Memory Bunny character guarding a locked memory box

Privacy Policy

Last updated: 8 October 2026

This Privacy Policy explains how Memory Bunny ("we", "us", "our") collects, uses, and protects your information when you use our app (the "App").

We are committed to protecting your privacy and being transparent about how your data is used.

Memory Bunny is operated by Troughman Studios Ltd, a company registered in England and Wales (company number 17122981) — see clause 1 of our Terms & Conditions for our registered office details.

1. Information We Collect

We intentionally collect as little personal information as possible.

Information You Provide

When you register and use the App, we collect:

We use this information solely to:

Content You Upload

When you create or interact with memories, you may upload:

This content:

Photos, videos, and other Memory Content can be personal data - not just about you, but about anyone identifiable in it. The Information Commissioner's Office (ICO) treats photographs as personal data where the person shown is identified or identifiable. If you upload content showing another person, you are responsible for ensuring you have any permission needed to do so, as set out in our Terms & Conditions.

Photos and videos can incidentally reveal special category data about people shown in them — for example, information about health, religion, or ethnicity. If you upload content that reveals this kind of information about someone else, you are responsible for having a lawful basis to do so, as set out in our Terms & Conditions.

Reports You Submit

If you report content or another user for breaching our Terms & Conditions, or raise a complaint about a decision we've made, we collect:

We use this information to investigate and respond to reports and complaints, and to enforce our Terms & Conditions.

Automatically Collected Information

We collect limited technical and usage data, such as:

This data does not include the content of your memories.

2. How We Use Your Information

We use your information to:

We do not sell your data or use it for advertising.

3. Artificial Intelligence

Our Terms & Conditions note that we may introduce features that use artificial intelligence or machine learning in the future, for example to help you organise, search, or enhance your Memory Content.

This does not give us a general right to use your photos, videos, or other Memory Content to train AI models. We do not use Memory Content to train AI models, and we do not use AI to analyse or monetise your memories.

If we ever introduce AI processing of Memory Content itself, we will treat that as a separate privacy and product decision - this Policy will be updated to explain what is involved, and additional consent will be obtained where required, before any such feature is introduced.

See our AI Policy for more detail on how we use and don't use AI.

We process your data under the following legal bases:

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

5. Sharing Your Information

We only share your data in the following limited circumstances.

Other Users

Your display name and memory content are shared only with users you (or a memory admin) have granted access to. Where the Memory Owner or an authorised Memory Admin has switched on downloading for a Memory, any member of that Memory can download photos within it, including photos contributed by other members; once a photo has been downloaded, that copy is outside our control and this Policy no longer applies to it. Whether downloading is switched on for a Memory is decided by the Memory Owner or an authorised Memory Admin, not by individual Contributors - this applies even to photos a Contributor has submitted themselves. See our Terms & Conditions (clause 18) for more detail, including how this applies by default to existing and newly created Memories.

Service Providers

We use trusted third-party providers to operate the App:

These providers process data on our behalf and are required to protect it.

Business Transfers

If Memory Bunny is involved in a merger, acquisition, sale of assets, or similar transaction, your personal data may be transferred to the acquiring party as part of that transaction. If this results in a material change to how your data is handled, we will notify you in accordance with clause 13 (Changes to This Policy).

Access to Memory Content by Memory Bunny

We do not routinely access or review Memory Content. Access by authorised personnel is restricted, and only takes place where reasonably necessary to:

Where access does take place, it may include user accounts, Memory Content, and audit logs or activity history.

We may disclose information if required by law, regulation, or legal process.

Where a report concerns suspected child sexual abuse and exploitation (CSAE) or child sexual abuse material (CSAM), we may disclose relevant information to law enforcement or child protection authorities, as described in the Memory Bunny Child Safety Standards.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve the App.

Essential Cookies

Required for:

These cookies cannot be disabled.

Analytics Cookies

We use PostHog to understand how the App is used. These cookies help us:

Analytics cookies are only used with your consent where required.

Managing Cookies

You can:

7. Data Retention

We retain different types of data for different periods, as follows.

Account data: we retain your account data (such as your email address and display name) for as long as your account remains active.

Memory Content: we retain Memory Content for as long as it remains part of an active Memory and the relevant account remains open.

Deleted content and backups: when content is deleted (a “Hard Delete” under our Terms & Conditions), it is no longer available to users through the App. We may retain limited copies or associated information for a reasonable period afterwards, where necessary for backups, security, fraud prevention, or legal or regulatory purposes, after which it is permanently removed. Where downloading had been switched on for the relevant Memory, this does not affect any copy of a photo that another member had already downloaded before the deletion; we have no ability to remove or recall copies of photos downloaded by other members.

Report records: where you report content or raise a complaint, we may retain records of that report to allow us to handle appeals, demonstrate compliance with our Terms & Conditions, and meet legal obligations.

You may request deletion of your account and associated data, subject to:

and the retention periods set out above.

8. How to Delete Your Account and Data

You can delete your account directly within the App at any time (see our Terms & Conditions). If you no longer have access to the App, you can request deletion of your account and associated data by emailing help@memorybunny.com.

Deleting your account triggers a Hard Delete, as described in our Terms & Conditions, and cannot be reversed. Some data may be retained for a limited period afterwards - see Data Retention above for details.

We aim to action deletion and other data-rights requests within one calendar month of receipt, as required by UK data protection law. Where a request is complex, we may extend this by up to two further months, and we will explain why if this applies.

9. Your Rights

Depending on your location, you may have the right to:

To exercise your rights, contact us using the details below.

You can also download the media you have personally uploaded directly from ‘My Uploads’ in the App at any time, without needing to contact us. Separately, you can download photos from a Memory you have access to, directly within the App, where downloading has been switched on for the relevant Memory by its Owner or an authorised Memory Admin - see our Terms & Conditions (clause 18) for more detail.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the opportunity to address your concerns directly first — you can contact us using the details in Section 14.

10. Data Security

We take reasonable technical and organisational measures to protect your data, including:

No system is completely secure, but we work hard to protect your information.

We have procedures in place to detect, investigate, and respond to personal data breaches. Where required by law, we will notify the ICO and affected individuals without undue delay.

11. International Data Transfers

Some service providers may process data outside the UK or EU.

Where this occurs, we rely on the UK International Data Transfer Agreement (IDTA), EU Standard Contractual Clauses, or an applicable adequacy decision, as appropriate to the destination country.

12. Children's Privacy

The Memory Bunny App is not intended for children under 13.

We do not knowingly collect personal data from children under this age.

If we become aware that a child under 13 has created an account or provided personal data without appropriate parental or guardian consent where required by law, we may suspend or delete the account and associated data - see our Terms & Conditions for more detail.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

Material changes will be communicated within the App or by email.

14. Contact Us

If you have any questions about this Privacy Policy or your data, contact us at: help@memorybunny.com.