Privacy notice

MemoryCrib · Version 2026-10-10

MemoryCrib is a family learning service. For questions about privacy, information access or correction, withdrawing consent, or account closure, contact support@memorycrib.com.

Grown-ups manage family information

An adult parent or guardian creates and manages the family account and authorizes their children's use. Use a nickname for each child. Leave full names, addresses, phone numbers, school names and other identifying details out of activities and writing.

Information we process

Clerk provides authentication and processes your email address, account and session identifiers, and security-related device information. If you choose Google sign-in, Google and Clerk process your identity, email address and basic profile to authenticate you; we do not request access to your Gmail, Drive or other Google content. We use those identifiers to associate your family with its learning records.

Family records can include learner nicknames, optional grade and learning preferences, region or curriculum, activity answers, writing, progress, rewards, creations and feedback. We use these to deliver activities, save progress, personalize challenges and show the grown-up their family's learning record. We store a protected representation of the parent PIN and temporary parent unlock records.

We record your policy version and authorization time when you start the trial. We retain trial dates and Stripe customer, subscription and billing status identifiers to provide access and prevent repeat trials. Stripe processes payment details; MemoryCrib does not store complete payment card numbers.

We use technical and security logs to operate the service and diagnose failures. API log retention is 30 days. Your browser also stores some progress, unfinished writing and device preferences. Clearing browser storage removes device copies, rather than the corresponding cloud records.

AI activities and your choice

AI activities can send prompts, learning context, answers and writing to OpenRouter and a selected model provider to generate content or feedback. A grown-up must authorize this processing before starting the Family trial. Our integration requests providers that disallow collection of submitted content. Providers still process the requests, and this routing setting does not eliminate that processing.

AI content and feedback can contain mistakes or inappropriate results despite filtering. Review results when needed. Use nicknames and avoid identifying information in submissions. If you do not want to submit writing to AI, leave those activities unused. To withdraw your authorization for the service, contact support; we will explain how to stop processing and close the account.

Providers and processing outside Canada

We use AWS for application hosting and data storage, Clerk for authentication, Stripe for payments, and OpenRouter and model providers for AI activities. The application and its primary data store are hosted in AWS US East. Support email is received in AWS Canada Central and forwarded to our existing Google-hosted support inbox. Providers may process information outside Canada, where local laws can apply. The current application does not include an advertising or analytics SDK.

Retention, exports and deletion

Learning records remain available after trial or paid access expires. Cancelling a subscription does not delete them. Available learning export and deletion controls remain in the grown-ups area. Contact support for account closure, other information requests, or records outside those controls. We verify requests before releasing or deleting family information.

For a verified account-closure request, we will explain the deletion steps and any information that must be retained for legal or financial reasons. Future billing renewals must be cancelled as part of closure. Closure is handled through support; it is not an automatic in-app action.

Production database recovery backups are configured for a rolling recovery window of up to 35 days. Deleted information can remain in that restricted recovery window until it expires. Stripe retains transaction information according to its legal and operational responsibilities. Support email's raw AWS copy expires after seven days; its forwarding logs expire after 14 days. Forwarded messages are kept in the support inbox for handling the request and any necessary legal record.

Questions and changes

Contact support@memorycrib.com about a privacy request or concern. If our response does not resolve your concern, you may contact the privacy regulator with jurisdiction over it. We will explain material changes to information use and obtain any new consent required before using information for a new purpose.