Privacy policy
This wording is a draft and is not yet in effect. Everything below that describes what the product does was written from the product itself and is accurate today. Every legal question — the parts marked still being decided — is left open rather than guessed at, and this page will change when counsel's wording replaces it.
1. Who we are
Section 5 Media LLC (“we”, “us”) operates My Memories and its four connected products: My Stadiums, My Travel, My Concerts and My Athlete. This policy covers all of them, on the web and in the mobile apps.
Contact: support@section5-media.com
2. What we collect
Your account. An email address and a password, handled by our authentication provider. A display name and a home location if you supply one.
What you record. This product exists to hold what you choose to put in it. Across the apps that includes: memories and the text you write in them; places visited, wanted and favourited; trips, their stops and legs, and journal entries; concerts attended; stadium visits and bucket lists; and for My Athlete, athlete profiles, name variants, seasons, events, statistics, achievements and challenges. Also albums, share links, feedback you send us, and cover images you choose.
Every table that holds your data is enumerated in the product's own code, and a test refuses to pass if one is missing from that list. That same list is what your export contains — so what we hold and what we hand back are the same thing by construction.
Photographs and video. Files you upload are stored with your account. Images are reduced in your browser before upload — an image that cannot be reduced is refused rather than sent at full size — and a small display copy is generated alongside the original.
Location. Coordinates you enter, choose on a map, or that arrive inside a photograph's own EXIF data. If you grant location permission, your device position when you ask a screen to use it.
Usage of billed features. A per-account count of story drafts requested and of map look-ups made, so daily and monthly limits can be enforced. The counts hold no record of what was asked about.
What we do not collect. We do not run advertising, we do not sell data, we do not use third-party analytics or tracking pixels, and we do not build profiles for advertising purposes.
3. Imports run in your browser
When you import a Facebook archive or a Google Takeout export, the files are read, parsed and matched in your browser. Nothing is uploaded and nothing is written to your account until you have looked at a list of claims about your own life and agreed with it. If you close the dialog without confirming, nothing leaves your device.
4. Who else sees your data, and what they see
Four third parties, and nothing beyond what each row states.
Supabase — hosting, database, authentication and file storage. Everything in section 2 is stored on Supabase infrastructure. Access is restricted per user by row-level security.
Google Maps Platform — used to name places. When a place search runs, or an import asks what is near a coordinate, the search text or the coordinate is sent to Google. We do not send your name, your email or your account identifier. Google's use of that data is governed by the Google Privacy Policy.
Anthropic — used only when you ask the app to draft a story for you. The records that story is about are sent to Anthropic's API and a draft comes back. It is not sent otherwise, and no other feature uses it.
Vercel — application hosting. Serves the app and runs the server endpoints.
5. Some of what you contribute becomes shared
This product keeps shared catalogs — stadiums and concert venues — so that a venue one person records is available to the next. If you add a venue, suggest a correction to a stadium, or submit a stadium photograph, that contribution becomes part of shared data other users can see. Your private records — your visits, your memories, your photographs — do not.
Share links are yours to create and yours to revoke. A link you create makes the content it points at visible to anyone holding it.
6. Your controls
Export. You can download everything we hold about you — every table named in section 2, plus your media.
Deletion. You can delete your account yourself, inside any of the apps. Deletion removes your authentication record and then sweeps your media library — the actual files, not just the database rows pointing at them. It is a hard delete, not a flag. Exactly what happens, step by step.
Correction. You can edit or delete individual records at any time from within the app.
7. Retention
Today the product deletes on request and otherwise keeps your records for as long as your account exists.
8. Security
Access to your records is enforced per user at the database level. Server endpoints verify your session before acting. Transport is encrypted.
9. Children
My Athlete is designed for parents recording a child's sporting life. It holds children's names, photographs, teams, events and statistics, entered by the parent. Every athlete profile is private by default, and the app stores what a parent enters.