Privacy Policy
Version 1.1 • Effective from 12 June 2026
1. Introduction
The Memory (https://memory.korat.tech) (“we”, “us”) is a platform for creating digital memories to give to the people who matter to you. We take your privacy seriously. This policy explains how we collect, use and disclose your personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
2. Data We Collect
When you use the service, we may collect the following data:
- Google account data — your name, email address and profile picture, when you sign in with Google.
- Profile data (optional) — phone number, date of birth, gender, occupation, relationship status and the occasion you are creating for, if you choose to provide them.
- Content you create — images, text, audio files, video links and any other content you upload into a memory.
- Payment data — handled entirely by Stripe. We do not store your card number or bank account details on our systems (we keep only the transaction reference and the payment status).
- Referral payout data — your PromptPay number or bank account, only if you request a payout from the referral programme.
- Usage data — visit statistics via Google Analytics, cookies required to sign in, and device data for push notifications (if you enable them).
3. Why We Use Your Data
- To create, store and share memories as you have asked us to.
- To process payments and issue records of your transactions.
- To send notifications relating to your account — for example, when someone sends a heart or reacts to your memory.
- To generate AI cartoon images at your request (images you upload are sent to our AI provider for processing).
- To analyse and improve the service overall (anonymised, aggregated statistics).
- To pay out referral rewards when you request them.
4. Disclosure to Third Parties
We do not sell your personal data. We disclose only what is necessary to the service providers that keep the platform running:
- Supabase — database and file storage.
- Stripe — payment processing (credit/debit cards and PromptPay).
- OpenAI — processing only the images you upload for cartoon generation.
- Google — sign-in (OAuth) and Google Analytics.
- Vercel — website hosting.
We may also disclose data where we are required to do so by law or by order of a competent authority.
5. Sharing Content and the Universe Feed
- An activated memory is reachable through a public link — anyone who has the link can open it. Please share the link only with people you trust; you can also set a PIN to protect the content.
- The Universe feed — image and text stories from your activated memories, together with your name and profile picture, are shown to other users in the Universe feed by default. This includes stories placed behind a PIN (a PIN only protects the viewing sequence of the link). If you would rather they were not shown, you can turn sharing off for any individual memory at any time, from your dashboard or the memory's edit page.
6. Retention and Security
We keep your data for as long as your account is active or as long as it is needed to provide the service. When you delete a memory, the content it contains is removed from our systems. Payment records may be retained longer where accounting and tax law requires it. We apply industry-standard security measures, such as encryption in transit (HTTPS) and database access controls (Row Level Security).
7. Your Rights Under the PDPA
You have the following rights in relation to your personal data:
- To access your personal data and request a copy of it.
- To have your data corrected and kept up to date.
- To have your data erased or destroyed, including deletion of your account.
- To restrict or object to the processing of your data.
- To withdraw consent you have previously given.
- To lodge a complaint with the Personal Data Protection Committee.
To exercise these rights, email us at tao.isaman@gmail.com. We will act within the time limits set by law.
8. Cookies
We use cookies that are necessary to sign you in and keep your session alive, and Google Analytics cookies to understand how the service is used overall. You can configure your browser to refuse cookies, but some features may then stop working.
9. Minors
This service is not aimed at minors. If you are under 20 years of age, you should obtain consent from your parent or guardian before using it.
10. Changes to This Policy
We may update this policy from time to time. If we make a material change, we will notify you and ask for your consent again in the app before you continue. The latest version is always shown on this page.
11. Contact Us
If you have any questions about this Privacy Policy, contact us at tao.isaman@gmail.com