Privacy Policy

Information we collect

• Account: your email address, display name, whether you are an artist, when you accepted our Terms, and a securely hashed password (handled by our authentication provider; we never see your raw password).

• Security: email-verification status, two-factor authentication (authenticator-app) factors if you enable them, and sign-in records such as IP address and time, which our authentication provider keeps to protect your account.

• Artist profiles (if you register as an artist): bio, the year you started, services and prices, working hours, certifications, portfolio photos and style tags, social handles, your handle and link-in-bio page, the shops you work at, and, if you turn on travel, the dates and cities of your guest spots.

• Bookings and quotes: the appointments you make or receive, their status and deposit status, and your quote and custom-design requests.

• Health information you choose to provide: the intake and consent form for an appointment (medical history such as allergies, conditions, medications, and anything else the form asks), your typed legal name and your drawn signature, plus the checklist answers, symptoms and photos in any “Is This Infected?” thread you open. See our Consumer Health Data Privacy Policy.

• Messages and submissions: what you send in design, quote and care threads, including sketches and photos, and the healed-result photos and captions you submit for an artist to approve.

• Saves, blocks and reports: the artists, shops and flash you save, the artists you block, and reports you make or that are made about your account.

• Location: your approximate device location, only while the app is open and you search for nearby shops. We use it to run that search. We do not track your location in the background or keep a history of where you have been.

• Notifications: a push token for your device, so we can send the notifications you allow.

• Payments: processed by Stripe. We do not store card numbers. We store identifiers (such as your Stripe customer or connected-account ID) and deposit and payment status.

• Device and technical: device type, operating system, app version, IP address, and the request and error logs our hosting providers keep to run and secure the service.

• Support: anything you send us when you contact us.

The For You feed learns which styles you like from what you look at and save. That taste profile is stored only on your device and is not sent to us.

How we use your information

To create and secure your account, verify your email, and offer two-factor authentication.

To show shops and artists near you, run bookings, quotes and design threads, and collect deposits and payments where they are available.

To send you notifications and emails about your account, bookings, messages and reminders.

To moderate content, investigate reports, enforce our Terms, and prevent fraud, abuse and spam.

To fix problems and improve Memento, and to comply with the law and protect our rights.

We do not show ads, and we do not use your information for targeted advertising. We use health information only as our Consumer Health Data Privacy Policy describes.

What other people can see

Public, to anyone, including people without an account: an artist’s name, handle, bio, services and prices, hours, shops, portfolio and style tags, approved healed photos with their captions, travel dates and cities, and link-in-bio page.

The artist you book or message sees your display name, your booking details, what you send them, the intake form for that appointment, and any concern thread you open with them.

Your email address, bookings, saves, blocks, intake forms and concern threads are never public.

Our team: a small number of people at Xenith Studios can access account data when it is needed to provide support you ask for, investigate a report or security problem, enforce our Terms, or comply with the law. We do not otherwise read your messages or health information.

Service providers

• Supabase: hosting, database, authentication, account emails, and file storage.

• Stripe: payments and artist payouts, where available. Stripe’s own privacy policy governs the card details you enter on its hosted pages.

• Google (Places): when you search for studios, our server sends Google the search and the area searched.

• OpenStreetMap (public Overpass servers such as overpass-api.de): your device sends them the area being searched, so they receive your IP address.

• Expo, Apple and Google: deliver push notifications. They receive your push token and the notification text. Notifications about health matters are generic and do not include your answers or photos.

• Cloudflare: hosts mementomods.app and processes visitors’ IP addresses and request logs.

These providers process data on our behalf, except where they act as independent controllers under their own privacy policies (for example, Stripe for card data and the public OpenStreetMap servers).

How we share information

With artists and customers, as described above, so that bookings, quotes and threads work.

With the service providers listed above, to operate Memento.

When the law requires it, or to protect the rights, property or safety of our users, the public, or us.

As part of a merger, acquisition, financing, reorganization, or sale of assets, in which case this policy continues to protect your information.

With anyone else, only if you ask us to or agree to it.

We do not sell your personal information and do not share it for cross-context behavioral advertising. Because of that, there is nothing to opt out of, but we treat a Global Privacy Control signal as a valid opt-out request anyway. Memento does not track you across other websites or apps, so it does not respond differently to a browser’s Do Not Track signal. We do not share personal information with third parties for their own direct marketing.

Data retention

• Account and profile: while your account is open, and removed when you delete it (see below).

• Bookings, quotes, and design threads: while your account is open, and afterwards kept in de-identified form so the other person keeps their records.

• Care threads: while your account is open. When you delete it, we erase their checklist answers, messages and photos.

• Signed intake and consent forms: kept with the appointment, with restricted access, so the artist can meet their record-keeping obligations. See our Consumer Health Data Privacy Policy.

• Payment and transaction records: as long as tax and financial-record law requires, generally seven years.

• Reports, blocks and moderation records: as long as needed to keep Memento safe and enforce our Terms, which can include keeping a banned person from returning.

• Push tokens: until you sign out, turn off notifications, or delete your account.

• Logs held by our hosting providers: for short periods under their standard retention.

• Backups: overwritten on a rolling schedule.

Deleting your account

You can permanently delete your account from Account Settings → Delete account. When you do, we remove your personal details, including your name, avatar, bio, social links, artist profile content, portfolio and care photos, the healed-result photos you submitted (including any an artist approved into their portfolio), and device push tokens, and we sign you out and disable the login so it cannot be used again.

Before deletion we settle any money in flight: held deposits are refunded and upcoming bookings are cancelled.

If you can no longer sign in, you can ask us to delete your account at mementomods.app/delete-account or by emailing privacy@mementomods.app. You can also ask us to delete specific things rather than the whole account, such as a portfolio photo, a healing-concern thread, or an intake form, and we will do so unless we are required to keep it.

Some records are kept in a de-identified form, no longer linked to your name. Past bookings and quotes remain visible to the other party, signed intake and consent forms are retained with restricted access, and payment and transaction records are kept. We keep these so that the other person keeps their records and so we can meet legal, tax, and financial-compliance obligations. Deletion is permanent and cannot be undone.

Your rights and choices

In the app you can update your account details, control notifications, remove individual photos, and delete your account.

Depending on where you live, you may have the right to know what personal information we hold about you and get a copy of it, to correct it, to delete it, to take it with you in a portable format, and to opt out of its sale, of targeted advertising, and of certain profiling. We do not sell personal information, use it for targeted advertising, or profile you in ways that produce legal or similarly significant effects. We use sensitive information, such as health information and account credentials, only to provide the service you asked for.

We honor these requests for everyone, wherever you live. To make one, email privacy@mementomods.app from the address on your account. We may ask you to confirm your identity before acting on it. An authorized agent can make a request for you with your signed permission. We respond within 45 days and will tell you if we need up to 45 more.

If we decline your request, you can appeal by replying with “Appeal” in the subject line, and we will answer within 45 days. If you are still unhappy, you can contact your state attorney general. We will not treat you differently for exercising your rights.

Children

Memento is for adults. You must be at least 18, or the age of majority where you live, to create an account. Memento is not directed at children, and we do not knowingly collect personal information from anyone under 13, or let anyone under 18 hold an account.

A parent or guardian can book a procedure for a minor through their own account. Information they give about the minor is held as part of the guardian’s account and handled under this policy. If we learn that a minor is using an account, we will close it and delete their information unless we must keep it.

Security

Data is encrypted in transit and, with our hosting provider, at rest. Access to records is restricted by row-level security, so people see only what belongs to them or has been shared with them, and staff access is limited to what the job needs. You can add two-factor authentication for extra protection.

No method of transmission or storage is completely secure. If a breach affects your personal information, we will notify you and the authorities as the law requires.

Where your data is processed

Memento is operated from the United States and intended for users there. If you use it from elsewhere, your information is transferred to and processed in the United States and in the other countries where our service providers operate.

Changes

We may update this policy. If a change is material, we will tell you in the app or by email before it takes effect. We always update the “last updated” date above.

Contact

Questions about privacy? Contact Xenith Studios at 1201 Princeton Ave, Bakersfield, CA 93305-1121, or at privacy@mementomods.app.