Privacy Policy

MissionMems (“we,” “us”) is an independent service that turns a missionary’s emails and photos into a printed scrapbook. We are not affiliated with The Church of Jesus Christ of Latter-day Saints.

We read what you send us, and only that:

• Email sent to your MissionMems address — the weekly letters, and anything else that is mailed or forwarded to it, with its attachments: photos, voice recordings, videos, and documents.
• Mailbox archives you upload, such as a Google Takeout export. We read the messages in them to find your missionary’s letters.
• Photos you upload, and photos in a shared album you link us to.
• Gmail and Google Photos, only if you connect a Google account, and only inside your mission’s service window (the dates you tell us when you set up your mission): subject lines, senders, recipients, dates, message bodies, photo files and capture dates.
• Account basics — your name, your email address, and the missionary details you typed in (their name, mission name, dates).
• Shipping info for any printed book you order from us.

Your address receives whatever is sent to it, and an archive holds everything in that mailbox. Our system has to open a message to know whether it is one of your missionary’s letters, so messages that are not — replies, newsletters, other people’s email, and whatever is attached to them — are read by our automated systems, and may be passed to the AI provider below, in the course of sorting them.

• Messages that are not letters are kept out of your book.
• Some are kept in your account, set aside rather than printed, so you can choose to include them — letters home from the family, for example.
• For a message we refuse outright, we keep a short record of who it was from, its subject, and why it was refused, so you can see what arrived.

Please don’t send us anything you don’t want us to have. Anything that reaches us because you sent it, forwarded it, or included it in an archive is covered by section 5 of our Terms of Service, and you can delete all of it at any time by deleting your account.

We use the data for exactly one thing: composing your book and printing it. Specifically:

• We index your letters so we can group them into chapters by area and date.
• We send each letter to Anthropic's Claude model with a strict source-only prompt — Claude pulls quotes or paraphrases, but is forbidden from inventing names, places, or events. The result is a caption that goes on a book page.
• We do the same for baptism mentions and companion names, then ask you to confirm every name before it reaches print.
• If you place an order, we send the print-ready file and your shipping address to our print-fulfillment partner so they can manufacture and mail your book.

Your letters and photos are stored in one place, and processed by one other:

• Supabase (Postgres + Storage), our database and file host, with row-level security so only you (and our system on your behalf) can read your rows. Tokens for connected accounts are stored as encrypted bytes.
• Anthropic Claude (an API, not training) processes letter and photo text to produce captions. The text is sent over the wire, processed, and the result comes back — Anthropic does not retain it for training under their API terms.

A few other services handle a narrow part of the job and see only what that part needs:

• Vercel hosts the website and runs the code that reads your mail; your data passes through it on the way to and from the database.
• Cloudflare and Amazon Web Services receive the email sent to your address and hand it straight to us.
• Stripe takes payment. We never see or store your card number.
• Resend delivers email we send you, such as receipts and shipping notices.
• Our print partners receive the rendered book file and the shipping address you provide. Nothing else.

• Everything travels over encrypted connections (HTTPS), and our database host encrypts it at rest.
• Each account can reach only its own letters, photos, and orders. That rule is enforced by the database itself, not just by our website.
• Passwords are never stored by us in readable form, and tokens for connected accounts are encrypted.
• Only a small number of people on our team can reach the systems that hold your data.

No system is perfectly secure, and we can’t promise yours never will be reached by someone who shouldn’t. If we learn of a breach that affects your data, we will tell you promptly and as the law requires.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In plain English:

• We only request the Gmail and Photos scopes we genuinely need to compose your book.
• We don't transfer Google user data to third parties except as required to provide the service (e.g., sending your rendered book file to a print partner).
• We don't use Google user data for advertising or for any purpose unrelated to producing your scrapbook.
• People on our team don't read your Google data, except (a) with your explicit permission, (b) to investigate a security or abuse issue, or (c) as required by law.

We keep your data for as long as your account exists. If you delete your account or your mission, we delete everything tied to it from our active systems within 30 days, and from backups within 90 days.

At any time you can:

• Revoke Google access at myaccount.google.com/permissions. The moment you do, we stop being able to read anything new.
• Delete your datayourself, from the Account page (“Delete everything”), or by emailing us at info.missionmems@gmail.com with the subject “Delete my data.” We will remove your account, mission, letters, captions, photos, companions, baptisms, and any unfulfilled orders within 30 days and confirm by email. Backups roll out within 90 days.
• Export your data by writing the same address. We’ll send you a JSON dump of everything tied to your account.

Supabase sets one set of cookies to keep you signed in, and we set one to remember which partner link, if any, brought you here.

While we’re testing whether this product is worth building, we also run the Meta Pixel so we can see how many people who click one of our ads actually finish making a book. It records which step of the process you reached — landed, started, uploaded, finished — and nothing else.

• It never sees your letters, your photos, your captions, your mission details, or any name. Those never leave our infrastructure, and sending them to an ad network would contradict the entire point of this product.
• The only extra details attached to an event are coarse numbers — the size of an uploaded file, how many letters were found.
• Block it with any tracker blocker, or by turning off “Allow Cross-Site Tracking” in your browser. Nothing about the product breaks if you do.
• It runs only while the ad test is live. When that ends, it comes out and this section goes back to saying we don’t track you.

No other analytics, and no advertising cookies beyond this one.

MissionMems is intended for adults. We do not knowingly collect data from anyone under 13. If a missionary is under 18, a parent or guardian should be the account holder.

If we change anything material, we’ll email you before the change takes effect and update the date at the top of this page.

Questions, complaints, or a deletion request: info.missionmems@gmail.com.