Privacy Policy

Finding faces. When you add a photo, we send it to Amazon Rekognition to find where the faces in it are. We keep only the position of each face with the photo, so you can tag people and so the photo is framed well. We do not ask Rekognition to estimate anyone's age, gender or expression, and we do not keep any such estimate. Finding a face does not create a face signature and does not tell us who anyone is.

Face matching, only if you turn it on. Face matching recognises the people you have tagged when they appear in your other photos, so it can suggest or apply their name for you. To do this, when you tag a face we create a face signature: a set of numbers describing the geometry of that face, which is a biometric identifier. Each signature is stored by Amazon Rekognition, our service provider, in a collection that belongs to your account alone, labelled with the contact you tagged. When you add a photo, the faces in it are compared only against your own collection. We never compare them with anyone else's, and we do not use face signatures for any other purpose.

Your consent. Face matching is off until you say yes. We ask the first time you tag a face, and until you agree no face signature is made and no face is searched for. You can turn it on or off at any time under Settings, Privacy.

Other people in your photos. Most of the people you tag will not be Yours Truly users. Face signatures are made only for people you tag, and only from photos in your own account. Please tag only people who are comfortable with it. If you believe a face signature of you is held in someone's account, contact privacy@yourstruly.love.

Retention and destruction schedule. We keep a face signature only as long as it serves the purpose you agreed to, and permanently destroy it at the earliest of:

• when you turn face matching off, which deletes every face signature in your account at once;
• when you delete a contact, which deletes the face signatures made for that person;
• when your account is deleted, within 30 days of your request;
• three years after you last added a photo, memory or face tag, at which point face matching is also turned off;
• and in every case no later than three years after your last interaction with Yours Truly.

Photos, tags and the names you gave them stay in your account when a face signature is destroyed. Only the signature goes.

We never sell it. We do not sell, lease, trade or otherwise profit from biometric information. We do not disclose it to anyone except Amazon Web Services, which stores and processes it for us, or where the law requires it. We protect it with at least the same care as the rest of your most sensitive information, encrypted in transit and at rest.

• We never sell your personal data.
• We never share your content with third parties for advertising.
• We never use your personal stories to train AI models without explicit consent.
• We never access your content without your permission, except as required by law.

Some of what Yours Truly does is done for us by other companies. Each one receives only what its job needs, and only to do that job for us. The full list, kept in step with our code, is on our subprocessors page.

• Amazon Web Services. Hosts the Service: our servers, database, file storage, video conversion and sign-in. Its Rekognition service looks at every photo you add to find the faces in it and to screen for content our rules do not allow, and, only if you turn face matching on, stores the face signatures described above.
• OpenAI. Receives your voice and video recordings to turn them into text, and question text to read aloud. In a live voice conversation it receives your microphone audio as you speak, and the question or memory you are talking about, so it can ask the next question.
• Anthropic. Its Claude models receive the text of your memories and interview transcripts, and the names of people and places in them, to suggest a mood for each memory and ideas for what to talk about, write summaries, and choose quotes and layouts for printed books. When you order a printed book, it also receives images of the book’s pages to check the layout before printing.
• Google. Its Gemini models receive each photo you add, with its place and date, to suggest a question about the story behind it; the text of your memories, contacts and profile, to make them searchable and to suggest moods and tags; and recordings when our main transcription service is unavailable. Google Maps Platform receives the places of your memories to show maps and street views. If you choose to import contacts from Google, or sign in with Google, Google provides that information to us. On Android, notification text is delivered through Firebase Cloud Messaging.
• Apple. If you sign in with Apple, Apple provides your name and email address or relay address.
• Mapbox. Receives the places and addresses you add, to show your memories on a map and to look up addresses.
• PostHog. Receives the pages you visit and actions you take, only after you accept analytics cookies. Error reports from our servers, with technical detail and your account identifier, also go to PostHog so we can find and fix faults.
• Stripe. Processes payments for subscriptions, gifts and books. Your card details are held by Stripe, never by us.
• Resend. Delivers our emails, so it receives email addresses, names and the content of each email.
• Telnyx. Delivers text messages, so it receives phone numbers and the content of each message.
• Goody. Sends the gifts you choose, so it receives the recipient’s name, address, email address and gift message.
• Lulu. Prints and ships the books you order, so it receives the book’s pages and the shipping details.
• Cookiebot (Usercentrics). Asks for and records your cookie choices.

A death certificate uploaded to tell us that a member has died is reviewed by our staff and is not sent to any AI service. It is stored, like the rest of the Service, with Amazon Web Services.

When you search for a song, film or book to add to a memory, the words you search for go to the catalogue that answers it (Apple iTunes, Deezer, TVMaze, OMDb, Open Library or Google Books). Nothing else about you goes with them.