Gone But Remembered

Privacy Policy

Last updated: December 4, 2025

1. Introduction

Gone But Remembered ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our memorial photo delivery service.

We understand that you are trusting us with deeply personal memories and photos of your loved ones. We take this responsibility seriously and are committed to handling your data with the utmost care and respect.

2. Information We Collect

2.1 Account Information

  • Name and email address
  • Phone number (if you opt for SMS delivery)
  • Password (stored securely using industry-standard hashing)
  • Timezone and delivery preferences

2.2 Memorial Information

  • Name of the deceased person
  • Relationship to the deceased
  • Birth and death dates (optional)
  • Memorial description (optional)

2.3 Photos and Media

  • Photos you upload
  • Photo metadata (EXIF data including date taken, location if present, camera information)
  • Captions you provide or edit

2.4 Family Contributor Information

When you contribute photos to a memorial via a share link, we collect:

  • Your name and email address (required for all contributions)
  • Your relationship to the deceased (optional)
  • Whether you opt to receive memory deliveries from the memorial

Note on anonymous contributions: If you choose to contribute anonymously, your name will be hidden from the memorial owner, but your email address is still collected for quota tracking and potential account linking. The memorial owner will see "Anonymous" instead of your name.

2.5 Payment Information

We use Stripe to process payments. We do not store your credit card numbers on our servers. Stripe's privacy policy governs how they handle your payment information.

2.6 Automatically Collected Information

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and features used
  • Date and time of access

2.7 Google Photos Integration

If you choose to import photos from Google Photos, we access data from your Google account through Google's official APIs. This section describes how we handle your Google user data in compliance with Google's API Services User Data Policy.

What Google Data We Access

  • Photos you explicitly select: We only access photos that you actively choose to import using Google's Picker interface
  • Photo metadata: Date taken, dimensions, and file type of selected photos
  • Basic profile information: Your name and email address for authentication

Why We Need This Access

We request access to Google Photos solely to allow you to import photos into your memorial without manually downloading and re-uploading them. This provides a more convenient way to add photos of your loved one to the memorial.

How We Use Your Google Data

  • Photos you import are copied to our secure storage (Supabase) and become part of your memorial
  • Imported photos may be processed by our AI service to generate captions (see Section 5)
  • Photo metadata is used to display dates and organize your memorial timeline
  • We do not access, scan, or analyze photos you do not explicitly select for import

Google Data Storage and Security

  • OAuth tokens: Your Google authentication tokens are stored encrypted in our database and are never exposed to client-side code
  • Token refresh: We store refresh tokens to maintain access without requiring you to re-authenticate frequently
  • Imported photos: Once imported, photos are stored on our servers and are no longer linked to Google Photos
  • No training: Your Google Photos data is never used to train AI models

Revoking Google Access

You can revoke our access to your Google account at any time by visiting your Google Account permissions page. Revoking access will prevent future imports but will not delete photos already imported to your memorial.

Limited Use Disclosure

Gone But Remembered's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process your photos and generate AI captions
  • Deliver memories via email or SMS
  • Process payments and manage subscriptions
  • Send service-related communications
  • Respond to your inquiries and provide support
  • Improve and optimize the Service
  • Detect and prevent fraud or abuse

4. SMS/Text Messaging Terms

If you opt to receive memory deliveries via SMS/MMS text messaging, the following terms apply in addition to our general privacy practices:

4.1 Consent and Opt-In

By providing your phone number and selecting SMS as a delivery method, you expressly consent to receive automated text messages from Gone But Remembered at the phone number provided. This consent is not a condition of purchasing any goods or services. You may opt out at any time.

4.2 Message Frequency

Message frequency varies based on your delivery settings. You control how often you receive memory deliveries through your account settings. Messages include photos with captions (including MMS with photos), milestone reminders, and occasional service notifications.

4.3 Message and Data Rates

Message and data rates may apply. Your carrier's standard messaging rates apply to all SMS/MMS messages sent and received. Gone But Remembered is not responsible for any charges from your wireless carrier.

4.4 How to Opt Out

You can stop receiving SMS messages at any time by:

  • Replying STOP to any message you receive from us
  • Changing your delivery preferences in your account settings
  • Contacting us at support@gonebutremembered.com

After opting out, you will receive one final confirmation message. You will no longer receive SMS deliveries, but your account will remain active and you can still receive deliveries via email.

4.5 Help and Support

For help with SMS messaging, reply HELP to any message or contact support@gonebutremembered.com.

4.6 Phone Number Privacy

We will never sell, rent, or share your phone number with third parties for marketing purposes. Your phone number is used solely to deliver your requested memory messages through our SMS service provider (Twilio).

4.7 Carrier Disclaimer

Carriers are not liable for delayed or undelivered messages. Message delivery is subject to effective transmission from your network carrier. Gone But Remembered is not responsible for messages that are delayed, not delivered, or blocked by your carrier.

4.8 Supported Carriers

Our SMS service supports most major U.S. carriers including AT&T, Verizon, T-Mobile, Sprint, and many regional carriers. International messaging is available but may be subject to additional charges and carrier limitations.

5. AI Processing of Photos

We use artificial intelligence services (currently Anthropic Claude) to analyze your photos and generate contextual captions. When we process your photos:

  • Photos are sent securely to the AI service for analysis
  • The AI generates descriptions based on what it sees in the photo
  • We combine this with date and location context to create captions
  • Photos are not used to train AI models (per our agreements with providers)

We use location data from your photos only to enrich captions with place names (e.g., "at Santa Monica Pier"). We use weather APIs to add context like "on a sunny 72° day."

6. How We Share Your Information

We do not sell your personal information. We may share information with:

6.1 Service Providers

  • Supabase: Database and file storage
  • Google: Authentication and Google Photos import (see Section 2.7)
  • Anthropic: AI caption generation
  • Stripe: Payment processing
  • Twilio: SMS delivery
  • SendGrid/PurelyMail: Email delivery
  • OpenCage: Location name lookup
  • OpenWeatherMap: Historical weather data

6.2 Family Members You Invite

When you share a memorial, invited family members can view photos and captions. They can see the deceased person's name and your selected photos. They cannot see your account details or payment information.

6.3 Legal Requirements

We may disclose information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

7. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of data at rest
  • Secure password hashing
  • Row-level security in our database
  • Regular security audits
  • Limited employee access to user data

8. Data Retention

We retain your data as follows:

  • Active accounts: Data retained while subscription is active
  • Preservation Mode: Data retained until preservation period ends
  • Cancelled accounts: Photos available for download for 2 years after cancellation
  • Deleted accounts: Data permanently deleted within 30 days of deletion request
  • Family contributor data: Email and contribution records retained to enable account linking and quota tracking

9. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update inaccurate information
  • Deletion: Request deletion of your account and data
  • Export: Download your photos and data
  • Withdraw consent: Stop AI processing of new photos
  • Object: Object to certain processing activities

To exercise these rights, contact us at privacy@gonebutremembered.com

10. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our service providers may be located in the United States or other countries. By using the Service, you consent to such transfers.

12. Cookies and Tracking

We use essential cookies to:

  • Keep you logged in
  • Remember your preferences
  • Ensure security

We do not use advertising cookies or sell data to advertisers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before they take effect. The "Last updated" date at the top indicates when the policy was last revised.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@gonebutremembered.com
Support: support@gonebutremembered.com
Website: https://gonebutremembered.com/help