Privacy policy
Last updated: 4 November 2026
This policy explains what the MemoraBook app ("MemoraBook", "we", "us") collects, why, who helps us run the service, how long we keep data and how you can delete it. MemoraBook is run by Umesh Mishra, Dhangadhi, Nepal. Contact: memorabook9@gmail.com.
In short: we collect only what is needed to keep your account, store your albums and print your books. We never sell your data. You can delete your account and data at any time, in the app or from this website.
1. What we collect
Your account
- Your email address.
- Your password, stored only as a one-way bcrypt hash. We can never see your real password.
What you create
- Photos you add to albums. Before saving, we remove hidden photo details such as GPS location, camera details and other EXIF/XMP information, and we make a smaller preview copy so the app loads faster.
- Albums and book designs: titles, place names, page layouts, text you type, stickers and cover and back-cover choices.
Invite friends (optional)
- If you join with a friend's invite code, we remember who invited you. Your friend sees a hidden version of your email (for example a••••@gmail.com) and whether you have confirmed your email and added photos, so they can follow their reward. Nothing else about you is shown to them.
- To confirm your email, we send a 6-digit code to it.
Printed book orders
- Your delivery name, phone number, district, address, city and landmark, and a copy of the book you ordered, so we can print and deliver it.
- Order details: size, pages, copies, prices, order status and, when online payment is used, the payment reference.
Security information
- Sign-in records: time, IP address, a short device/browser description and whether the sign-in worked. We use these to show you your login activity and to stop people trying to break into accounts.
Ads
- The free app shows ads from Google AdMob. AdMob may collect device information such as your advertising ID, IP address and how you interact with ads. See how Google uses data from partner apps. You can reset or delete your advertising ID, or opt out of personalised ads, in your phone's settings (Settings → Google → Ads, or Settings → Privacy → Ads).
We do not collect your contacts, your location, your microphone, or photos you have not chosen to add.
2. Why we use it
- To create and protect your account (sign-in, password reset emails, security alerts).
- To store your albums and show them to you on your devices.
- To print and deliver books you order, and to keep accurate payment records.
- To show ads that keep the app free.
- To prevent spam, abuse and break-in attempts.
We do not sell your data, and we do not use your photos for advertising or to train AI.
3. Who helps us run MemoraBook
| Service | What it does | Data it handles |
|---|---|---|
| DigitalOcean (server in Bengaluru, India) | Runs our app server and database | Account, albums, orders, security records |
| Cloudflare R2 | Stores photos and print files privately | Your photos and book print files |
| Cloudflare Turnstile | Checks that sign-up, login and password-reset requests come from a real person | Device and browser signals, IP address |
| Resend | Sends our emails (reset codes, security notices) | Your email address and the email content |
| Google AdMob | Shows ads in the app | Device and ad information (see above) |
| eSewa (when online payment is available) | Processes payments for printed books | Payment details; we never see your eSewa PIN or password |
We may also share information if the law requires it, or to protect people from harm or fraud.
4. How we protect it
- All connections use HTTPS encryption.
- Delivery details on orders are encrypted in our database with AES-256. Photos are stored privately and are encrypted at rest by our storage provider. They are only available to your signed-in account.
- Our database and storage are not reachable from the internet. Access is limited to the owner, protected with security keys.
- Logging in again is required after a password change, and you can log out of all devices from the app.
No system is 100% secure, but we work hard to protect your data and will tell you if a breach affects you.
5. How long we keep it
- Account, albums and photos: until you delete them or delete your account.
- Delivery details on orders: until you delete your account. If an order is still being printed or delivered, we keep them until it arrives.
- Payment records (order number, amounts, payment reference) are kept after account deletion, without your name or contact details, because the law requires us to keep accurate financial records.
- Backups: our nightly database backups are deleted automatically after 14 days, so deleted data fully disappears from backups within 14 days.
6. Your choices and rights
- See, change or delete your albums and photos in the app at any time.
- Delete your account: in the app (Account → Delete my account) or from this website.
- Ask us for a copy of your data, or ask a question about it, by emailing memorabook9@gmail.com from your account's email address. We reply within 30 days.
7. Children
MemoraBook is not made for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.
8. Changes to this policy
If we change this policy, we will update the date at the top. For important changes we will also tell you in the app or by email.
9. Contact
Umesh Mishra, MemoraBook, Dhangadhi, Sudurpashchim Province, Nepal. Email: memorabook9@gmail.com.