Privacy Policy — MemoryShield

Effective Date: 5 September 2026

This Privacy Policy explains how MemoryShield ("MemoryShield," "we," "us," or "our") collects, uses, and shares information when you use the MemoryShield website, application, and related services at memoryshield.life (the "Services").

1. Who we are

MemoryShield operates an encrypted digital-legacy vault with named trustees, an automated email life-check, and a multi-step verification process before designated vault items may be released. We are not a will service, fiduciary, executor, or a legal or medical death certifier.

2. Information we collect

Depending on how you use the Services, we may collect:

• Account information: name, email address, and authentication data (including if you sign in with a third-party identity provider).
• Contact details you provide: phone number where you enable SMS-based login multi-factor authentication or otherwise supply a phone number.
• Vault content: passwords, documents, videos, messages, and other items you choose to store.
• Trustee and backup-contact information: names, email addresses, relationships, and access settings you configure. Trustees may receive vault access only after release. Backup contacts receive notifications only and do not receive vault access by that role.
• Life-check and verification data: send/response status, tokens, timestamps, verification workflow state, and related logs.
• Billing information: handled by our payment processor (Paddle). We receive subscription and entitlement data needed to run your plan; we do not store full card numbers.
• Usage and technical data: IP address, device/browser information, approximate location derived from IP, and product interaction logs.
• Support communications: messages you send to us by email.
• Optional verification materials: if you enable optional legal-document steps in verification, documents you or others upload for that workflow.

3. How we use information

We use information to:

• provide, secure, and maintain the Services;
• operate life-check by email and multi-step verification before release;
• notify trustees and backup contacts as your settings require;
• process subscriptions and plan entitlements;
• prevent fraud, abuse, and security incidents;
• improve the Services;
• communicate with you about the Services;
• comply with law and enforce our Terms.

4. Encryption, keys, and access (important)

Data in transit is protected with TLS. Data at rest is protected with AES-256 on our hosting infrastructure (Google Cloud). Extra encryption on individual vault items is optional.

MemoryShield holds master encryption keys (key escrow) so automated trustee release can work after verification. This is not a zero-knowledge architecture and is not default client-side end-to-end encryption where only you hold the keys.

Authorized operators may access vault contents when the release protocol requires it (including to complete release to verified trustees). If you lose account access, recovery options depend on the authentication methods you configured; we cannot honestly promise that vault contents are recoverable in every failure mode.

5. Life-check channel

Life-check check-ins are sent by email. We do not claim SMS or mobile-app life-check as a live channel in this Policy.

6. When we share information

We do not sell or rent your personal information. We share information only:

• with trustees, after release conditions in your configuration are met;
• with backup contacts, for notifications under your configuration (not vault access);
• with service providers who help us operate the Services (for example hosting, email delivery, authentication, and payment processing), under contractual protections appropriate to their role;
• when required by law, legal process, or to protect rights, safety, and security;
• in connection with a corporate transaction (merger, acquisition, or asset transfer), subject to continuing privacy protections.

7. International processing

The Services are operated with infrastructure that may process data in the United States and other locations where we or our providers operate. If you access the Services from another country, you understand your information may be transferred to and processed in those locations with safeguards appropriate to the provider and applicable law.

8. Retention

We retain account and vault data while your account is active and as needed to provide the Services, complete an in-progress verification or release workflow, resolve disputes, and meet legal obligations. You may request deletion as described below, subject to those needs.

9. Your choices and rights

Subject to applicable law, you may:

• access or export certain data from your account;
• correct account information;
• delete your account or request deletion of personal information;
• withdraw consents where processing is consent-based;
• contact us with privacy questions or complaints.

Email: privacy@memoryshield.life

We will respond as required by applicable law. Some requests may be limited where we must retain data for security, legal, or ongoing release-protocol reasons.

10. Children

The Services are not directed to children under 18. We do not knowingly collect personal information from children under 18.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on the Services and update the effective date. For material changes, we may also notify you by email or in-product notice.

12. Contact

Privacy: privacy@memoryshield.life Legal: legal@memoryshield.life Website: https://memoryshield.life/