Privacy Policy
Last updated August 30, 2026
KeepsakeMe holds photos, voice recordings and names of real people, so we treat privacy as central. This policy explains what we collect, why, and the choices you have. We follow Canada's PIPEDA and Quebec's Law 25.
1. Scope
This policy covers the personal information we handle when you create, fill, share or open a Memory Deck, or contribute to one.
2. What we collect
From creators: your email address, the recipient's first name and the occasion, and the photos, words and voice recordings you add.
From contributors: the name you sign with and what you add to a card.
Automatically: limited technical data needed to run and protect the service, including a hashed — not readable — form of IP addresses used to rate-limit access-code attempts.
Payment details are handled by Stripe. We receive confirmation and tax information, never your full card number.
3. How we use it
To create and run your deck, process your payment, send you transactional email (verification codes, receipts, notifications), print and ship a magnet if you buy one, and keep the service secure.
We do not sell your personal information, and we do not use it for advertising.
4. Where your data lives
We aim to store your deck's content in a Canadian region.
5. How long we keep it
We keep your deck and its content while your account is active and for a defined period afterward. The exact retention period is being finalized and will be stated here before launch.
You can ask us to delete your data sooner.
6. Your rights
You can ask to see the personal information we hold about you, correct it, delete it, or receive a copy in a portable format, and you can withdraw consent where our processing relies on it.
Contributors can ask us to remove what they added and to stop contacting them. To make any request, email contact@keepsakeme.ca.
7. How we protect it
Access to decks is controlled per account. Share links are unguessable secrets; access codes and session tokens are stored only in hashed or encrypted form; and photographs are served through short-lived signed links rather than public URLs.
8. Children
KeepsakeMe is intended for adults. It is not directed at children, and we do not knowingly collect personal information from them.
9. Privacy officer and contact
We have designated a person responsible for privacy at KeepsakeMe. Their name and title will be listed here before launch, as Quebec's Law 25 requires.
To reach them, or to make any request under this policy, email contact@keepsakeme.ca.
10. Changes to this policy
If we make a material change, we will update the date below and, where appropriate, notify you.
Contact
Questions about this document? Email us at contact@keepsakeme.ca.