Privacy Policy

1. Who we are

ToldByUs is a life story and memory timeline platform operated by ToldByUs, based in Arizona, United States. If you have any questions about this Privacy Policy, contact us at hello@toldbyus.com.

2. What information we collect

We collect only the information necessary to provide the Service. This includes:

• Account information: your name, email address, and birth date, provided when you create an account
• Memory content: the life story text, titles, dates, and locations you enter when creating memories
• Uploaded files: photographs and documents you choose to attach to your memories
• Location data: geographic coordinates and place names you provide for travel memories — entered manually by you, not collected automatically from your device
• Usage data: basic server logs including IP addresses, browser type, and pages visited, retained for security and debugging purposes

We do not collect your precise GPS location automatically. We do not track you across other websites. We do not collect payment information (ToldByUs is free during beta). We do not accept or store video files.

3. How we use your information

We use the information we collect solely to:

• Create and maintain your account
• Display your memories and timeline to you
• Send transactional emails such as email verification and password reset messages
• Screen submitted content for prohibited material using automated moderation tools
• Improve the reliability and performance of the Service during the beta period

We do not use your personal stories, memories, or photos for advertising, marketing, machine learning training, or any commercial purpose. Your stories belong to you.

4. Third-party service providers

To operate ToldByUs, we share certain data with the following trusted third-party providers. Each is bound by their own privacy and security policies:

We do not sell your personal information to any third party, ever.

5. Data storage and security

Your data is stored on servers located in the United States. We implement reasonable technical and organizational measures to protect your information against unauthorized access, including encrypted connections (HTTPS), secure password hashing, and access controls.

No system is perfectly secure. We cannot guarantee that your information will never be accessed, disclosed, or altered by unauthorized parties, and we are not liable for unauthorized third-party access beyond our control.

6. Data retention and beta data

Your data is retained for as long as your account is active. If you delete your account, your memories, photos, and personal information will be permanently deleted from our systems within 30 days.

Because ToldByUs is in beta, data from this period may not be preserved into the production release. We will make reasonable efforts to notify users by email before any beta data is removed, giving you the opportunity to export or record your content.

7. Your rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information in your account
• Delete your account and all associated data
• Request a copy of your data by contacting us at hello@toldbyus.com

8. Children's privacy

ToldByUs is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will delete their account and all associated data promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email at least 14 days before changes take effect. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.