LEGAL
Privacy Policy
Last updated: 24 June 2026 · Sherlock’s Memory Palace (memorypalace.ai)
PLAIN-ENGLISH SUMMARY — NOT PART OF THE POLICY
We collect what we need to run your account, take payment, and generate your images. Your prompts and images go to our AI provider (Google) to create the pictures. We don’t sell your data. When you delete a palace or image, we delete it from storage within 48 hours. You have rights over your data, including the right to ask for a copy or deletion. The full policy is below.
1. Who we are
Memory Palace LTD (“we”, “us”, “our”) runs Sherlock’s Memory Palace at memorypalace.ai. We are the data controller for the personal data described here. You can reach us at info@memorypalace.ai, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
2. What we collect
You give us:
•
Account data — your name, email address, and password (passwords are stored securely, not in plain text). If you sign in with Google, we receive your name, email, and profile image from Google.
•
Your content — the text you paste in, the prompts you write, the images you generate, and how you arrange them into palaces.
•
Payment data — when you buy a plan or credits, our payment provider Stripe collects your card and billing details. We receive confirmation of payment and limited billing information, but not your full card number.
•
Support messages — anything you send us when you contact us.
•
Communication preferences — whether you have opted in to marketing emails, and any unsubscribe choices you make.
We collect automatically:
•
Usage and technical data — basic information such as your IP address, device and browser type, and how you use the app, including for security and to keep the Service working. See "Cookies" below.
Content you choose to share. If you share or publish a palace or its images, that content — and anything personal you have put into it — becomes visible to the other people you share it with, or to anyone online if you make it public. They may copy or save it. Only share content you are comfortable making visible to others.
3. How we use your data and our legal basis
You can withdraw consent (e.g. unsubscribe from marketing) at any time without affecting other processing.
Service emails vs marketing emails. Service (transactional) emails are a necessary part of the Service. We send them as standard to everyone with an account — for example to confirm sign-up, password changes, credit purchases, plan changes, a low or zero credit balance, and account deletion. They are not marketing, they do not require your consent, and you cannot opt out of them while your account is open (you can close your account at any time). Marketing emails are separate: we only send them if you opt in, and you can unsubscribe from them at any time without affecting your service emails.
4. AI image and text generation
To turn your text into images and to provide AI text help, we send your prompt (and related content) to our AI provider. We currently use the Google Gemini API.
Under Google's terms for paid API use, Google acts as our data processor, does not use your prompts or generated images to train its AI models, and retains them only briefly to detect and prevent abuse. If we change provider, we will update this section.
Please don't enter sensitive personal information (such as health, financial, or other special-category data) into prompts.
5. Who we share your data with
We don't sell your personal data. We share it only with trusted service providers who help us run the Service, under contracts that require them to protect it. These fall into the following categories:
payment processing
AI image and text generation
hosting, storage, and database services
sign-in / authentication
sending service emails
We may also disclose data if required by law, to enforce our Terms, or to protect our rights, users, or the public.
6. International transfers
Some of our providers are based outside the UK (for example, in the United States). Where your data is transferred outside the UK, we rely on appropriate safeguards required by law, such as the UK International Data Transfer Agreement / Addendum or an adequacy decision.
7. How long we keep your data
We keep personal data only as long as we need it, then delete or anonymise it.
Keeping data to investigate misuse or meet legal duties. We may keep, restrict, or disclose personal data where this is necessary to investigate or prevent illegal activity or breaches of our Terms, to comply with a legal obligation, or to establish, exercise, or defend legal claims. In these cases we may keep the data even if you ask us to delete it, for as long as needed for that purpose, and we may share it with the police or other authorities. Where the law allows, we may do this without telling you — for example, where telling you could prejudice an investigation.
8. Your rights
Under UK data protection law you have the right to:
access a copy of your data;
correct inaccurate data;
delete your data ("right to be forgotten");
restrict or object to certain processing;
data portability (receive your data in a usable format);
withdraw consent at any time.
To exercise any of these, email info@memorypalace.ai. We will respond within the legal time limit (usually one month). These rights have some legal limits and exceptions.
If you are unhappy with how we handle your data, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to put things right first.
9. Cookies and similar technologies
We use cookies and similar tools to keep you signed in, remember your preferences, keep the Service secure, and understand basic usage. You can control cookies through your browser settings; blocking some cookies may affect how the Service works.
10. Age
The Service is intended only for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has given us personal data, contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date shows the current version. We will notify you of significant changes where reasonably possible.
12. Contact
Questions about your data? Contact us at info@memorypalace.ai, Memory Palace LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.