Privacy Policy

Who we are

MemoryFrame is a service made and run by W Labs ("W Labs", "we"). It is a free beta.

For anything about your personal information, including every request described below, write to memoryframe@wsoftlabs.dev. This address reaches the people at W Labs responsible for protecting personal information.

What we collect

• Your email address, to sign you in with a link. There is no password.
• The photos you add. We store re-compressed copies, up to 1600 pixels on the long edge, without the information the original files carried inside them.
• What each photo's file records, read on your device as it uploads: when it was taken, where it was taken (GPS coordinates, when the photo has them), the camera's make and model, and its orientation.
• The optional note you write about a memory, and whether you said you are in the photos.
• What our AI makes from the photos: a description of each one, a numeric summary of it used to group photos, and the pages and their text.
• A record of how each memory was made: which AI service wrote it, and whether W Labs' own servers were unavailable at the time. The name of the AI model that wrote a memory is printed on its last page.
• Your language preference and a few display choices — kept in your browser, as described under "Cookies and your browser".

Our service providers keep technical records, such as when a request was made, to run their services.

How we use it

To sign you in, and to make and show your memories: your photos, the dates and places they were taken, your note and the generated text are processed to read the photos, arrange them into pages and write those pages. We also use the records of how a memory was made to keep the service working and to fix problems.

We do not sell your personal information. We do not show advertising. MemoryFrame runs no analytics or tracking tools. W Labs does not use your photos or your memories to train AI models.

We do not give your personal information to anyone for their own use, except where the law requires it.

Where the AI runs

Normally, the AI that reads your photos and writes your pages runs on W Labs' own servers.

When those servers are unavailable, the memory is processed automatically by OpenAI, in the United States, so that it can still be made. This happens without asking you each time, and there is no setting to turn it off yet. If you ask for a new version that reads the photos again while our servers are unavailable, they are sent to OpenAI again.

What OpenAI receives: the stored copies of your photos (the re-compressed copies described above, which carry no location or camera information); the descriptions our AI writes of them; the dates the photos were taken and the time between them; your note; whether the memory is written as "we"; and the text written so far for the memory's pages.

What OpenAI does not receive: your email address, your account, your photos' GPS coordinates, or the camera's make and model. The coordinates are used only on our side, to print the place on a memory's last page.

OpenAI handles what it receives under OpenAI's API data terms.

Services that handle your data

W Labs uses these services to run MemoryFrame. They process data on our behalf, to provide their part of the service:

• Supabase — the database, sign-in, photo storage, and the program that makes memories.
• Vercel — hosts the website.
• The email service that Supabase sign-in uses to send your sign-in links.
• Cloudflare — the secure connection between the program that makes memories and W Labs' own servers.
• OpenAI — only when W Labs' servers are unavailable, as described above.

For people in Korea: transfer abroad

Our service providers may store and process data outside Korea, including in the United States. The transfer below happens only when W Labs' own servers are unavailable.

Recipient

OpenAI

Country

United States

When and how

While a memory is being made, only when W Labs' servers are unavailable, over an encrypted connection

Items

Photos (re-compressed copies with no location or camera information), their AI-written descriptions, the dates the photos were taken and the time between them, the note, whether the memory is written as "we", and the text written so far for its pages

Purpose

Reading the photos, grouping them, and writing the pages

Retention

Under OpenAI's API data terms

How to refuse, and what follows

There is no setting to refuse this yet. If you do not want it, do not make or regenerate memories, and write to memoryframe@wsoftlabs.dev to have your account deleted. Without this transfer, a memory cannot be made while W Labs' servers are unavailable.

Shared links

When you turn on sharing for a memory, anyone with its link can open it without signing in and see its pages and photos. Turn sharing off and the link stops working; turning it on again makes a new link, so the old one stays dead.

We do not list shared links anywhere, and every shared page tells search engines not to list it, so shared pages do not appear in the results of search engines that follow that instruction, as the major ones do. Anyone who has the link can still open the memory and pass the link on, and a link posted somewhere public can be opened by anyone who sees it.

Children

You must be 14 or older to use MemoryFrame. We do not knowingly accept accounts from children under 14; if we learn that one has an account, we delete it.

Photos may include children. Add photos of other people, and especially of children, only when you have the right to — for example as their parent or guardian, or with their parent or guardian's agreement.

Deleting a memory or your account

• Deleting a memory removes it from MemoryFrame at once: its pages and their text, its photos' records and descriptions, the record of how it was made, and its shared link. A photo you also added to another memory stays with that memory.
• The stored photo files are not removed at that moment. W Labs removes files that no memory uses any more in a manual clean-up. Write to memoryframe@wsoftlabs.dev and we will remove them within 30 days.
• Deleting your account is not yet available in the app. Write to memoryframe@wsoftlabs.dev from the address you sign in with, and within 30 days we will delete your account, every memory in it, and the stored photo files.
• Copies in our service providers' backups and logs are removed on those services' own schedules.

How long we keep data

Your memories and photos are kept until you delete them or your account is deleted. When we delete data, it is erased from our systems and cannot be recovered.

Your rights

You can ask to see, correct, export or delete your personal information, or to stop its processing. Write to memoryframe@wsoftlabs.dev from the address you sign in with. We reply within 10 days, and complete a deletion within 30 days. You can rename or delete any memory yourself in the app.

Cookies and your browser

• Sign-in cookies keep you signed in. They are needed for the app to work.
• A language cookie remembers the language you chose, for a year.
• Your browser keeps your memories' sort order and your recent searches on your device.
• While you sign in, your browser keeps your email address for that tab only, until it is closed.

None of these is used for advertising or tracking.

Keeping your data safe

Connections to MemoryFrame are encrypted. Each account can read only its own memories. Photos are kept in private storage and are shown only through links that expire within an hour.

Changes

This policy takes effect on 2 October 2026. When it changes, we will announce the change in the app before it takes effect, and update the date above.