Privacy Policy

Your account. A phone number, which is the only way to sign up and sign in. Your name and an email address, which you confirm when you set up your account. We send receipts and event information to that email, and it's how you get back into your account if you change your phone number. Optionally a profile picture.

Your city. The city you choose, so Home can show events near you. If you tap Use my location, your phone or browser works out the nearest city on our list; only that city is saved, and your exact location never leaves your device.

Events and tickets. Events you create or attend, including the venue and address you enter for an event you host, the tickets you hold, what you paid, and the time a ticket was scanned at a door. The kinds of events you hold tickets to or host are used to pick the events Upcoming near you shows.

What you post. Group chat, Tribe and Crew messages, private messages and message requests, photos and videos you share in a chat, a private message or Memories, Lost & Found posts and their photos, and your likes and emoji reactions.

Reports and blocks. When you report something, what it was, your reason and any note, and a copy of it as it was when you reported it, so we can review it even if it's deleted. The people you block. Only Memoir's admins see reports, and the person you report or block isn't told who you are.

Message settings. Who can send you message requests (People going to my events, People at private events, or No one), and whether we tell you when requests are waiting.

Guest lists. If you host an invite-only event, or are one of its Co-hosts, the names and phone numbers of the people you add to its guest list — including people who don't have a Memoir account. A phone number is seen only by the person who added it. Once someone's invitation has gone out, everyone invited to that event can see them in Who's going, with whether they're going, maybe or not coming: by the name the host gave them, or by their own Memoir name and photo once they've opened or answered the invitation.

People scanning tickets. Scanning tickets needs a Memoir account. The host, admin Co-hosts, the Crew and anyone the host asks to scan see each ticket holder's name and photo and whether they're in, never a phone number or email. In the app, the camera reads a ticket's code on the phone itself: no picture or video is taken or kept. We keep who checked each ticket in and when, each ticket the door turned away, by whom and why (already in, say, or doors not open yet), and whether each scanner has opened Scan tickets.

Businesses. If you run a business on Memoir, its name, logo and business email. We email that address about its Stripe verification and payouts, and when our terms or fees change.

What you've opened. The events you open while signed in, for your Recently viewed list, and when you last opened each chat, so the app can tell which messages are new to you.

Notification tokens, if you turn push notifications on, so we can send them to your device, and your phone's time zone, so a notice about your own messages comes at a sensible hour where you are.

Sign-in safety. A random id for each phone or browser you sign in on, which we keep only in scrambled form, and when your account was last used. If it hasn't been used in 90 days and you sign in somewhere new, we also email you a code.

Request counts. To limit abuse, we count requests: by your account for many things you do signed in, and by your IP address for things anyone can open, like the event list, and for getting an account back, where the email entered is counted too. The counts are deleted after about two days.

If you choose people from your contacts when inviting guests, Memoir reads your address book on your device. We don't upload it, copy it, or scan it. Only the names and phone numbers of the people you tap are sent to us, and only you see the numbers you add.

In the app, contacts are how you add guests. On memoir.events you can type numbers instead. Invite texts are sent from your own phone, by you — Memoir never sends text messages on your behalf, and never texts anyone who isn't on Memoir.

We use other companies to run parts of Memoir. They only receive what they need:

• Clerk — signing in. It makes the code that verifies your phone number, and Twilio texts it to you.
• Twilio — sending Memoir's texts: the code you sign in with, the code we text before your account's email can change, and, to people on Memoir, your ticket, a reminder two days before a paid event, and a message if an event you hold a ticket for changes or is cancelled. It receives your phone number and the text, and for a ticket the picture of its Event Art, nothing else. If you text or call our number, Twilio passes us your number and your text, or the voicemail you leave, by email.
• Stripe — payments and organizer payouts. Card details go straight to Stripe and never reach our servers.
• Google — checking the web links people post in chats and messages against Google Web Risk, its list of scam and harmful websites. It receives only the link, never the message, who sent it or the event. And, on Android phones, reading ticket codes: the camera's code reader is Google's ML Kit, which works on the phone. It sends Google diagnostics about how it ran (the app, the device, an install ID and any errors), never what the camera sees or the code it read.
• Resend — sending our emails: receipts, event information, confirmation links and account recovery codes.
• Cloudflare — storing the photos and videos people upload, profile pictures, business logos and Event Art, and passing on email sent to our memoir.events addresses.
• Vercel — running the website and the servers the app talks to.
• Neon — hosting our database.
• Sentry — crash reports, so we can fix what breaks: what went wrong, the device model and system version, and the app's version. Reports don't include your account, your messages or what's on your screen, and we blank out phone numbers and email addresses. Each report carries an anonymous ID for the app install, not linked to your account.
• Expo — delivering push notifications to your device, and updates to the app. Each time the app starts, it asks Expo whether an update is ready, which shares your device's internet address, an anonymous install ID and the app's version. Expo passes notifications to Google (Firebase Cloud Messaging) for Android phones and to Apple (Apple Push Notification service) for iPhones.
• Photon, a search of OpenStreetMap data run by komoot, or Mapbox when we have it turned on — suggesting venue addresses while a host types one. Our servers send only what was typed and the location of the host's chosen city.

We don't sell your data, and we don't share it for advertising. Memoir has no advertising and no third-party tracking.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

An event's group chat, Memories and Lost & Found are visible to people holding a ticket to that event, and to its hosts. On a free invite-only event, guests who answered their invite can see them too, and after an event is cancelled, so can the people who held tickets to it. A Tribe's chat and Memories are seen only by its members. Someone asked into a Tribe sees who's in it on the invite. Anyone going to a public event can find you by name and ask you into their Tribe, unless your profile is Private or one of you has blocked the other.

A private message is seen only by the two people in it. A message request is seen only by the person you sent it to. Likes and emoji reactions show to everyone who can see the message or Memory. An event's Crew chat is seen only by its organizer, Co-hosts and the Crew they add. When you block someone, you stop seeing what they post and send, and they aren't told.

Before a photo uploads, your phone or browser makes a new copy of it, which leaves out where it was taken and the other details cameras save inside a photo. Videos upload as they are, so a location your phone saved in a video goes with it.

Photos and videos are stored at unguessable web addresses. Anyone given that exact address can open the file, so treat a link you share as public.

That applies to every event, including private and invite-only ones. Keeping an event unlisted keeps it out of search and the public feed; it does not put a lock on the files themselves. An address also keeps working once the event is over, after a ticket is refunded, and after someone leaves an event — so a photo you posted can still be opened by anyone who saved its address while they had access.

In Settings you choose who can see your profile: Public (the default), Event guests only, or Private. Public means anyone can open your profile and see you among the guests going to an event. Event guests only limits that to people at the same events. Private means no one can open your profile and you're hidden from the guests going to public events. With every setting, your name shows on your own messages and Memories posts, hosts see the names of their guests, and everyone at a private event can see the other guests. Your profile stays visible while you're hosting or co-hosting a public event that hasn't ended, whatever you chose. If someone makes you a Co-host, we tell you.

Memoir is for people 18 and older. It isn't intended for anyone under 18, and we don't knowingly collect their information.

If this policy changes in a way that affects you, we'll say so in the app rather than quietly editing this page.

Questions, or want a copy of your data? Email privacy@memoir.events.