business correspondence and service security. For event photos and related processing, Memore acts on its customer's instructions as processor or subprocessor. The organisation responsible for the photography determines its purposes and lawful basis. Ask your event contact to identify that organisation.

Information and purposes

We receive information from you, from customers who invite you, and through use of the service. Names, email addresses, account identifiers and credentials support sign-in and event access. Optional profile information includes a photo, bio, website, Instagram and phone number; information selected for publication may accompany photos. Enquiries include your contact details, organisation and any event brief you provide. We use correspondence and transaction records to answer requests, provide services and administer payments; technical records help secure and troubleshoot the service.

We rely on contract where processing is necessary to provide services you have contracted for or take steps you request before contracting. Otherwise, account and business administration rely on our legitimate interests in managing customer relationships, and security processing on our legitimate interest in protecting the service. Required accounting records are processed to meet legal obligations. Required account and enquiry fields are needed to provide access or respond; optional fields can be left blank.

On customer instructions, we process photos, previews, event settings, photo-removal requests and associated metadata to organise, edit and deliver event photos. Metadata can include capture time, orientation, camera identifiers and location. Event venue coordinates may be added to delivered photos. No IP address is stored in the removal request itself; infrastructure handles connection information separately. We do not run face recognition or sell personal data to advertisers.

Memore Capture

The app uploads JPEGs and converts supported HEIF and RAW files to JPEG on the device, preserving metadata where supported. Camera originals remain unchanged. The app does not request the phone's location; embedded photo location can be uploaded and shared. Other upload methods may send original files.

The app stores its sign-in token in Keychain and its selected event in local preferences. It keeps local transfer files for retries and attempts to remove full-size files after successful upload. Thumbnails and transfer history persist. Signing out clears the token and selected event, but not queued files or thumbnails. Server deletion does not erase local copies. Sign out before deleting the app to clear its token; deleting the app removes its local application data and may lose pending uploads.

Recipients and service providers

Authorised event users can access photos according to their permissions. Working guest links expose published photos for viewing, downloading and sharing. Removing a link or server copy cannot recall copies others have downloaded. Customers are responsible for their photography and publication choices.

We use providers for hosting, storage and backups, photo processing, email and payments, and disclose information where legally required. Memore Capture does not collect payment-card details or contain advertising or third-party analytics SDKs. [Before publication: confirm applicable international transfers, safeguards and how to obtain a copy of them.]

Website cookies and analytics

The website uses the first-party session cookie _memore_key for session functionality and security; it has no fixed browser expiry. If you select remember-me sign-in, the first-party remember_me cookie keeps you signed in for up to 30 days. You can remove cookies through your browser, which may end your session.

The current website uses the first-party cookie _memore_visitor, lasting up to 365 days, to distinguish visitors for event views, downloads and clicks. Records use event-specific pseudonymous identifiers. Raw records are scheduled for deletion after 90 days, or earlier on event purge; daily totals remain. [Before publication: disable this tracking or implement prior consent and describe how to refuse and withdraw it.]

Retention

Guest access lasts for the selected 30, 90, or 365 days, normally from the event's end; the start date or creation date is used if needed. Access can be restored during the following 30 days. After recovery expires, event photos and derived files in active service storage, together with raw event visitor records, are deleted permanently by the lifecycle process, which retries incomplete deletion. The event record, accounts and daily analytics totals are separate. Camera originals, downloaded copies and local app files are outside this process.

We keep account information while the account is active, review accounts after 24 months of inactivity, and delete account information within 30 days of closure unless a legal exception applies. Support messages and enquiries are kept for 12 months after the conversation closes. Technical and security logs are kept for 30 days. Identifiable analytics are kept for up to 90 days; totals may remain once they no longer identify individuals.

Backups expire on a rolling 30-day cycle. Data deleted from active systems may remain in backups until those backups expire. Required accounting records are kept for seven years after the end of the calendar year in which the financial year ends. We retain other specific records longer only where necessary for a legal obligation or to establish, exercise or defend legal claims.

Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. For event photography, contact the responsible organisation; the photo page also offers a removal request. For Memore's own processing or help identifying the responsible party, contact privacy@memore.se. You may complain to Integritetsskyddsmyndigheten (IMY) or another competent supervisory authority.