LastMemo & SafeTravelPrivacy Policy
LastMemo & SafeTravel (“LastMemo”, “we”) is a safety app. You set a timer, and if you don't check in on time we email the people you chose. This policy explains what we collect to do that, and nothing more. LastMemo is operated by an independent developer based in Thailand.
The short version
- We collect only what the app needs to send your alerts.
- Your location is saved once, when you start a trip timer. We never track you.
- We don't sell your data, show ads, or use tracking or advertising SDKs.
- You can delete your account and all its data from Settings at any time.
- Your private memos are never published. Only a public message you write for Words Left Behind can be, and only under the conditions below.
Words Left Behind
If you choose to write a public message, it stays private while you keep checking in. If your LastMemo fires, we wait 7 days. If you haven't checked in or started a timer by then, a person on our team reads the message. It is published on lastmemo.app/words only if they approve it, and it appears with the name you chose and the month it was queued. If you check in at any point, it is taken down automatically. You can edit or delete it in the app at any time. A published message is public, so others may read, copy or share it, and we can't undo that.
What we collect
| Data | Why |
|---|---|
| Your email address and, if you add it, your display name | To sign you in with a one-time code, send you reminders, and tell your contacts who the alert is about. |
| Your contacts' names and email addresses | To ask them to confirm, and to email them if you miss a check-in. |
| Timer details: duration, start and due times, your note, check-ins | To know when an alert is due and what to tell your contacts. |
| One location, when you start a SafeTravel timer (only if you allow it) | To include your starting point in the alert email. It is not updated afterwards. |
| Your Last Memo messages | To deliver them to the contact you wrote them for, only if you stop checking in. |
| Your public message for Words Left Behind, and the name you choose to show with it (only if you write one) | To publish it on lastmemo.app/words if your LastMemo fires. A person on our team reads it before it is published. We don't publish your email address. |
| Your language setting | To show the app in your language. |
| A push notification token | To remind you on your phone before anyone is alerted. |
| Basic technical logs, such as IP address and request time | To keep the service secure and working. Kept by our hosting providers for a short time. |
We do not collect your contacts list, photos, microphone, or background location.
If someone added you as a contact
You'll receive one email asking you to confirm. Until you confirm, we send you nothing else. After confirming, you'll only hear from us if that person misses a check-in, and later if they check in. Every email includes a link to stop receiving alerts from that person.
Who processes your data
We use a small number of providers to run the service. Each only receives what it needs.
| Provider | What it does |
|---|---|
| Supabase | Database and sign-in. Stores your account, contacts, timers and memos. |
| Cloudflare | Hosts this website and runs the scheduler that checks timers every minute. |
| Resend | Delivers our emails. |
| Expo | Delivers push notifications to your phone. |
| Apple and Google | Process in-app purchases. We never see your card details. |
These providers may process data outside your country. They are bound by their own security and privacy commitments, including standard contractual safeguards where required.
How long we keep it
We keep your data while your account exists. When you delete your account, your profile, contacts, timers, memos and history are deleted immediately from our live database. Copies may remain in our providers' encrypted backups for a short period before they are overwritten.
Security
All traffic uses HTTPS. Data is stored in a database that is encrypted at rest, and database rules ensure each account can only read its own records. No system is perfectly secure, but we work to keep your data safe and to collect as little as possible.
Your rights
Depending on where you live, including under the GDPR (EU/UK), the CCPA (California) and the PDPA (Thailand), you can ask to access, correct, export or delete your data, or object to how it is used. Most of this you can do in the app. For anything else, email us and we will reply within 30 days.
Children
LastMemo is not directed at children under 13, and we do not knowingly collect their data.
Changes
If we change this policy in a meaningful way, we'll update the date above and tell you in the app before the change takes effect.
Contact
Email privacy@lastmemo.app.