Privacy Policy

Last Updated: January 18, 2026

DiaryOftheDead ("we", "our", or "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information.

1. Information We Collect

Information you provide:

Account information (name, email, phone number)
Profile information (photo, bio)
Memorial content (photos, videos, stories)
Payment information (processed by third-party providers)
Communications with us

Information collected automatically:

Device information (type, operating system)
Usage data (pages visited, features used)
Location data (with your permission)
Log data (IP address, browser type)

2. How We Use Your Information

We use your information to:

Provide and maintain our services
Process transactions and send related information
Send notifications about activity on your memorials
Respond to your comments and questions
Improve our services and develop new features
Protect against fraud and abuse
Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share information:

With service providers who assist our operations
To comply with legal requirements
To protect our rights and safety
With your consent

4. Data Security

We implement appropriate security measures including:

Encryption of data in transit and at rest
Regular security assessments
Access controls and authentication
Secure data centers

5. Your Rights

You have the right to:

Access your personal information
Correct inaccurate information
Delete your account and data
Export your data
Opt out of marketing communications

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Memorial pages may be preserved indefinitely unless deletion is requested by authorized family members.

7. Children's Privacy and Child Safety

See our full Child Safety Standards for the zero-tolerance CSAE policy, reporting channels, and how we enforce these rules. The section below covers privacy-specific details.

Age Requirements

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete such information from our servers.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected].

Standards Against Child Sexual Abuse and Exploitation (CSAE)

DiaryOftheDead maintains a zero-tolerance policy toward child sexual abuse and exploitation (CSAE) content and behavior on our platform.

We strictly prohibit:

Any content that sexually exploits or endangers children
Imagery, text, or media depicting child sexual abuse
Grooming behavior or communication intended to exploit minors
Sharing, distributing, or soliciting CSAE material
Any attempt to facilitate inappropriate contact with minors

Our Actions: When we identify or receive reports of potential CSAE content or behavior, we will:

Immediately remove the content
Permanently ban the offending account
Report the incident to the National Center for Missing & Exploited Children (NCMEC) and relevant law enforcement authorities
Preserve evidence as required by law

Reporting CSAE: If you encounter any content or behavior that may constitute child exploitation, please report it immediately:

In-app: Use the Report feature on any content or profile
Email: [email protected]
NCMEC CyberTipline: https://www.cybertipline.org or 1-800-843-5678

We are committed to cooperating fully with law enforcement agencies investigating child exploitation.

8. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

9. Cookies and Tracking

We use cookies and similar technologies to:

Keep you logged in
Remember your preferences
Analyze usage patterns
Improve our services

You can control cookies through your browser settings.

10. Third-Party Services

Our service may contain links to third-party websites. We are not responsible for their privacy practices.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or through the app.

12. Contact Us

For privacy-related questions, contact us at:

Email: [email protected]
Safety concerns: [email protected]
Address: Lagos, Nigeria

Data Protection Officer: [email protected]

Account Deletion

When you delete your account, we initiate a 30-day cooling-off period during which you may reactivate by logging in. After this period, your personal data is permanently and irreversibly deleted, including all memorial diaries you created that have no community contributions. Memorial diaries that contain tributes from other users will be transferred to our Unclaimed Memorials archive to preserve the memories others have shared. We may retain anonymized, aggregated data that cannot identify you for analytical purposes.

8. Echo AI — Data Collection & Privacy

8.1 What Echo Collects. When you interact with Echo AI, we collect and store:
(a) Your messages and questions to Echo;
(b) Echo's responses;
(c) The memorial diary context associated with the conversation;
(d) Web search queries performed on your behalf;
(e) Personal facts you share during conversations (name, relationships, etc.);
(f) Whether you liked or engaged with Echo's responses.

8.2 How We Use Echo Data. Echo interaction data is used to:
(a) Provide personalized, context-aware responses;
(b) Remember your preferences and past conversations;
(c) Improve Echo's accuracy and helpfulness;
(d) Generate anonymized usage analytics;
(e) Detect and prevent abuse of the AI system.

8.3 Third-Party AI Services. Echo uses third-party AI providers (such as DeepSeek or OpenAI) to generate responses, and web search providers (such as Brave Search) for factual context. Your conversation content may be transmitted to these services for processing. These providers have their own privacy policies.

8.4 Data Retention. Echo interaction data is retained for as long as your account is active. You may request deletion of your Echo interaction history by contacting us.

8.5 Opting Out. You can avoid Echo data collection by not mentioning @echo in your comments. Echo only activates when explicitly invoked.

Images uploaded are temporarily shared with Replicate for enhancement (image URL only; not retained beyond standard inference). Text prompts for AI features are sent to OpenAI. Refer to the respective privacy policies of Replicate and OpenAI. You can delete your account at any time to remove all photos and associated data from our systems.

Buyer Contact Number for Marketplace Orders

When you pay for a marketplace item or service using Pay & Protect, we ask you for a contact phone number. We collect this number because:

The seller needs a way to reach you to coordinate the delivery of your item or the arrangement of your service.
Our support team may use it to contact you about a dispute or refund relating to that order.

This number is shared only with the seller of the specific order you placed. With your permission (the "Update my phone number" option at checkout), we also save the number to your profile so that your future purchases are prefilled and you do not have to enter it every time. You can change or remove the saved number at any time in your profile settings; removing it does not affect orders you have already placed.