Effective date: 2026-09-30

Last updated: 2026-09-30

1. Who we are

MemorySprout is developed and operated by the individual developer ManLin Zhao, whose correspondence address is [TO BE COMPLETED: correspondence address] ("we", "us", or "our"). We are responsible for the personal information described in this Policy.

Privacy contact: [TO BE COMPLETED: privacy contact email]

Support contact: [TO BE COMPLETED: support contact email]

Website: [TO BE COMPLETED: public website URL]

MemorySprout is an iOS app that helps you turn selected photos into Memories: cloud AI analysis can produce a short Story and related generated imagery (such as postcard-style artwork), which you can edit, save, and share. This Policy explains how we handle information when you use the app and its supporting backend services. It covers both in-app SDKs and providers reached through our server APIs.

2. Information we process

Photos and Memory content. We process the photos you choose and upload for Create / Sprout, compressed copies used for analysis, generated Stories and artwork, edits you make, and related Memory records. Photos may contain faces, other people, text, locations, or sensitive details.

Photo metadata. On device we may read EXIF and GPS information from a selected photo to derive capture time and, when helpful, an approximate place label. Raw GPS coordinates are not stored on our servers. We may store a boolean flag indicating whether the photo contained location metadata (contains_location_metadata). Unnecessary EXIF is not required for cloud storage of your Memory assets.

Account and authentication. You can use core features with a guest / anonymous session. If you sign in with Sign in with Apple or Google, we receive the account information permitted by your authorization, such as a provider user identifier and any name or email you choose to share. Apple may provide a Hide My Email relay address instead of your real email. We process authentication tokens as needed to verify sign-in and maintain your MemorySprout session. We do not receive your Apple ID or Google password. Signing in does not authorize us to access your Apple Photos library, Google Photos, Gmail, contacts, or other unrelated provider content.

Google Sign-In uses the standard identity scopes needed for sign-in (typically OpenID / email / profile). We do not request Google Photos or Drive scopes.

Usage analytics. We use Google Analytics for Firebase to understand product usage (for example app interactions and events, session information, app-instance identifiers, device model, OS, app version, language, and approximate region). Analytics collection is enabled in the app. There is currently no separate in-app analytics opt-out toggle; you can use iOS system privacy controls that apply to your device.

Crash and diagnostics. We use Firebase Crashlytics for crash reports, stack traces, app/device information, and installation identifiers. We may also send limited, non-secret diagnostic events to our backend (for example stable error codes and durations) to troubleshoot client-server issues. We do not intentionally put passwords, identity tokens, or full email addresses into diagnostic payloads.

Operational logs. Our backend and infrastructure providers may process request metadata such as IP addresses, timestamps, and status codes as configured for security and reliability.

Support. If you contact us, we process the contact details and message content you provide so we can respond.

3. How and why we use information

We use information to:

• provide Memory creation, Story / artwork generation, editing, saving, and sharing;
• authenticate users, maintain guest and signed-in sessions, and sync Memories across devices when you are signed in;
• reclaim guest Memories to your account after sign-in where that feature applies;
• improve stability and understand product usage;
• prevent abuse and meet legal obligations.

Where European Economic Area or UK data protection law applies, our legal bases include: performance of a contract for processing needed to deliver the service you request; consent where the law requires it for optional processing; legitimate interests for proportionate security, abuse prevention, and necessary diagnostics after balancing your rights; and compliance with legal obligations.

Starting Create / Sprout with a selected photo is your request to process that photo through our cloud pipeline, including third-party AI providers described below. If you do not want a photo processed in the cloud, do not submit it for Create / Sprout.

4. Cloud AI processing

When you create a Memory, your selected photo (typically a compressed analysis copy) and related prompts or context travel through MemorySprout Edge Functions hosted on Supabase, then to one or more AI providers configured for that environment. Depending on configuration, providers may include:

• DeepSeek (analysis);
• OpenRouter (analysis and/or image generation; may route to models such as Google Gemini image models);
• Alibaba Cloud DashScope / Qwen (analysis and/or image generation when enabled).

Inputs can include image bytes and text context needed for Story analysis or postcard-style generation. Outputs include Story text, structured analysis fields, and generated image URLs or assets we associate with your Memory.

We do not use your photos or Stories to train our own AI models. Third-party providers process inputs to return results under their terms and our API configuration; they may retain limited data for abuse monitoring or as stated in their policies. We do not sell your photos for advertising.

AI-generated Stories and artwork are creative interpretations and may be inaccurate. They are not reliable statements about a person’s identity, health, emotions, or history. Upload only photos you have the right to use and share for this purpose. Avoid submitting sensitive personal data or identifiable photos of children unless you have the required authorization.

You can stop future AI processing by not creating new Memories. Deletion of already processed content is described below.

5. Device permissions and your choices

Photos. Selection uses the system photo picker. We only process photos you select for Create / Sprout or related flows. Access to a photo on your device does not by itself mean it has been uploaded for AI processing.

Location. If a selected photo lacks EXIF coordinates, the app may request Location When In Use to help resolve an approximate place for display. Coordinates are used on device for that purpose and are not stored as raw GPS on our servers.

Export and share. Saving or sharing a Memory uses iOS share / Photos flows you initiate. Content you export is subject to the destination you choose.

Sign-in management. Profile → Account → Sign-in Methods lets you manage Apple / Google links when signed in. Sign out, revoke provider authorization, delete the app, Clear Personal Data, and Delete Account are different actions.

6. When we disclose information

We disclose information to providers that help deliver the service, including:

• Supabase - authentication, Postgres database, object storage for uploaded photos and generated assets, and Edge Functions;
• Apple - Sign in with Apple;
• Google - Google Sign-In, Firebase Analytics, Firebase Crashlytics;
• AI providers listed in Section 4.

Google privacy information: https://policies.google.com/privacy

Firebase privacy: https://firebase.google.com/support/privacy

Supabase privacy: https://supabase.com/privacy

We require providers that process information on our behalf to apply appropriate contractual and security protections consistent with this Policy and applicable law.

We may disclose information when legally required, to protect rights or safety, or in connection with a transfer of the app or related assets subject to applicable safeguards. Information you deliberately share or export is received by the destination you choose.

Advertising, sale, and tracking. We do not sell personal information. We do not use your Memory photos for cross-context behavioral advertising. The app is not configured around IDFA-based advertising tracking. Product analytics via Firebase is used to improve MemorySprout, not to sell ads.

7. Storage and retention

Primary hosting and storage for account and Memory data is provided by Supabase (database and object storage). Processing regions depend on our Supabase project configuration and the regions used by AI providers.

Retention for photos, generated artwork, Stories, and account records depends on:

• whether you continue using the account;
• whether you delete individual Memories or clear personal data;
• whether you delete your account;
• legal, security, or backup requirements.

We do not apply a fixed automatic “delete after 90 days” rule to your Memory assets. We will not arbitrarily delete photos or generated content that represent your personal data assets unless you request deletion, the account is deleted, or law / security requires it.

Approximate practices for related systems:

• Firebase Crashlytics: Google currently describes approximately 90 days before crash traces and associated identifiers begin to be removed from live and backup systems.
• Analytics: retained according to the Firebase project configuration.
• Operational logs and backups: retained for security and recovery on rotating schedules; residual copies may briefly outlive primary deletion.
• AI provider copies: subject to each provider’s API and abuse-monitoring retention.

Content saved only on your device or shared with others is not automatically deleted when we delete our copies.

8. Account deletion and personal data removal

You can manage data in the app:

• Clear Personal Data: Profile → Account → Clear Personal Data (removes uploaded / Memory data associated with the current account path as implemented).
• Delete Account: Profile → Account → Delete Account (permanent account deletion after confirmation).

You may also contact [TO BE COMPLETED: privacy contact email] for assistance.

After account deletion, we delete or anonymize account-related data within a reasonable period, including authentication records, uploaded photos, generated artwork, Stories, and related history, subject to:

• legal obligations;
• security and fraud prevention;
• backup rotation cycles;
• provider deletion timelines.

Deleting your account does not automatically remove:

• files already saved locally on your device;
• content you shared with others;
• copies retained by third-party destinations you chose;
• your Apple or Google account itself.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, and complain to a supervisory authority. Where sale / sharing / targeted advertising rights apply, our practices in Section 6 describe what we do and do not do.

Submit requests to [TO BE COMPLETED: privacy contact email]. We verify requests proportionately, respond within applicable deadlines, and explain any lawful refusal. We do not unlawfully discriminate against you for exercising privacy rights.

For California residents, where the CCPA applies: categories, sources, purposes, retention criteria, and recipients are described in Sections 2-7. We do not sell personal information and do not share it for cross-context behavioral advertising as those terms are commonly defined.

10. International transfers

Your information may be processed outside your country, including in regions used by Supabase, Google, Apple, and AI providers. Those countries may have different privacy laws. Where required, we rely on appropriate transfer safeguards (for example adequacy decisions or standard contractual clauses) together with supplementary measures where necessary. Contact [TO BE COMPLETED: privacy contact email] for more information about transfers.

11. Children

MemorySprout is intended for users aged 13 or older (or the higher age required in your country). It is not directed to children below that age. We do not knowingly collect personal information from users below the applicable minimum age without a valid legal basis and any required parental authorization. If you believe a child has provided information improperly, contact [TO BE COMPLETED: privacy contact email].

Uploading a photo that contains a child is separate from the age of the person using the app; required authorization still applies.

12. Security and updates

We use reasonable safeguards appropriate to the information and risks, including encrypted transport (HTTPS), access controls on backend services, and separation of secrets from the client app. No system can guarantee absolute security.

We update this Policy when practices or legal obligations change. We post the revised date and provide notice of material changes; we obtain fresh consent where required. Publishing a new Policy is not, by itself, consent to a new use of your information.

13. Contact

Individual developer: ManLin Zhao

Correspondence address: [TO BE COMPLETED: correspondence address]

Privacy email: [TO BE COMPLETED: privacy contact email]

Support email: [TO BE COMPLETED: support contact email]

Website: [TO BE COMPLETED: public website URL]

生效日期：2026-09-30

最后更新日期：2026-09-30

通信地址与适用法律管辖地仍标为【待填写】，须在正式上架前补全。

1 关于我们及本政策

MemorySprout 由个人开发者ManLin Zhao开发和运营，通信地址为【待填写：通信地址】。本政策中的“我们”均指该开发者。我们对所述个人信息处理承担责任。

隐私联系：【待填写：隐私联系邮箱】

支持联系：【待填写：支持联系邮箱】

网站：【待填写：公开网站 URL】

MemorySprout 是一款 iOS 应用，帮助您将所选照片转化为 Memory：云端 AI 可生成简短 Story 及相关成片（如明信片风格图像），您可编辑、保存与分享。本政策说明您使用应用及相关后台服务时我们如何处理信息，既覆盖应用内 SDK，也覆盖通过服务器 API 调用的服务商。

2 处理的信息

照片与 Memory 内容。 我们处理您在 Create / Sprout 中选择并上传的照片、用于分析的压缩图、生成的 Story 与成片、您的编辑结果及相关 Memory 记录。照片可能包含人脸、他人、文字、位置或敏感信息。

照片元数据。 本机可能读取所选照片的 EXIF / GPS，用于推断拍摄时间，并在需要时生成大致地点标签。原始 GPS 坐标不会入库。 我们可能仅保存“该照片是否含有位置元数据”的布尔标志（contains_location_metadata）。云端保存 Memory 资产不要求保留多余 EXIF。

账户与认证。 您可以以访客 / 匿名会话使用核心功能。若使用 通过 Apple 登录 或 Google 登录，我们会接收您授权范围内的账户信息，例如提供方用户标识，以及您选择共享的姓名或电子邮箱。Apple 可能提供“隐藏我的邮箱”转发地址。我们处理维持会话所需的认证信息。我们不会获取您的 Apple ID 或 Google 密码。登录本身不授权我们访问 Apple 相册、Google 相册、Gmail、通讯录或其他无关服务。

Google 登录使用标准身份范围（通常为 OpenID / email / profile），不申请 Google Photos 或 Drive 权限。

使用统计。 我们使用 Google Analytics for Firebase 了解产品使用情况（例如交互事件、会话、应用实例标识、设备型号、系统、版本、语言及大致地区）。应用内已启用 Analytics，目前没有单独的应用内统计开关；您可使用 iOS 系统提供的相关隐私控制。

崩溃与诊断。 我们使用 Firebase Crashlytics 处理崩溃报告、堆栈、应用/设备信息与安装标识。还可能向后端发送有限、非密钥的诊断事件（例如稳定错误码与耗时）以便排查联调问题。我们不会故意将密码、身份令牌或完整邮箱写入诊断载荷。

运行日志。 后台与基础设施服务商可能按配置处理 IP、时间戳、状态码等请求元数据。

支持。 您联系我们时，我们处理您提供的联系方式与消息内容以便回复。

3 处理目的及法律依据

我们使用相关信息以：

• 提供 Memory 创建、Story / 成片生成、编辑、保存与分享；
• 认证用户、维持访客与登录会话，并在登录后支持跨设备同步；
• 在适用情况下将访客 Memory 归属到登录账户；
• 改善稳定性并了解产品使用；
• 防止滥用并履行法律义务。

如适用欧洲经济区或英国数据保护法律，处理依据包括：为提供您请求的服务而履行合同；依法需同意时的同意；在权衡您的权益后基于合法利益开展适度的安全、防滥用与必要诊断；以及履行法律义务。

您选择照片并开始 Create / Sprout，即表示请求将该照片经我们的云端流程处理（含下文第三方 AI）。若您不希望照片进入云端处理，请勿提交 Create / Sprout。

4 云端 AI 处理

创建 Memory 时，所选照片（通常为压缩分析图）及相关提示/上下文会经 托管在 Supabase 上的 MemorySprout Edge Functions，再发送至当前环境配置的一个或多个 AI 服务商。视配置可能包括：

• DeepSeek（分析）；
• OpenRouter（分析及/或生图；可能路由至如 Google Gemini 图像模型等）；
• 阿里云 DashScope / 通义千问（在启用时用于分析及/或生图）。

输入可包含图像字节及 Story 分析或明信片生成所需的文本上下文。输出包括 Story 文本、结构化分析字段，以及与您的 Memory 关联的生成图像资源。

我们不会用您的照片或 Story 训练自有 AI 模型。第三方服务商按自身条款及我们的 API 配置处理输入以返回结果；可能因滥用监测或按其政策短暂留存。我们不会出售您的照片用于广告。

AI 生成的 Story 与成片属于创作性解释，可能不准确，不能作为关于人物身份、健康、情绪或经历的可靠事实陈述。请仅上传您有权使用且有权分享的照片。除非已取得必要授权，请避免提交敏感个人信息或可识别儿童身份的照片。

停止创建新的 Memory 即可停止后续 AI 处理。已处理内容的删除见下文。

5 设备权限及您的选择

照片。 通过系统照片选择器选取；我们仅处理您为 Create / Sprout 等相关流程选择的照片。允许访问设备照片本身，不等于已同意上传至云端 AI。

位置。 若所选照片缺少 EXIF 坐标，应用可能请求“使用期间的位置”以解析大致地点用于展示。坐标用于本机解析，不会以原始 GPS 形式入库。

导出与分享。 保存或分享 Memory 使用您发起的 iOS 分享 / 相册流程，目的地规则由其自行适用。

登录管理。 个人中心 → 账户 → 登录方式，可管理 Apple / Google 关联。退出登录、撤销提供方授权、删除应用、清除个人数据与注销账户是不同操作。

6 信息披露及服务商

我们会向协助提供服务的服务商披露信息，包括：

• Supabase - 认证、Postgres、对象存储（上传照片与生成资产）及 Edge Functions；
• Apple - 通过 Apple 登录；
• Google - Google 登录、Firebase Analytics、Firebase Crashlytics；
• 第 4 节所列 AI 服务商。

Google 隐私说明：https://policies.google.com/privacy

Firebase 隐私：https://firebase.google.com/support/privacy

Supabase 隐私：https://supabase.com/privacy

对于代表我们处理信息的服务商，我们要求其采取与本政策及适用法律相符的合同与安全保护。

我们可能在法律要求、保护合法权益或安全所必需时披露信息；应用或相关业务转让时，也可能在适用保障下转移信息。您主动分享或导出的信息由您选择的目的地接收。

广告、出售与追踪。 我们不出售个人信息。我们不会将 Memory 照片用于跨情境行为广告。应用不以基于 IDFA 的广告追踪为核心配置。Firebase 产品分析用于改进 MemorySprout，而非售卖广告。

7 存储及保存期限

账户与 Memory 数据的主要托管与存储由 Supabase（数据库与对象存储）提供。处理地区取决于我们的 Supabase 项目配置及 AI 服务商所在地区。

照片、成片、Story 与账户记录的保存期限取决于：

• 您是否继续使用账户；
• 您是否删除单条 Memory 或清除个人数据；
• 您是否注销账户；
• 法律、安全或备份要求。

我们不会对 Memory 资产适用固定的“满 90 天自动删除”规则。除非您请求删除、账户已注销，或法律/安全要求，我们不会随意删除作为您个人数据资产保存的照片或生成内容。

相关系统大致情况：

• Firebase Crashlytics： Google 当前说明约为 90 天后开始从线上及备份系统删除崩溃堆栈及关联标识。
• Analytics： 按 Firebase 项目配置留存。
• 运行日志与备份： 按安全与恢复需要轮转；主删除后可能短暂残留。
• AI 服务商副本： 受各服务商 API 及滥用监测留存规则约束。

仅保存在您设备或已分享给他人的内容，不会因我们删除己方副本而自动消失。

8 账号删除和个人数据删除

您可在应用内管理数据：

• 清除个人数据： 个人中心 → 账户 → 清除个人数据（按实现删除与当前账户路径关联的上传 / Memory 数据）。
• 注销账户： 个人中心 → 账户 → 注销账户（确认后永久注销）。

也可联系 【待填写：隐私联系邮箱】 寻求协助。

账户注销后，我们将在合理期限内删除或匿名化账户相关数据，包括认证信息、上传照片、生成成片、Story 及相关历史，但仍受以下约束：

• 法律义务；
• 安全与防欺诈；
• 备份轮转周期；
• 服务商删除时限。

注销账户不会自动删除：

• 已保存在设备本地的文件；
• 您已分享给他人的内容；
• 您选择的第三方目的地中的副本；
• 您的 Apple 或 Google 账户本身。

9 您的隐私权利

根据所在地及适用法律，您可能享有查阅、更正、删除、限制或反对处理、数据可携带、撤回同意，以及向监管机构投诉等权利。若涉及出售/共享/定向广告相关权利，第 6 节说明了我们实际做什么与不做什么。

请将请求发送至 【待填写：隐私联系邮箱】。我们会进行适度核验，在法定期限内回应，并说明依法拒绝的理由。我们不会因您行使隐私权而实施违法歧视。

对于加州居民，在 CCPA 适用时：收集类别、来源、目的、保存标准及接收方见第 2-7 节。我们不出售个人信息，也不为跨情境行为广告共享个人信息（按通常定义）。

10 国际数据传输

您的信息可能在您所在国家或地区之外处理，包括 Supabase、Google、Apple 及 AI 服务商使用的地区。不同国家可能适用不同隐私法律。如有法律要求，我们会采用适当的转移保障（例如充分性认定或标准合同条款），并在必要时采取补充措施。更多信息请联系 【待填写：隐私联系邮箱】。

11 儿童及年龄要求

MemorySprout 面向年满 13 岁（或您所在国家要求的更高年龄）的用户，不以低于该年龄的儿童为目标。对于低于适用最低年龄的用户，我们不会在缺乏有效法律依据及必要监护人授权的情况下，明知而收集其个人信息。如您认为儿童不当提供了信息，请联系 【待填写：隐私联系邮箱】。

照片中是否包含儿童，与应用使用者的年龄是不同问题；所需授权仍然适用。

12 安全及政策更新

我们根据所处理信息及相关风险采取合理保护措施，包括 HTTPS 传输加密、后台访问控制，以及密钥与客户端分离。任何系统都无法保证绝对安全。

数据处理方式或法律义务变化时，我们会更新本政策、公布修订日期，并对重大变化提供通知；如依法需要，将重新取得同意。发布新版政策本身不代表您已同意将信息用于新的目的。

13 联系我们

个人开发者：ManLin Zhao

通信地址：【待填写：通信地址】

隐私邮箱：【待填写：隐私联系邮箱】

支持邮箱：【待填写：支持联系邮箱】

网站：【待填写：公开网站 URL】