as of October 1, 2026
This Privacy Policy explains how Membrance Inc. (“we”) collects, uses, discloses, retains, and protects personal information when you use the Membrance mobile application (the “App”) and related services (the “Service”), and the choices and rights you have. By using the Service, you agree to this Policy. Where you provide the AI Training and Biometric Consent and Release in our Terms and Conditions, that consent also governs our handling of your biometric data.
1. Information We Collect Information you provide: your name, contact details, date of birth or age, Account credentials, and payment information; your Messages and other Content; and the names and contact information of the Recipients, Reporter, and Digital Executor you designate. Information we collect automatically: device type and identifiers, IP address, operating system and app version, and usage, log, and diagnostic data needed to operate and secure the Service. Biometric data: where you enable AI features, we derive a faceprint and voiceprint from your Content, handled under the AI Training and Biometric Consent and Release. We do not collect precise geolocation.
2. Mobile Permissions and Push Notifications With your permission, the App accesses your camera, microphone, and photo library, and, if you choose, your contacts, only when needed for a feature you use; you can change these permissions in your device settings. With your permission, the App may send push notifications, for example to confirm Account or delivery status; you consent to receiving them when you enable them and can disable them at any time in your device or App settings. The disclosures we provide to the Apple App Store and Google Play, including Apple’s privacy label and Google Play’s Data Safety form, describe these practices and are intended to be consistent with this Policy.
3. Mobile Information Sharing Statement We do not share mobile information with third parties or affiliates for marketing or promotional purposes. Information may be shared with subcontractors solely to provide support services. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
4. How We Use Information We use information to provide and operate the Service; to record, store, and deliver your Messages to your Recipients after verified death; to train and operate AI models where you have consented; to verify identity and prevent fraud; to process payments and manage your Account, including renewal and expiration notices; to provide support and respond to inquiries; to secure and improve the Service; and to comply with law and enforce our agreements.
5. How We Disclose Information We disclose personal information only: to service providers that host or process data to provide the Service, bound by contract to protect it and use it only for us; to your designated Recipients, to deliver your Messages after verified death; to a successor in a merger, acquisition, financing, or sale of assets, subject to this Policy or with notice and choice as required by law; to comply with law or valid legal process, or to protect the rights, property, or safety of Membrance, our users, or others; and with your consent. We may disclose aggregated or de-identified information that cannot reasonably identify you. We do not sell your personal information and do not share it for cross-context behavioral advertising or third-party marketing.
6. Sensitive and Biometric Data; Data After Death Voice, image, and biometric data are sensitive, and we handle them as described in the AI Training and Biometric Consent and Release, including a retention and destruction schedule and our commitment not to sell or profit from biometric data. Because the Service operates after death, where you have consented during life we may retain and use your Content and biometric data after death to provide the Service, subject to that schedule and to any deletion right that applicable law does not permit to be waived.
7. Data Retention We retain personal information for as long as your Account is active, as needed to provide the Service (including to hold and later deliver your Messages), and thereafter as needed to comply with law, resolve disputes, and enforce our agreements. Biometric data is retained and destroyed as described in the AI Training and Biometric Consent and Release.
8. Information of Other People When you provide the contact information of a Recipient, Reporter, or Digital Executor, or submit Content depicting another person, you represent that you are entitled to do so and, where required, that the person has consented to the uses described here. We contact your designees and Recipients only to operate the Service, consistent with applicable communications laws.
9. Your Privacy Rights and Choices Depending on your state of residence, you may have the right to know and access the personal information we hold about you, to obtain a copy or portable copy of it, to correct it, to delete it, to opt out of any sale or sharing of it for cross-context behavioral advertising, and to limit the use of sensitive personal information. We do not sell or share personal information for those purposes and do not use sensitive personal information for purposes that require a right to limit. To exercise a right, email notices@membrance.com; we will verify your request as required by law, respond within the time the law allows, and permit an authorized agent to act for you where the law allows. Where applicable law provides a right to appeal a decision on your request, you may appeal by replying to our response. We will not discriminate against you for exercising these rights. California’s “Shine the Light” law permits California residents to request information about disclosures for third-party direct marketing; because we make no such disclosures, we have none to report.
10. Children The Service is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. Content you provide may depict a minor; you must have the right and any necessary parental or guardian consent to provide it. If we learn we have collected information from a person under 18 contrary to law, or that Content depicting a minor was provided without authority, we will delete it.
11. Security and Breach Notification We use administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit, access controls limiting access to authorized personnel, and a PCI-compliant payment processor that handles card data so that we do not store full card numbers. No method of transmission or storage is completely secure, and we do not guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and applicable authorities as and when required by law.
12. Users Outside the United States; Changes; Contact The Service is intended for users in the United States and is not directed to the European Union, the United Kingdom, or other regions with comprehensive data protection laws; if you are located in such a region, do not use the Service. We may update this Policy and will post the new effective date and, for material changes, notify you by email or through the Service. Contact: Membrance Inc., 1178 Broadway 3rd Floor, Suite 1308, New York, NY 10001; notices@membrance.com.
