Privacy Policy

Who we are and how to contact us

Memhold operates If Required and is responsible for the personal information described in this policy. For privacy questions or requests, email taylor@ifrequired.com or visit our contact page.

Information we collect

Personal information includes information that identifies you or can reasonably be linked to you, directly or indirectly.

• Account and support information: your email address and information you provide when you contact us.
• Content and release settings: notes, messages, instructions, chosen contacts, confirmation requirements, and incident confirmations.
• Contact information supplied by users: names, email addresses, and other contact details provided for transfer contacts and confirmation contacts. You may receive a service message because another user selected you, even if you have not created an account.
• Subscription information: purchase and transaction identifiers, subscription status, and related records used to manage access to paid features.
• Technical information: device and browser information, IP addresses, operating system, app version, language, access logs, and crash or diagnostic information.

You choose what to include in your notes. Only provide information you are entitled to store and share. If you prefer to keep sensitive information offline, you can store directions to its location instead.

How we use information

We use information to manage accounts and subscriptions; store and release your notes according to your settings; contact your chosen people; respond to support requests; maintain security; diagnose problems; and understand and improve how our website and services work.

Where applicable data protection law requires a lawful basis, we rely on performance of our contract for account, storage, subscription, and release services; legitimate interests in security, support, and service administration where those interests are not overridden by individual rights; legal obligations for required records and disclosures; and consent where required, including for optional marketing or tracking. Information about contacts supplied by a user is used for our legitimate interest in carrying out that user’s requested contact and release arrangements, subject to applicable law.

You can opt out of marketing by using an unsubscribe link where provided or contacting us. Essential account, security, billing, and release notices are separate from marketing.

Your contacts and release of notes

You choose one transfer contact and require one, two, or three confirmations from your confirmation contacts. Your transfer contact may also be a confirmation contact. We use their details to notify them of their role and carry out the release process.

Once your required confirmations are received, all your notes are copied to your transfer contact’s account, they receive an email asking them to sign in with the address you supplied, and your account is closed. This is a disclosure to the person you selected, separate from sharing with service providers.

A recipient may retain or make their own copies. Deleting your original account does not recall information already received or remove copies outside our control. Contact us promptly about incorrect contact details, mistaken confirmations, or concerns about a release; we cannot guarantee that a completed disclosure can be reversed.

If your plan includes Personal Follow-Up, we use contact details and receipt status to follow up with your chosen contact by email, text, and phone when receipt is unconfirmed. The same release conditions apply.

Our service providers and other disclosures

Our current vendors are:

• Amazon Web Services (AWS): cloud infrastructure, hosting, and storage used to operate the service.
• Apple: app distribution and App Store purchases and subscription billing.
• RevenueCat: subscription management and purchase-status information used to manage paid access.
• Google: Google Analytics for website usage measurement.

Information handled by each provider depends on its role. We limit disclosures to information needed for that role. Providers acting on our behalf process information under their applicable contractual obligations; Apple and Google may also process information under their own privacy policies for their services.

We do not sell your personal information. We may disclose information where reasonably necessary to comply with law or legal process, protect rights and safety, address fraud or security issues, or enforce our Terms of Service. Information may also be transferred in a merger, acquisition, or sale of the business, subject to applicable privacy obligations.

We are based in the United States, and information may be processed there or in other countries where our providers operate. Privacy laws may differ from those in your country. Where applicable law requires safeguards for international transfers, those requirements apply to our transfers. Contact us for information about the safeguards relevant to your data.

Cookies and Google Analytics

Our website uses Google Analytics to understand visits and website usage. Google Analytics uses cookies and similar technologies to collect information about interactions with the site, devices, and browsers. Learn more about how Google uses information from sites that use its services.

You can manage or delete cookies through your browser settings. Google also offers a Google Analytics opt-out browser add-on for supported browsers. These controls do not stop essential server logs or all information processing. A privacy notice does not replace consent where consent is legally required.

Server logs may include IP addresses, requested pages, referring pages, and request times. We use them for operation, security, and troubleshooting. We treat identifiers and pseudonymous records as personal information where they can reasonably be linked to someone; only information that is no longer reasonably identifiable is treated as anonymous.

Security

We use reasonable technical and organizational measures to protect personal information, including Transport Layer Security (TLS) for information transmitted to our service and restrictions on access for service operations. TLS protects information in transit; it does not by itself mean information is end-to-end encrypted. No transmission or storage method is completely secure.

Retention and deletion

We retain account information and notes as needed to provide the service, including your configured release arrangements. Retention also depends on deletion requests, account closure, legal recordkeeping duties, security needs, and the resolution of disputes. Transaction and security records may need to be kept after an account closes for those purposes.

You can request account deletion in the app’s settings or by emailing us. Removal from active systems and the expiry of backup copies may occur at different times. We retain information only for as long as needed for the relevant purpose or a legal obligation. Contact us for details about retention of your information.

After a release, the copy in your transfer contact’s account is handled as part of that account. We assess requests concerning those copies under applicable law and the rights of affected people. We cannot erase copies a recipient has independently saved outside the service.

Your privacy rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a portable copy of your information; restrict processing; or object to processing, including processing based on legitimate interests. Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Email taylor@ifrequired.com to make a request, including if someone else provided your contact details. We may need to verify your identity. We will respond within the period required by applicable law and explain any lawful limitation, including obligations to retain records or protect others’ rights. You may also complain to your local data protection authority; UK residents can contact the Information Commissioner’s Office.

Children

The service is intended for people who are at least 18 and legally able to enter a binding contract. We do not knowingly permit children under 18 to create accounts. If we discover an underage account, we will take steps to close it and delete its personal information, subject to legal obligations. Contact us if you believe a child has created an account.

Adult users may include information about children in their personal notes. That information is handled under this policy; it does not make children eligible to use the service.

Changes to this policy

We will post updates here and revise the date above. For material changes, we will provide notice through email or the service before the changes take effect where required by law. We will obtain consent where legally required for a new use of information.