Privacy Notice

• Account data — email address and login credentials, or your Google sign-in identifier. Used to create and secure your account. Legal basis: performance of our contract with you.
• Profile data — your name and date of birth. Used to draw your rings and label them with the right years. Legal basis: contract.
• Your content — memory titles, narratives, reflection fields and uploaded photos. Stored so we can show them back to you. Legal basis: contract.
• Share links — the temporary tokens you generate, and their expiry. Legal basis: contract.
• Technical and security data — IP address, device and browser information, and error logs. Used to keep the service running and to prevent fraud and abuse. Legal basis: legitimate interests.
• Support messages — what you send us when you ask for help. Legal basis: legitimate interests.

We do not use your memories for advertising, we do not sell them, and we do not use them to train AI models.

• Service providers — hosting, database, storage and error-reporting providers who process data on our behalf under contract.
• Paddle, our Merchant of Record, for the sale of membership, subscription management, payments, invoicing and tax compliance.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where we are legally required to disclose.
• Anyone you give a share link to. Share links show the locked Tabletop view — titles and colours only — and expire automatically.

We keep your account and content for as long as your account exists. If you delete your account, we delete or anonymise your data once it is no longer needed for legal, accounting or fraud-prevention purposes. Share links expire and are removed automatically.

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent where we rely on it. Write to support@beknown.cloud and we will respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority.

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access rules so that one account cannot read another's memories, and signed, expiring links for photos.

We use only essential cookies and local storage — to keep you signed in and to remember preferences like your theme and whether you've seen the colour key. We do not use advertising cookies. You can clear or block cookies in your browser, though signing in will stop working.