This policy explains what WorthKeeping collects, why, and what control you have over it. WorthKeeping is a shared memory-keeping app — people create boards, invite friends, and post photos, videos, voice notes, and written memories together.

1. What we collect

Account information. Your email address and password (stored as a secure hash, never in plain text). Optionally: a display name, a short bio, your location, and birthday, if you choose to add them to your profile.

Content you create. Photos, videos, voice notes, and written memories you post to boards; comments and reactions on other people's memories; the location you attach to a memory, if you add one.

Your connections. Who you're friends with on WorthKeeping, which boards you belong to, and who you've invited.

Activity. A log of actions on boards you belong to (who added a memory, changed a cover photo, joined the board, and so on) — this powers the activity feed and the "since your last visit" summary, and is visible to other members of that board.

Technical information. Standard web server logs (IP address, browser type, timestamps) kept for security and abuse prevention. If you enable notifications, a push subscription token tied to your device.

2. What we don't collect

We don't run advertising trackers, and we don't sell or rent your data to anyone. We don't read the content of your memories for any purpose other than operating the features you're using (like generating an "on this day" reminder from your own memory dates).

3. How your content is shared

WorthKeeping is built around boards you share with specific people:

• A private board is visible only to its members.
• A board set to members only, a specific friend group, or all my friends is visible to that audience, as you configure it.
• If you turn on a public share link for a board or a single memory, anyone with that link can view it without logging in. This is opt-in and off by default — turning it off again revokes access immediately.

Other members of a board you belong to can see what you post there, including your name/initials, your comments, and reactions.

4. Third parties we use to run the service

• Resend — sends transactional email (invites, password resets) on our behalf. They process the recipient address and message content solely to deliver that email.
• Cloudflare R2 / our hosting provider — stores uploaded photos, videos, and voice notes.
• OpenStreetMap / Nominatim — if you attach a location to a memory, the place name you type is sent to this service to look up coordinates.

We don't share your data with these providers for any purpose beyond the specific function listed.

5. How long we keep things

• Deleted memories are held in a 30-day recycle bin before being permanently removed, so you can undo an accidental deletion.
• If you delete your account (see our Terms of Service for how), we remove your profile and personal content immediately, except where content you posted remains on a shared board that other members still own.

6. Your rights

You can, at any time:

• Download or review the memories and content you've posted.
• Correct your profile information.
• Delete individual memories, or your entire account.
• Ask us what data we hold about you, or ask us to delete it, by contacting [CONTACT EMAIL — not yet set].

If you're in the EU/UK or California, you may have additional rights under GDPR or CCPA — contact us and we'll do our best to accommodate the request even where this policy doesn't spell out a formal process yet.

7. Children

WorthKeeping isn't directed at children under 13 (or the minimum age in your country, if higher), and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we'll remove it.

8. Changes to this policy

If we make a material change to this policy, we'll post the update here and, where practical, let you know directly (e.g. by email).

9. Contact

Questions about this policy, or a request relating to your data: [CONTACT EMAIL — not yet set]