Privacy
Memorento by LoRisCo BV
2026-10-26.1
Who we are
Memorento is made and sold by LoRisCo BV, Keizersgracht 572, 1017 EM Amsterdam, KvK 42130960. We decide what happens to the data described here (we are its controller). Contact: support@memorento.com.
Your photos
Memorento reads your Photos library only on your own Mac. Your library, your photos and Photos’ face recognition are never sent to us. The one exception: if you order a print, the app uploads that single finished poster file, after you have paid.
What we keep when you buy, and why
Your email address, the order number, what you bought and the amount, the country it is for, and a random code for your design (not the design itself). For a print also your name, delivery address, phone number if you gave one, delivery notes and the poster file. When you asked for a digital purchase to be delivered right away, the time you did so. Gift codes are only stored in scrambled form (as a hash).
We use this to deliver what you bought and to answer you (the contract with you), and keep the order records because tax law requires it (a legal obligation). Your licence holds your email address and the design code, and lives on your own Mac.
Purchase records also include the applicable terms version and full text, order specifications and the wording and time of your separate consent choices. We keep these records to perform the contract, meet accounting obligations and establish or defend legal claims. We do not store your photo library in your account.
Friends who send photos
When you share an upload link, your friends’ photos and videos, and the name and message they may add, are encrypted on their device before they leave it. We store only that encrypted data, which we cannot open, until your Mac has fetched it, and for 14 days at the most. We keep no names, messages, email or IP addresses of your friends.
Download and launch emails
When you ask for the download link (or, before launch, to hear when the app is out), we keep your email address, your language, the page you came from, whether you also asked for tips and offers, and when you confirmed that.
We send the link because you asked for it. Tips and the occasional offer only reach you if you ticked the box and then confirmed by email (your consent); every such email lets you unsubscribe. The emails go out from our mail service on Amazon Web Services in Frankfurt (EU). We never share or sell your address.
We delete your address 30 days after we sent you the link (on the waitlist: the link we send on launch day), unless you confirmed tips and offers; then we keep it until you unsubscribe, and delete it within 30 days after that.
Business inquiries
When you ask for a logo mosaic on our business page, we keep your name, email address, the number of prints you chose, your language and, if you add it, your logo. We use them only to answer your request (steps you asked for before a possible contract). We delete your logo 14 days after your request, and the rest after 12 months.
Feedback
When you send feedback (the Feedback link on this website or the Feedback button in the app), we keep your words, the topic you chose, your email address only if you give it, and where you sent it from: on the website the page, its language, phone or computer, the window size and the browser; in the app its version, your Mac or iPhone model and the screen, and a picture of the window only if you tick the box. Never your IP address. We use it to improve Memorento and to reply if you asked us to, and delete it after 12 months (the picture after 90 days).
Who receives data
Stripe handles payment under its privacy notice (https://stripe.com/privacy), including payment processing, fraud prevention and its legal obligations. Your card or bank credentials go directly to Stripe; we do not receive the full credentials. We remain your seller.
For a print, the selected production provider and delivery partners receive the finished artwork and the contact and delivery details necessary for the order. Our production network uses Prodigi and Printful and their relevant labs and subprocessors; processing can take place in the EU, the United Kingdom or the United States, depending on the selected service. We require the applicable data processing terms and lawful safeguards for transfers, such as an adequacy decision or standard contractual clauses. Contact us for information about recipients and safeguards relevant to your order.
Our server and the emails we send run on Amazon Web Services in Frankfurt (EU). Our support mailbox is hosted by Google Workspace. When you type a delivery address in the app, the suggestions come from Apple Maps, so what you type goes to Apple. When the app checks for updates, our download server sees the app version and your IP address.
How long
We delete the poster file 30 days after shipping, and an upload that was never paid for after 7 days. We delete your delivery address, phone number and notes 90 days after shipping; the country stays. Order records (email, order number, products, amounts, country) are kept for 10 years, the period EU VAT rules require for sales across borders. Our server’s technical logs are kept for 30 days. Friends’ uploads: until fetched, 14 days at the most.
The deletion periods above concern Memorento’s systems. Production, delivery and payment providers may keep their own copies or records for fulfilment, complaints, reprints or legal obligations under their applicable terms and retention rules. Deletion from our server does not mean that a provider’s copy or backup has already been erased. Contact us to request assistance with deletion or information about provider retention.
Where we keep information for security, fraud prevention or legal claims, we rely on our legitimate interests and retain only what is necessary. A legal retention obligation can prevent immediate deletion. You can ask us to explain the basis and retention criteria that apply to your request.
This website and the payment page
This website uses essential cookies only when you request a sign-in code or sign in: the browser challenge lasts 10 minutes and the secure session lasts seven days. We keep your verified email and sign-in dates for your optional customer account; expired sign-in requests are deleted after one hour and inactive accounts after one year. Signing out can revoke all sessions. Your purchase records remain available for legal retention and purchase recovery. Anonymous page events do not contain account details; the account page sends no analytics. Stripe uses its own security cookies on its payment page.
Your rights
You can ask to see, correct, delete or take your data with you, object to its use or ask us to limit it (except what the law requires us to keep). Email support@memorento.com. If you are unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the authority where you live, in the United Kingdom the Information Commissioner’s Office (ICO).