Privacy Policy

Effective May 20, 2026

Aldermere holds some of the most personal data that exists — the voices of people who are dying, the photographs of people already gone, the stories that exist nowhere else. We understand that people bring these things to us not because they have assessed our data practices carefully, but because they trust us. That trust is the foundation everything here is built on.

1. What Data We Collect

Data you give us directly

Account information — your name, email address, and password when you create an account.
Memory content — photographs, videos, voice recordings, and written memories you contribute to the platform. This is the heart of what you bring to Aldermere.
Names and relationships — the names of people you tag in memories or invite to communities.
Community information — the communities you create or belong to, their members, and the memories shared within them.
Voice recordings — stored in audio form alongside any automatic transcription. You may delete your voice recordings at any time, subject to the same retention terms as other content (see Section 5).
Billing information — your subscription status and transaction history. Payment card processing is handled by our payment provider; we do not store full card numbers.

Data generated by your use of the platform

Usage data — which features you use and how you navigate the platform, used internally to operate and improve the service.
Device and connection information — device type, operating system, and connection data necessary to deliver the application.

Data we do not collect

We do not use facial recognition on photographs. We do not build behavioral profiles for targeting purposes. We do not collect data for advertising.

2. How We Use Your Data

The primary use of all data on Aldermere is to provide you with the platform: storing your memories, making them accessible to the people you have shared them with, processing voice recordings for transcription, and delivering the features you have subscribed to.

We use technical and usage data to diagnose problems, improve reliability, and develop new features. This analysis is internal and does not involve sharing your content with third parties.

We use your email address to deliver account-related communications: confirmations, notifications relevant to your memories, and security alerts.

3. What We Will Never Do

We will never serve advertising. Your data is never used for advertising targeting. No third party pays Aldermere to reach you through the platform.

We will never sell or license your data. We will never sell, license, rent, or otherwise transfer your data — in any form — to any third party for commercial purposes.

We will never use your content to train AI models. Your photographs, voice recordings, written memories, and any other content you contribute will never be used to train machine learning models or fine-tune AI systems.

We will never use life events as marketing triggers. The fact that someone just lost a parent, or that a child just left home, is not a marketing signal. Life events on Aldermere are preserved as part of your story.

4. Who We Share Data With

We share data with service providers strictly necessary to operate the platform — cloud infrastructure (Google Firebase), transcription services (OpenAI Whisper), identity providers (Google, Apple) for authentication, and payment processing. Each provider is bound by a contractual obligation prohibiting any secondary use of your data.

When you share a memory with community members, those people can see the content you have shared with them. You control this through community membership.

We do not share your data with any other third parties except as required by law.

5. Data Retention and Deletion

When you delete a memory, it is marked for deletion and retained for 30 days in case you change your mind. After 30 days, it is permanently deleted. However, if another member has copied that memory to a different community, the copy belongs to that community and is not affected by your deletion. The act of contributing a memory to a community means it becomes part of that community's shared record.

When you delete your account, your personal data is deleted within a reasonable operational window. Memories you contributed to shared communities remain part of those communities' records, consistent with the principle above, unless you specifically remove them before closing your account.

You may export your full archive at any time, in a portable format, regardless of your plan status. This right is never gated behind a paid plan.

6. Your Rights

Regardless of where you are located, you have the right to access, correct, delete, and export the personal data we hold about you. To exercise any of these rights, contact us at the address below.

If you are located in the European Economic Area, you have additional rights under GDPR. If you are a California resident, you have additional rights under CCPA. Aldermere does not sell personal information.

7. Children's Privacy

Aldermere is not intended for use by people under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have done so, we will delete it promptly. Children may appear in memories contributed by adults — this is consistent with the platform's purpose and is governed by the community's privacy controls.

8. Security

We take the security of your data seriously, proportionate to its sensitivity. Measures in place include encryption at rest and in transit, Firebase Authentication for all access, Firestore Security Rules as the authoritative access enforcement layer, and regular security review. No system is perfectly secure. If you believe your account or data may have been compromised, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will provide notice of material changes no less than 30 days before they take effect. Changes that weaken the commitments in Section 3 — the prohibitions on advertising, data selling, and AI training use — will be communicated clearly and prominently to affected users before taking effect.

10. Contact

Questions, requests, and concerns about your privacy may be directed to:

Aldermere
Privacy inquiries: privacy@aldermere.com