Privacy Policy

Effective date: October 1, 2026 · Last updated: October 1, 2026

Meadow is made by Our Appologies LLC, a Delaware limited liability company ("Meadow," "we," "us," "our"). This policy explains what we collect, what we don't, and what we do with it. It covers the Meadow iOS app, mymeadow.app, Photosites we host for you, and the books we have printed and shipped on your behalf.

---

The short version

---

1. Who we are and how to reach us

Our Appologies LLC

8 The Green, Suite B, Dover, DE 19901, United States

care@mymeadow.app

For the purposes of the UK and EU General Data Protection Regulation, Our Appologies LLC is the controller of the personal data described in this policy.

2. How Meadow works

Meadow organizes your photo library by running artificial-intelligence models locally on your device. When you grant Meadow access to your photo library through Apple's permission system, the app reads your photos on the device in order to group them into albums and to offer writing prompts.

What stays on your device:

• Your photographs. We do not upload your photos, thumbnails, or derived representations of them (such as embeddings) to our servers in order to organize your library.
• The analysis itself. Grouping photos into albums, reading their timestamps and coordinates, and looking up place names all happen on your device.
• We do not use your photos, stories, or any content in your library to train artificial-intelligence models, ours or anyone else's.
• We do not perform facial recognition or facial identification. Meadow does not create faceprints, does not tag people by identity, and does not collect, capture, or store "biometric identifiers" or "biometric information" as those terms are used in the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, or comparable laws.

The one thing that leaves your device during curation: album titles.

When Meadow suggests a name for an album, it sends a short, text-only summary of that album — place names, dates, and simple content labels such as "beach" or "birthday cake," all derived on your device — to our server, which passes it to an artificial-intelligence provider that drafts the title.

• No photographs, thumbnails, or image data are sent.
• The summary is used only to produce that title. It is not stored. It exists for the length of the request and is then discarded, on our servers and at the provider.

Reference identifiers. So that your albums stay consistent, Meadow stores identifiers that point to photos in your own Apple Photos library, associated with your account. We do not store the photographs themselves, and we do not store their metadata. An identifier is meaningless to anyone who does not have your library.

One thing this means for you: Meadow is not a backup service. We do not hold a copy of your library, so we cannot restore your photos if you lose your phone or delete them from Apple Photos. Keep your own backup.

3. What we collect

a. Information you give us

• Your email address — when you create an account. We use it to identify your account, send receipts and service messages, and provide support.
• Your Apple account identifier, and a private relay email if you choose one — when you sign in with Apple, to authenticate you. If you use Apple's Hide My Email, we never see your real address.
• Your shipping name and postal address — when you order a printed book, so it can be printed and delivered to you.
• A tax identification number — only where the destination country requires one for customs clearance (currently Argentina, Brazil, Chile, Ecuador, Indonesia, Mexico, and Peru). It is passed to our print partner for the customs declaration and is not used for anything else.
• The contents of your support messages — when you contact us, so we can answer.

b. Content you choose to send out into the world

Your photographs leave your device only when you ask for something that requires it:

• Printed photobooks. When you order a book, the print-ready file — containing the photographs and any stories you placed in it — is uploaded to our storage and then transmitted to our print partner so the book can be manufactured and shipped.
• Photosites. When you publish a Photosite, the album's photographs, stories, and layout are uploaded to our storage, and the site is served from there. Media is delivered through expiring signed links rather than from a publicly listable location.
• Photozines. Photozines are generated entirely on your device. Nothing is transmitted to us.

We treat this content as yours. We use it to produce the thing you asked for, and for nothing else. We do not browse it, mine it, or use it for training or marketing.

c. Album-title data (transient)

As described in §2: place names, dates, and content labels for a single album, sent to generate a title, not stored by us or by the AI provider. No images.

d. Information collected automatically

• Purchase and subscription information. Subscriptions and digital purchases are processed by Apple through your Apple Account. Apple tells us that a purchase or renewal occurred and provides a receipt; Apple does not give us your payment card details. We use RevenueCat to manage subscription state, which receives an app-generated user identifier, device and app version information, and your purchase receipts. Printed books are sold by us and processed by Stripe, which collects your payment details directly — we receive a confirmation and the last four digits of the card, never the full number.
• Product analytics. We use PostHog to understand how the app and website are used — screens viewed, features used, errors encountered, app version, device model, operating system version, and a random installation identifier. No photo content, no photo metadata, and no album or story content is included in analytics events.
• Server logs. Our hosting providers record standard technical information — IP address, timestamp, request path, user agent — for security, abuse prevention, and debugging.

e. What we do not collect

We do not collect or use: advertising identifiers (IDFA); continuous or precise device location tracking; contacts; health data; biometric information; browsing activity on other apps or websites. We have not implemented advertising-attribution software in the app. We do not knowingly collect information from anyone under 18.

4. How we use information

We use the information described above to: operate Meadow and keep your account working; suggest album titles; manufacture, ship, and support the products you order; host Photosites you publish; process payments and manage subscriptions; respond to support requests; detect, investigate, and prevent fraud, abuse, and security incidents; understand aggregate product usage so we can improve Meadow; send transactional messages such as receipts, shipping updates, notices about customs charges or shipping costs you may owe, and other important service notices; send marketing email only where you have opted in, with an unsubscribe link in every message; and comply with law and enforce our Terms of Service.

Legal bases (EEA, UK, and Switzerland)

• Providing the app, your account, and the products you order — performance of a contract (Art. 6(1)(b)).
• Generating album titles — performance of a contract (Art. 6(1)(b)); the data is transient and no images are involved.
• Retaining book files until the payment-dispute window closes — legitimate interests in defending against payment disputes, and compliance with card-network requirements (Art. 6(1)(f) and (c)).
• Payments and subscription management — performance of a contract, and legal obligation for tax and accounting records (Art. 6(1)(b) and (c)).
• Customs declarations for international shipments — legal obligation (Art. 6(1)(c)).
• Product analytics, security, abuse prevention, and service improvement — legitimate interests (Art. 6(1)(f)). We have assessed these as limited, low-impact, and consistent with your expectations.
• Marketing email — consent (Art. 6(1)(a)), which you may withdraw at any time.
• Responding to legal process and keeping required records — legal obligation (Art. 6(1)(c)).

5. Who we share information with

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We disclose information only to the service providers below, each of which is contractually limited to processing it on our instructions, and only in the situations described at the end of this section.

• Apple Inc. — receives subscription and digital purchase transactions, and your Apple account identifier or private relay email if you sign in with Apple. For app distribution, in-app purchases, and authentication.
• Lulu Press, Inc. — receives the print-ready file for the book you ordered, your shipping name and address, and any tax identification number required by the destination country. For printing, binding, and shipping your book.
• Stripe, Inc. — receives the payment details you enter when buying a printed book. For payment processing.
• RevenueCat, Inc. — receives an app user identifier, device and app metadata, and purchase receipts. For subscription management.
• Supabase, Inc. — stores the photographs, stories, and layouts behind your Photosites and book orders, and serves Photosite media through expiring signed links.
• Salesforce, Inc. (Heroku) — hosts our application, and therefore holds what is stored in our application database and logs.
• LLM (Gemini or OpenAI) — receives the transient album summary described in §2, to generate an album title. No images. Not stored.
• PostHog, Inc. — receives the product analytics events described in §3(d). For understanding product usage.
• Vercel Inc. — receives requests to mymeadow.app. For hosting our marketing website.

We may also disclose information: to comply with law, legal process, or a valid governmental request; to enforce our Terms of Service; to protect the rights, safety, or property of Meadow, our users, or the public, including reporting apparent child sexual abuse material to the National Center for Missing & Exploited Children as required by law; to our professional advisers; and to an acquirer, in which case we will notify you before your information becomes subject to a different privacy policy.

6. Where your information is stored

Our servers and service providers are located in the United States. If you are in the EEA, the UK, or Switzerland, this means your personal data is transferred to the United States. We rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable) with our providers as the transfer mechanism, together with supplementary measures including encryption in transit and at rest.

7. How long we keep things

• Account information — until you delete your account, plus up to 30 days for the deletion to propagate through backups.
• Order and transaction records — 7 years, for tax, accounting, and warranty purposes.
• Print-ready book files — automatically deleted 180 days after your book ships. We keep them that long, and no longer, so we can resolve any payment dispute: card networks generally allow a cardholder 120 days from expected delivery to raise one. After 180 days the file is deleted from our storage and cannot be recovered.
• Album-title data — not stored. Discarded as soon as the title is generated.
• Photosite photographs, stories, and layouts — while the Photosite is active, and for 30 days after deactivation so it can be reactivated. Then deleted.
• Photo reference identifiers — until you delete the album they belong to, or your account.
• Support correspondence — 2 years.
• Product analytics — 1 year.
• Server logs — 90 days.

Deleting your account deletes the Photosite content and reference identifiers associated with it, and any book file still inside its 180-day window. We keep only the order and transaction records the law requires us to keep.

8. Your choices and rights

Wherever you live, you can: delete your account in the app or by emailing care@mymeadow.app; deactivate a Photosite at any time; unsubscribe from marketing email using the link in any message; revoke Meadow's access to your photo library in iOS Settings; and ask us anything about your data at care@mymeadow.app.

To make a request about your personal information, email care@mymeadow.app with the email address on your account. We will verify your identity by confirming control of that address, and will respond within the time the applicable law allows (45 days in the United States, extendable once; one month in the EEA and UK, extendable by two further months for complex requests). We will not discriminate against you for exercising any of these rights.

United States

Depending on your state, you may have the right to: know what personal information we have collected, used, and disclosed; access a portable copy; correct inaccuracies; and delete it. Some states also give you rights to opt out of the sale of personal information, sharing for cross-context behavioral advertising, and profiling with legal or similarly significant effects.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for profiling of that kind — including for consumers we know to be under 16. There is accordingly nothing to opt out of, and we do not act on Global Privacy Control signals because we do not engage in the practices they address.

We collect the categories of personal information described in §3: identifiers, commercial information, internet or network activity information, geolocation inferred only at the coarse level of an IP address or a place name in an album summary, and your own content. We collect it for the purposes in §4, from the sources in §3, and disclose it to the providers in §5. We do not collect "sensitive personal information" for the purpose of inferring characteristics.

If you are in California, you may designate an authorized agent to make a request on your behalf; we will ask for proof of that authorization. California's "Shine the Light" law: we do not disclose personal information to third parties for their own direct marketing purposes.

EEA, UK, and Switzerland

You have the rights to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests, as well as the right to withdraw consent at any time without affecting processing that already happened. You also have the right to lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office (ico.org.uk).

9. Cookies and similar technologies

Meadow's app does not use cookies. mymeadow.app uses only what is strictly necessary to serve the site and, where enabled, cookieless product analytics. We do not use advertising, retargeting, or cross-site tracking cookies, and we do not embed advertising pixels. Because we set no non-essential cookies or similar identifiers, no consent banner is required under the EU ePrivacy Directive or UK PECR.

10. Children

Meadow is intended for adults. You must be 18 or older to use Meadow or create an account. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, email care@mymeadow.app and we will delete it.

Adult users often photograph children — their own, and others'. Meadow does not identify, tag, or build profiles of the people in your photos. You are responsible for the photographs you place in a book or publish on a Photosite, including for having the permission you need from the people in them or their parents.

11. Security

We protect information with encryption in transit and at rest, and with access controls limiting staff access to what is needed to do their jobs.

Photosites are protected by a password you set, and the photographs behind them are served through expiring signed links rather than from a publicly listable location, so a Photosite's media cannot be browsed by someone who doesn't have the link and password.

That said, a Photosite is something you are sharing, not a vault: anyone you give the link and password to can view the photographs, may be able to save them, and can pass them on. Share accordingly.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by law.

12. Changes to this policy

We may update this policy. If we make a material change, we will post the updated version here with a new effective date, and give notice in the app or by email before the change takes effect. Continuing to use Meadow after that date means the updated policy applies to you.

13. Contact

Questions, requests, or complaints: care@mymeadow.app, or write to us at Our Appologies LLC, 8 The Green, Suite B, Dover, DE 19901. We read every message.