Privacy Policy

Scope

This Privacy Policy applies to MemoryDensity only. It does not govern the Gavin Grant Consulting consulting website at gavingrant.com, which has its own privacy policy. Waitlist emails, account data, and consulting-site newsletter or contact form data are stored and processed separately.

Information we collect

We collect the following categories of information:

• Account information: Your email address when you sign up or log in using a magic link (passwordless authentication).
• Profile information: Your age, timezone, preferred daily prompt time, notification channel (push or email), and notification preferences (including weekly email digest opt-in).
• User content: Your daily prompt responses (up to 280 characters), first-time event logs (category, optional label, and date), and weekly Time Capsule snapshots that include copies of your prompt responses and first-times for that week.
• Waitlist information: Your email address if you join the early-access waitlist before creating an account, along with a source tag and timestamp.
• Push notification data: If you enable push notifications, we store your browser push subscription endpoint and associated encryption keys.
• Technical and usage data: Authentication session cookies, optional analytics data via Google Analytics (only if you accept non-essential cookies), and theme preference stored locally in your browser.

We do not collect:

• GPS or precise location data
• Photos, videos, or other media uploads
• Phone numbers or payment information
• Passwords (we use magic-link email authentication)

The "place" category in first-time logs refers to a type of life event you choose to record (for example, visiting a new restaurant), not geolocation data.

How we use your information

• Provide and operate MemoryDensity, including daily prompts, scoring, and Time Capsules
• Send transactional notifications you configure, such as daily prompt reminders and weekly capsule digests
• Generate shareable capsule images when you choose to share a Time Capsule
• Manage your account, preferences, and in-app notifications
• Prevent abuse of the waitlist signup form (including temporary IP-based rate limiting that is not stored in our database)
• Improve the product through optional analytics, if you consent to non-essential cookies
• Respond to your requests and support inquiries

We do not use your journal content for advertising, sell your personal information, or use AI/LLM services to process your responses.

Legal bases for processing (EEA/UK)

If you are in the European Economic Area or United Kingdom, we process your personal data on the following bases:

• Contract: To provide the MemoryDensity service you request, including storing your responses and generating capsules.
• Consent: For optional analytics cookies, push notifications (where required), and waitlist communications about launch access.
• Legitimate interests: To secure and improve the service, prevent abuse, and operate the product, balanced against your rights.

Third-party service providers

We use trusted third parties to help us operate MemoryDensity. They process data on our behalf and only as needed to provide their services:

Each provider maintains its own privacy policy. We encourage you to review their policies for details on how they handle data.

How we store and protect your data

We use HTTPS to protect data in transit between your browser and our servers. We use row-level access controls so that, through the app, you can access only your own data. Our database is hosted on Supabase's managed infrastructure, which includes platform-level storage protections.

Your prompt responses and first-time entries are stored in readable form in our database so we can display them back to you, include them in Time Capsules and email digests, and operate the service. We do not use field-level or end-to-end encryption for journal text. As the operator, we can access stored content as needed to run the service (for example, automated emails, support, or maintenance).

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

Data retention

• Active accounts: We retain your data while your account is active.
• Account deletion: When you delete your account in Settings, we permanently delete your data from application tables (including prompt responses, first-times, Time Capsules, notifications, push subscriptions, and your profile) and remove your authentication record.
• Time Capsule snapshots: Weekly capsules store point-in-time copies of your content. Deleting individual prompt responses or first-times does not change text already saved in past capsules until those capsules are removed through account deletion.
• Waitlist: We retain waitlist emails for 12 months from signup, or until we send you a launch invite — whichever comes first. You may request removal at any time by emailing us.
• Push subscriptions: Removed when you unsubscribe, disable push in Settings, delete your account, or when the push service reports the subscription as expired.

Your choices and rights

• Access and update: View and edit your prompt responses and first-times in the app. Update notification preferences in Settings.
• Delete: Delete your account and associated data in Settings.
• Opt out of emails: Turn off the weekly Time Capsule email digest or switch to push notifications in Settings. Daily prompt emails follow your chosen notification channel.
• Waitlist removal: Email gavin@gavingrant.com to request removal from the waitlist.
• Analytics cookies:Accept or reject non-essential cookies using the banner on our site, or change your choice anytime via "Cookie preferences" in the footer. See our Cookie Policy.

California residents: You may have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising these rights. To make a request, email gavin@gavingrant.com. We do not sell personal information.

EEA/UK residents: You may have the right to access, correct, delete, restrict, or object to certain processing, and to data portability. Contact us at gavin@gavingrant.com. You may also lodge a complaint with your local supervisory authority.

We do not currently offer automated data export in the app. You may request a copy of your data by emailing us.

Sharing and user-initiated disclosure

We do not sell your personal information. We share data only with service providers listed above, when required by law, or to protect rights and safety.

If you use the share feature for a Time Capsule, you choose to generate and share an image that may include your weekly content. We do not publish your journal entries publicly unless you share them yourself.

Children's privacy

MemoryDensity is not intended for anyone under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

International transfers

We are based in the United States. Your information may be processed in the United States and other countries where our service providers operate. Those countries may have different data protection laws than your jurisdiction.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. For material changes, we may also notify you by email or through the app.

Contact us

Questions about this Privacy Policy or your data? Contact Gavin Grant Consulting:

• Email: gavin@gavingrant.com
• Operator website: gavingrant.com