Privacy Policy

Effective: May 14, 2026

At Suki Technologies LLC (“we,” “our,” “us,” or “MaxMem”), we respect your privacy and are committed to protecting it. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when you access or use the MaxMem platform and website, including any content, functionality, and services offered on or through the platform or website (collectively, the “Service”).

MaxMem is a memory game platform that allows users to create personalized games and experiences using their own memories, including photos, videos, audio, names, birthdays, anniversaries, life events, locations, notes, stories, relationship labels, tags, captions, documents, and similar content. Because the Service is personalized to you, the information you choose to upload may include personal information about you and others.

Please read this Privacy Policy carefully. By using the Service or providing information to us, you acknowledge that we collect, use, disclose, and retain your information as described in this Privacy Policy.

Your Privacy and Our Services

MaxMem is a private, user-directed memory game web app. Users manually upload personal memory content, including photos, videos, audio, names, birthdays, anniversaries, relationship labels, notes, stories, documents, and similar information. MaxMem stores and uses that content to provide user-directed games and account functionality, but does not sell personal data, use targeted advertising, create biometric identifiers, use user content to train AI models, or disclose private uploaded media except to service providers needed to operate the Service.

Scope of This Privacy Policy

This policy applies only to information we collect:

• Through the Service.

• When you create or use an account.

• When you upload, create, store, share, or delete content through the Service.

• When you communicate with us by email or other electronic means.

• When you make purchases or manage subscriptions through the Service.

• When you use features, integrations, or third-party services made available through the Service.

This Privacy Policy does not apply to information collected by third-party websites, applications, platforms, or services that are not operated by MaxMem, even if they are linked to or accessible from the Service. Your use of third-party services may be governed by those third parties’ own terms and privacy policies.

We may provide additional privacy notices for specific features, services, regions, or activities. If there is a conflict between this Privacy Policy and a more specific notice, the more specific notice will control for that specific feature, service, region, or activity.

Children’s and Minors’ Data

The Service is intended for users who are at least 13 years old. If you are under 18, you may use the Service only with permission from your parent or legal guardian.

The Service is not intended for children under 13, and we do not knowingly collect personal information directly from children under 13. If we learn that we have collected personal information directly from a child under 13 without appropriate parental consent, we will delete that information as required by law.

Users may choose to upload content that includes information about other people, including minors, such as children, grandchildren, relatives, family friends, or other individuals appearing in photos, videos, audio, names, birthdays, anniversaries, or related memories. If you upload information about another person, you are responsible for ensuring that you have the right and permission to do so.

Personal Information We Collect

“Personal data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with an individual or household.

Depending on how you use the Service, we may collect the following categories of personal information:

Account and Contact Information

We may collect information such as your name, email address, username, password, phone number, date of birth, address, profile photo, account settings, and similar account information.

Payment and Subscription Information

If you make a purchase, begin a subscription, use a free trial, or make a one-time purchase, payment processing is handled by Stripe or another third-party payment processor. We do not receive or store your full payment card number. We may receive limited payment-related information, such as payment confirmation, subscription status, transaction identifiers, billing-related details, or other information provided by the payment processor.

User Content and Memory Information

We collect content that you choose to upload, create, store, share, or otherwise make available through the Service, including photos, videos, audio recordings, names, birthdays, anniversaries, locations, notes, stories, relationship labels, tags, captions, documents, memories, game content, prompts, results, and similar information.

User Content may include personal information about you or other people. User Content is private by default unless you choose to share it with another user account through the Service.

Information About Other People

You may choose to provide information about other people, including names, faces, birthdays, relationships, life events, photos, videos, audio, notes, stories, and other memory-related content. You are responsible for ensuring that you have all necessary rights, permissions, and consents to provide and use that information in connection with the Service.

Calendar Information

If you enable calendar access, the Service may access calendar information based on the permissions you grant. This may include calendar events that appear on your dashboard or are used for reminders, memory prompts, birthdays, anniversaries, or other user-directed features. Calendar access is optional and controlled through your device, browser, or third-party account permissions.

Location-Related Information You Provide

The Service does not track your precise location through device location permissions. However, you may choose to provide location-related information, such as places connected to your memories or game content. The Service may use Google Maps or related mapping services to display user-provided locations.

Music and Media Search Information

The Service may allow you to search for songs or play previews made available through third-party services, such as Apple Music or the iTunes Search API. We use these services to provide access to music-related metadata, artwork, attribution, and preview content. We do not collect payment information from Apple or control Apple’s handling of information when you access Apple-provided content.

Device, Usage, and Technical Information

We may collect technical information about your use of the Service, including IP address, browser type, device type, operating system, session information, log data, pages or features accessed, date and time of access, and information needed to maintain login, session, security, and basic operation of the Service.

Communications

If you contact us for support, submit questions, or otherwise communicate with us, we may collect your name, email address, message content, and any other information you choose to provide.

Sensitive Personal Information

Some information you choose to upload may be considered sensitive personal information under certain laws, such as information about children, family relationships, life events, precise dates, images, videos, audio recordings, or other personal memories. You control what you upload. You should not upload sensitive information unless you consent to our processing of that information to provide the Service.

Biometric Information

MaxMem may store photos or videos that contain faces if you choose to upload them. However, MaxMem does not use facial recognition, voice recognition, biometric identification, or biometric verification. We do not create faceprints, facial geometry, voiceprints, biometric templates, or other biometric identifiers from your photos, videos, or audio recordings. Faces may appear in games only because you manually upload and use content for that purpose.

How We Collect Your Personal and Other Data

We collect information in the following ways:

Information You Provide

We collect information when you create an account, update your profile, upload or create User Content, manually upload files, create games, share content with another user, make a purchase, manage a subscription, contact us, or otherwise interact with the Service.

Automatically Through Our Services

We may collect device, usage, log, session, and security information automatically when you use the Service. We use this information to operate, secure, troubleshoot, and improve the Service.

Information from Service Providers

We may receive limited information from service providers that help us operate the Service. For example, Stripe may provide payment confirmation or subscription information, and Supabase may provide hosting, authentication, storage, database, or related technical services.

Information from Optional Integrations

If you choose to use optional integrations, such as calendar access, Google Maps, Apple/iTunes previews, or other third-party features, information may be exchanged as needed to provide the feature you requested.

How We Use Your Information

We use personal information to:

• provide, operate, maintain, and improve the Service;

• create and manage user accounts;

• allow users to upload, store, organize, and use memory content;

• generate user-directed games based on content you upload or select;

• display your content back to you through the Service;

• allow user-controlled sharing with other accounts;

• provide calendar reminders, prompts, events, or dashboard features if enabled by you;

• process payments, subscriptions, one-time purchases, and free trials;

• provide customer support and respond to requests;

• maintain the safety, security, and integrity of the Service;

• detect, prevent, and address technical issues, fraud, misuse, or security incidents;

• comply with legal obligations;

• enforce our Terms of Service and other agreements;

• protect the rights, property, and safety of MaxMem, users, and others; and

• fulfill any other purpose disclosed to you or with your consent.

We do not use user-uploaded photos, videos, names, birthdays, stories, or other memory content to train artificial intelligence models. We do not share user-uploaded materials with third-party AI providers. We do not use targeted advertising, retargeting, lookalike audiences, or hashed-email advertising audiences.

The Service may generate game performance information for your personal use, such as scores, progress, or similar gameplay analytics. This information is provided to you for tracking your own performance.

Who We Disclose Your Information To

We may disclose personal information as described below.

Service Providers

We may disclose personal information to service providers that help us operate the Service, including hosting, database, file storage, authentication, payment processing, security, support, and related technical services. Current or planned service providers include Supabase and Stripe.

These service providers may process personal information only as needed to provide services to us or as otherwise permitted by law.

Other Users at Your Direction

User Content is private by default. However, you may choose to share memories, games, albums, prompts, results, or other content with another user account through the Service. Depending on the sharing permissions you select, the other user may be able to view, contribute, upload, download, export, copy, or save shared content into their own account. You are responsible for the sharing choices you make.

Payment Processors

If you make a purchase or subscription payment, payment processing is handled by Stripe or another payment processor. Your payment information is subject to the payment processor’s own terms and privacy policy.

Legal and Safety Disclosures

We may disclose personal information if we believe disclosure is necessary or appropriate to:

• comply with any court order, law, legal process, or government request;

• enforce or apply our Terms of Service or other agreements;

• protect the rights, property, or safety of MaxMem, users, or others;

• detect, prevent, or address fraud, security, or technical issues; or

• respond to claims that content violates the rights of another person.

Business Transfers

We may disclose or transfer personal information to a buyer, successor, or other third party in connection with a merger, acquisition, financing, restructuring, reorganization, bankruptcy, sale of assets, or similar business transaction.

With Your Consent

We may disclose personal information for any other purpose with your consent.

No Sale of Personal Information or Targeted Advertising

MaxMem does not sell personal information. MaxMem does not share personal information for targeted advertising as those terms are defined under applicable U.S. state privacy laws. MaxMem does not use targeted advertising, retargeting, lookalike audiences, or share hashed email addresses with advertising platforms.

Cookies and Similar Technologies

We use cookies and similar technologies for login, session management, security, and basic operation of the Service. We do not use cookies for targeted advertising.

You can set your browser to refuse some or all cookies or to alert you when cookies are being used. If you disable or refuse cookies, some parts of the Service may not function properly.

For users in jurisdictions where cookie consent is required, we may provide a cookie banner or similar tool on the website to allow you to manage cookie preferences.

Some browsers or browser extensions support Global Privacy Control or similar opt-out preference signals. Where required by applicable law, we will honor Global Privacy Control signals.

Third-Party Services and Integrations

The Service may incorporate or provide access to third-party services, APIs, integrations, media, data, and content, including cloud storage providers, payment processors, mapping services, calendar integrations, music preview services, device integrations, and publicly available imagery or data sources.

Your use of third-party services or content may be subject to separate third-party terms, conditions, licenses, and privacy policies. MaxMem is not responsible for the availability, accuracy, content, privacy practices, or security practices of any third-party service or provider.

The Service may display or incorporate third-party content and integrations, including music-related metadata, artwork, and preview content from services such as Apple Music or the iTunes Search API; Google Maps or other mapping and location-based services; publicly available government, scientific, or educational materials, including NASA imagery; and optional calendar integrations for reminders, memory prompts, birthdays, anniversaries, or other user-directed events and notifications. All such content and integrations remain subject to applicable third-party rights, terms, licenses, usage guidelines, and account or device permissions. Such third-party providers do not sponsor, endorse, or affiliate with MaxMem or the Service.

User Controls and Deletion

You may be able to access, update, correct, delete, or manage certain account information and User Content through the Service. Users may delete individual photos, videos, memories, and other content. Users may also delete their account through the Service.

When you delete content or request deletion of your account, we will delete the information from active systems promptly, subject to applicable law, legal obligations, security obligations, dispute resolution, backup retention, and technical limitations.

Deleted content may remain in backups for up to 90 days before being overwritten or deleted in the ordinary course. We may retain limited information as necessary to comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, or maintain business records.

Retention of Personal Information

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy or as otherwise permitted or required by law.

Generally:

• User Content is retained until you delete it or delete your account.

• Deleted content is deleted from active systems promptly, but may remain in backups for up to 90 days.

• Account information may be retained while your account is active and for up to 3 years after account deletion or inactivity, unless a longer period is required or permitted by law.

• Payment and transaction records may be retained for up to 7 years for tax, accounting, legal, and compliance purposes.

• Support communications may be retained for up to 3 years.

• Security logs may be retained for up to 1 year, unless needed longer for security, fraud prevention, legal compliance, or dispute resolution.

At the end of the applicable retention period, personal information will be deleted, destroyed, deidentified, or anonymized.

Security

We use commercially reasonable administrative, physical, and technical safeguards designed to protect personal information from accidental loss, unauthorized access, use, alteration, disclosure, or destruction.

However, no website, online service, system, transmission, or storage method is completely secure. We cannot guarantee the absolute security of your personal information. You are responsible for keeping your account credentials confidential and for using caution when accessing your account from shared or public devices.

Your U.S. State Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information under applicable U.S. state privacy laws. These rights may include:

• the right to confirm whether we process your personal information;

• the right to access personal information we maintain about you;

• the right to receive a portable copy of certain personal information;

• the right to correct inaccurate personal information;

• the right to request deletion of personal information;

• the right to opt out of the sale of personal information;

• the right to opt out of sharing personal information for targeted advertising;

• the right to opt out of certain profiling or automated decision-making, where applicable;

• the right to limit certain uses or disclosures of sensitive personal information, where applicable; and

• the right not to be discriminated against for exercising privacy rights.

MaxMem does not sell personal information or share personal information for targeted advertising. MaxMem does not use sensitive personal information to infer characteristics about you except as necessary to provide the Service you request.

To exercise your privacy rights, contact us at:

Email: drubenstein@themaxmem.com

We may need to verify your identity before fulfilling your request. If you submit a request on behalf of another person, we may require proof of your authority to act on that person’s behalf.

If we deny your request, you may appeal our decision by contacting us at the same email address and stating that you are appealing a privacy rights decision.

Notice to California Residents

If you are a California resident, California law may provide you with additional rights regarding your personal information.

The categories of personal information we may collect are described in the “Personal Information We Collect” Section above. The purposes for which we use personal information are described in the “How We Use Your Information” Section. The categories of third parties to whom we disclose personal information are described in the “Who We Disclose Your Information To” Section. Retention periods are described in “Retention of Personal Information” Section.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not knowingly sell or share personal information of consumers under 16 years of age.

California residents may have the right to know, access, correct, delete, and receive a copy of certain personal information, and to opt out of sale or sharing where applicable. California residents also have the right not to be discriminated against for exercising their privacy rights.

To exercise California privacy rights, contact us using the contact information in the “Your U.S. State Privacy Rights” Section.

Notice to Nevada Residents

Nevada residents may have the right to opt out of certain sales of covered information under Nevada law. MaxMem does not currently sell covered information as defined by Nevada law. Nevada residents may submit questions or requests using the contact information in the “Your U.S. State Privacy Rights” Section.

Notice to Users in the EEA, UK, and Switzerland

This section applies to individuals located in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland.

Controller

Suki Technologies LLC is the controller of personal data processed through the Service.

Email: drubenstein@themaxmem.com

Legal Bases for Processing

We process personal data using the following legal bases:

• Contract. We process account information, User Content, subscription information, and technical information as necessary to provide the Service, manage your account, enable user-directed games, process payments, and perform our Terms of Service.

• Consent. We process certain information based on your consent, including optional calendar access, optional uploaded sensitive content, certain cookies or similar technologies where required, and other optional features that require permission.

• Legitimate Interests. We process certain information for our legitimate interests, including maintaining and improving the Service, securing the Service, preventing fraud or misuse, providing support, and understanding basic Service usage, provided those interests are not overridden by your rights and interests.

• Legal Obligations. We process certain information as necessary to comply with legal obligations, tax and accounting requirements, lawful requests, dispute resolution, and enforcement of legal rights.

Special Category Data

You may choose to upload content that includes sensitive or special category data, such as information about family relationships, health-related life events, children, images, videos, audio, or other personal memories. We process such information only where you voluntarily provide it, where processing is necessary to provide the Service you request, where you consent, or where otherwise permitted by applicable law.

EU/UK Privacy Rights

Subject to applicable law, you may have the right to:

• access your personal data;

• correct inaccurate or incomplete personal data;

• request deletion of personal data;

• restrict or object to processing;

• receive a portable copy of personal data;

• withdraw consent where processing is based on consent;

• object to processing based on legitimate interests;

• object to direct marketing; and

• lodge a complaint with a data protection supervisory authority.

You may exercise these rights by contacting us at [donrubenstein1@gmail.com](mailto:donrubenstein1@gmail.com).

International Transfers

We are located in the United States, and your personal data may be transferred to, stored in, or processed in the United States or other countries where we or our service providers operate. If we transfer personal data from the European Economic Area, United Kingdom, or Switzerland to a country that has not been recognized as providing an adequate level of protection, we will rely on appropriate safeguards where required, such as standard contractual clauses or other lawful transfer mechanisms.

EU/UK Representative

We have not appointed an EU or UK representative at this time. If our processing activities require appointment of a representative under applicable law, we will update this Privacy Policy.

Notice to Users in Brazil

This section applies to individuals located in Brazil and is intended to address Brazil’s Lei Geral de Proteção de Dados Pessoais, or LGPD.

Controller and Privacy Contact

Suki Technologies LLC is the controller of personal data processed through the Service.

Email: drubenstein@themaxmem.com

For purposes of privacy communications under the LGPD, you may contact us at the email address above.

Legal Bases

We may process personal data under the LGPD based on one or more legal bases, including:

• your consent;

• performance of a contract or pre-contractual procedures;

• compliance with legal or regulatory obligations;

• legitimate interests, where permitted by law;

• protection of rights in judicial, administrative, or arbitration proceedings;

• protection of life or physical safety, where applicable; and

• other bases permitted under applicable law.

LGPD Rights

Subject to applicable law, you may have the right to request:

• confirmation of whether we process your personal data;

• access to your personal data;

• correction of incomplete, inaccurate, or outdated personal data;

• anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed personal data;

• portability of personal data, where applicable;

• deletion of personal data processed with consent, subject to legal exceptions;

• information about public and private entities with which we have shared personal data;

• information about the possibility of refusing consent and the consequences of refusal; and

• withdrawal of consent.

You may exercise these rights by contacting us at donrubenstein1@gmail.com.

International Transfers

Your personal data may be transferred to, stored in, or processed in the United States or other countries where we or our service providers operate. Where required, we will use appropriate safeguards or other lawful mechanisms for international transfers under the LGPD.

Communications and Marketing

We may send you Service-related communications, such as account notices, security alerts, subscription notices, support messages, or updates about changes to the Service or our policies.

We may also send promotional communications if permitted by law. You may opt out of promotional emails by following the unsubscribe instructions in those emails or contacting us. Even if you opt out of promotional communications, we may still send non-promotional Service-related messages.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we update it, we will revise the effective date above and post the updated Privacy Policy through the Service. We may also provide additional notice if required by law.

Your continued use of the Service after the updated Privacy Policy is posted means that you acknowledge the updated Privacy Policy.

Contact Information

To exercise your rights, ask questions, or comment about this Privacy Policy or our privacy practices, contact us at:

Email: drubenstein@themaxmem.com