DPDP-2023 notice
Last updated 2026-04-26
- Memoria handles personal data of Indian Data Principals under the Digital Personal Data Protection Act 2023.
- For any kid under 18, we capture verifiable parental consent under Section 9 before any kid-data is written.
- You can access, correct, erase, and withdraw consent any time.
Who we are
Memoria is the Data Fiduciary. Address and contact in the privacy policy. Grievance officer: grievance@joinmemoria.one.
Section 9 — children
Memoria captures verifiable parental consent at first run on any household with a kid under 18. Consent records are immutable. Revocation is a new row, not a delete; the audit trail is preserved. No behavioural tracking or targeted advertising of children is conducted, ever.
Data Principal Rights
You can exercise the following rights from inside the app or via email:
- Right to access: request a copy of your data. Self-serve from Settings or via data deletion.
- Right to correction: edit any field in the app.
- Right to erasure: household deletion via the same portal.
- Right to withdraw consent: Settings → Consent center.
- Right to grievance redressal: 7-day SLA from grievance@joinmemoria.one.
Lawful basis
Consent (Section 7), contractual necessity (delivering the subscription you paid for), and legitimate use (under-25 lawful family data) per the Act.
Cross-border transfer
Primary data lives in ap-south-1 (Mumbai). Cross-border transfer is limited to operational backups; we do not transfer to any country flagged by the Government of India under Section 16.
Breach notification
In the event of a notifiable breach affecting your household, you will be notified by push notification and email within the regulatory window, with the categories of data affected and the remediation steps under way.