Version 1.2 · Last updated 31 October 2026
Privacy Policy
1. Introduction
Mnemo Africa (“Mnemo”, “we”, “us” or “our”) runs this website and the Mnemo service (the “Service”) from Kenya. We decide how your personal data is used, which makes us the data controller under Kenya’s Data Protection Act, 2019. This Privacy Policy describes how we collect, use, store, protect and share your personal information when you use the Service.
Your photos are personal. By using Mnemo, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
2. Information we collect
2.1 Information you provide
| Data type | Description | Purpose |
|---|---|---|
| Account details | Name, email address, password (stored scrambled, never in plain text) and, if you add it, your phone number | Account identification, sign-in, communication |
| Photos and books | The photos you upload and everything in your books: layouts, text, covers and versions | Making, saving, previewing and printing your books |
| Delivery details | Delivery addresses and the name and phone number for a delivery | Delivering your order |
| Payment details | The phone number and M-Pesa receipt reference for M-Pesa payments, and a payment reference and the card type and last four digits for card payments. We never see or store your M-Pesa PIN or your full card number | Taking payment, invoices, refunds |
| Newsletter | Your email address, if you subscribe | Sending the newsletter |
| Messages to us | What you type in the Contact form or Stories inquiry: your name, email, message, and any order number, tracking number or company name you add | Answering you and keeping a record of the conversation |
| Sign in with Google | If you choose it, Google tells us your name, email address and a Google account identifier. We never see your Google password | Account identification and sign-in |
2.2 Information collected automatically
| Data type | Description | Purpose |
|---|---|---|
| Device and browser details | Your IP address and browser or device type when you sign in | Keeping accounts secure, troubleshooting |
| Error data | Application errors and stack traces. We do not send names, email addresses, cookies, request headers or request contents with them | Service reliability, fixing bugs |
| Uptime checks | Whether the website and its database respond | Knowing when the Service is down |
2.3 Information created through your use of the Service
| Data type | Description | Purpose |
|---|---|---|
| Orders | Order history, the approved version of each book, invoices and its print files | Production, reprints, support |
| Mnemory Points | Your balance and the history of points earned and spent | Running the points programme |
| Shared book activity | Who joined, added photos or edited a shared book, and when | Collaboration and showing who did what |
3. How we use your information
We use the information we collect to:
- Provide the Service: store your photos, save your work, print your book and deliver it.
- Take payment, issue invoices and handle cancellations and refunds.
- Communicate with you: send verification, receipts and delivery updates, and reply to your messages.
- Ensure security: keep your account and our Service safe and prevent fraud and abuse.
- Send marketing or newsletters, only if you have said yes. You can stop at any time.
- Comply with legal obligations, including tax and financial record keeping.
We do not use your personal information for advertising, sell it to third parties, or share it for purposes unrelated to providing and improving the Service.
Your photos
Your photos stay yours. We keep your original files untouched and use smaller copies for previews. We only use your photos to build and print your books. We will not use them to promote Mnemo without asking you first.
4. Shared books
If you invite people to a book, they can add photos and edit pages in it, and the book records who did what. Collaborators can see the photos and pages in that book, and the owner can remove them at any time. If a collaborator is removed, they lose access but what they added stays in the book. If you join someone else’s book, its owner and other collaborators will see what you add.
5. How we store and protect your information
5.1 Data storage
| Storage | Data stored |
|---|---|
| Database | Accounts, books, orders, payments, Mnemory Points, activity history and messages |
| File storage | Your original photos, preview copies, and the print files and PDFs for your orders |
Our hosting, file storage and email providers may process data on servers outside Kenya. When that happens we take steps to make sure your data stays protected, as the law requires.
5.2 Security
- In transit: connections between your browser and Mnemo are encrypted.
- Passwords are stored scrambled, never in plain text.
- Each account can only reach its own books, photos and orders. Your files are not public: they are served only after we check you may see them.
No system is perfectly secure, so we also ask you to use a strong, unique password and keep it private.
6. Third-party services
We don’t sell personal data. We share only what is needed with:
| Provider | Data shared | Purpose |
|---|---|---|
| Print partner | Your book files and the order details needed to print | Printing your books |
| Delivery couriers | Your name, phone number and delivery address | Delivering your order |
| Paystack | Your email address, the amount, and your M-Pesa phone number or card details, which you enter on Paystack’s own page or phone prompt | Our payment processor: takes M-Pesa and card (Visa and Mastercard) payments and handles refunds |
| Safaricom (M-Pesa) | Your payment phone number and the amount, passed on through Paystack | Delivering the M-Pesa prompt to your phone |
| Name, email and account identifier, if you sign in with Google | Sign-in | |
| Hosting and file storage providers | All application data and your files | Running the Service |
| Email delivery provider | Your email address and the content of the emails we send you | Sending verification, receipts and updates |
| Sentry | Application errors and stack traces, without names, email addresses, cookies, headers or request contents | Error tracking |
| Uptime monitoring provider | The address of our health check and whether it responds | Knowing when the Service is down |
These providers may only use your data to provide their service to us. We also share data with people you invite to a shared book, and with authorities or regulators when the law requires it.
7. Cookies and tracking
Mnemo uses one essential cookie to keep you signed in (for 14 days if you tick “Keep me logged in”, otherwise until you close the browser or a day passes), and a short-lived one while you sign in with Google. We do not use advertising, marketing, analytics or social media tracking cookies at the moment. If we add analytics later, we will say so here first.
8. Data retention
| Data type | Retention period | Deletion method |
|---|---|---|
| Photos and unordered books | Until you delete them or delete your account | Removed when you delete them or delete your account |
| Ordered books | Kept with our production records so we can reprint and answer questions | If you delete your account, kept without your name, email or phone |
| Invoices and payment records | As long as the law requires us to keep financial records | Deleted when the legal period ends |
| Sign-in sessions | Until they expire or you sign out | Automatic expiry |
| Newsletter | Until you unsubscribe | Removed when you unsubscribe |
| Contact messages | As long as needed to answer you and keep a record of the conversation | Deleted afterwards |
| Error data | Kept by Sentry for a limited period | Automatic expiry |
When you delete your account we remove your sign-in, your photo library, your saved addresses and any book you haven’t ordered. See the FAQ for the steps.
9. Your rights
Under the Data Protection Act, 2019 you have these rights:
| Right | Description | How to exercise |
|---|---|---|
| Access | Ask what data we hold about you and get a copy | Contact us at the email below |
| Correction | Ask us to correct data that is wrong | Update your profile in Account settings, or contact us at the email below |
| Deletion | Ask us to delete your data, subject to records we must keep by law | Use the account deletion feature in the app, or contact us at the email below |
| Objection | Object to or ask us to limit how we use your data, including marketing | Use the unsubscribe link in any marketing email, or contact us at the email below |
| Portability | Ask for your data in a form you can take elsewhere | Contact us at the email below |
10. Data breach notification
If a data breach affects your personal information, we will tell the people affected and the Office of the Data Protection Commissioner as the law requires. We aim to do this within 72 hours of becoming aware of a breach that qualifies, and to explain what happened, what data was affected and what we are doing about it.
11. Children’s privacy
Mnemo is for adults. If you are under 18, please use it only with a parent or guardian’s involvement. We do not knowingly collect a child’s data without the consent the law requires, and will delete it if we learn we have.
12. Changes to this policy
We may update this Privacy Policy as Mnemo grows. When we do, we will change the version and the “Last updated” date at the top, and we will tell you by email if a change affects how we use your data in a significant way. Your continued use of the Service after changes are posted means you accept the updated policy.
13. Contact us
If you have questions about this Privacy Policy or want to use your data rights, contact us at:
Mnemo Africa
Email: [email protected]