The Times of my Life

Privacy Policy

Draft — last updated September 29, 2026. Not yet reviewed by an attorney.

Attorney review required before large-scale launch. This draft was prepared to describe how the service actually works. It does not guarantee compliance with any law.

The Times of My Life (https://thetimesofmylife.com) is run by CompanyWRX, LLC, a New Mexico limited liability company ("we," "us"). This policy explains what information we collect, why, who we share it with, and the choices you have.

Our starting point is simple: your memories belong to you. We built the service so that your memories are private unless you choose to share them, and so that you can always take them with you.

The short version

  • Your memories are private by default. You choose who sees each one.
  • There is no public feed, no public discovery, and no advertising. We do not sell your information.
  • Our staff cannot casually browse your private memories. Support access is limited and logged.
  • Most of our "smart" features run on our own servers. Paid AI features send only a small, relevant slice of information to outside AI providers.
  • Facial recognition is off unless a family space owner or event host turns it on.
  • You can export everything for free and delete anything, including your whole account.

Information we collect

Information you give us

  • Account details: your name, email address, and sign-in information.
  • Your memories: photos, videos, audio recordings, written memories, albums, stories, and event content, along with details you add such as captions, dates, places, and the names of people.
  • Family and sharing details: who is in your family spaces, who you have shared with, and the people you have identified in memories.
  • Legacy contacts you nominate.
  • Messages you send us, such as support requests and content reports.

Information that comes with your files

Photos and videos often carry hidden details (metadata), such as the date taken, the camera model, and sometimes GPS location. We keep this metadata so we can sort your memories and so your export is complete.

Information about event guests

Guests at an event provide a name and, if the host chooses, an email address or phone number. A cookie on the guest's device remembers them for that event. No account is created. See our Event Guest Privacy Notice.

Information we create to make the service work

When you upload, our own servers create:

  • Thumbnails and smaller copies for fast viewing.
  • Image and text "embeddings," which are lists of numbers that describe a photo or text so you can search your archive by meaning. These are made with an open-source model (CLIP) running on our servers.
  • Face detection results, using open-source models, which note where faces appear in a photo.
  • Face descriptors (a list of 128 numbers per face) — only if facial recognition has been turned on for that family space or event. See our Facial Recognition & Biometric Notice.
  • Transcripts of audio recordings, if you use transcription.

Payment information

Payments are handled by Stripe. We never see or store your full card number. We receive limited information from Stripe, such as the type of plan, payment status, and the last four digits of the card.

Technical information

Like any website, our servers record basic technical information such as IP address, browser type, and the time of requests. We use it to keep the service running and secure.

We use only essential cookies. On our public marketing pages we use Umami, a privacy-friendly analytics tool that runs on our own servers and uses no cookies. Private content never goes to analytics. See our Cookie Policy.

How we use information

We use information only to:

  • Provide the service: store, organize, display, search, and back up your memories, and show them to the people you choose.
  • Run the features you use, including paid AI features and, if turned on, facial recognition suggestions.
  • Process payments and manage plans.
  • Keep the service safe: prevent abuse, investigate reports, and protect accounts.
  • Communicate with you about your account, security, and changes to our policies.
  • Meet legal obligations.

We do not use your memories to advertise to you, to build profiles to sell, or to train AI models.

Family archives often include children. We use photos and information about children only to provide the service, and for nothing else.

AI features

Most intelligence runs on our own servers when you upload. Paid AI features — asking questions of your archive, drafting stories, choosing slideshow photos, event recaps, and short photo descriptions for Premium — send a small relevant subset of metadata and at most a few small thumbnails to outside AI model providers:

  • Anthropic (primary)
  • OpenAI (backup, and for audio transcription of recordings)
  • Google may be added in the future; we will update this policy first.

These providers process the information under their API terms, which state that API inputs are not used to train their models by default.

We keep an AI usage ledger that records costs and token counts. It never stores the prompts or the content sent. AI never infers race, ethnicity, religion, health, emotion, political beliefs, or other sensitive traits. You can edit anything AI produces. See our AI Feature Notice.

Who can see your memories

Each memory is visible only to the people you allow:

  • Private — only you.
  • Specific people — the individuals you choose.
  • A family space — members of that space.
  • An event — the event's hosts, and guests if the hosts allow it during the guest window.

Sharing is one hop. Someone you share with cannot share your memory onward. Private pages are not indexed by search engines.

Our own staff: administrators cannot casually browse private memories. When support access is needed — for example, to fix a problem you reported or to investigate a report of illegal content — it is limited to what is needed and it is logged.

Who we share information with

We do not sell or rent your personal information, and we do not share it for targeted advertising.

We share information only with:

  • Service providers who help us run the service, under contracts that limit their use of it:
    • DigitalOcean (United States) — hosting, our database, and private object storage (Spaces) for your media.
    • Stripe — payments.
    • Anthropic, OpenAI, and possibly Google in the future — paid AI features and transcription, as described above.
    • An email delivery provider for account and security emails.
  • The people you share with, as you direct.
  • Legal and safety authorities when the law requires it. We report child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) as required by law. We may also share information to protect someone's safety or to respond to valid legal process.
  • A buyer or successor if CompanyWRX, LLC or the service is sold or reorganized. Any successor must honor this policy for information collected under it, or give you notice and a chance to export and delete.

How we protect your information

  • Media is stored in private object storage and shown only through short-lived signed links, so a link cannot be passed around indefinitely.
  • Our database and storage are in the United States.
  • Access by our staff is limited and logged.
  • We use encryption in transit (HTTPS).

No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

How long we keep information

  • Memories stay until you delete them. Deleted memories sit in Trash for 30 days, then are permanently erased, including all derived copies such as thumbnails, embeddings, and transcripts.
  • Accounts you delete have a 14-day grace period after you confirm, then deletion begins.
  • Face descriptors are deleted when the photo, person, or account is deleted, and within 30 days of their purpose ending (for example, when a space turns facial recognition off or an account is deleted).
  • Guest access to an event gallery expires (by default 30 days after the event), but expiry never deletes memories.
  • Payment and tax records are kept as long as the law requires.
  • Backups are cycled out on a fixed schedule: database backups are kept for 7 days, and our file storage keeps the previous version of a deleted or replaced file for 30 days (in two regions) so that an accident can be undone. After that, the copy is gone.

Details are in our Data Export & Deletion Policy.

Your choices and rights

You can, at any time and for free:

  • See and download your memories and originals.
  • Export everything as a ZIP file (originals, metadata, albums, and stories).
  • Correct information in your account and memories.
  • Delete individual memories, albums, events, people identifications, face data, or your whole account.
  • Mark a person "do not recognize", which deletes that person's face descriptors.
  • Turn off facial recognition for a space you own.
  • Cancel a paid plan without losing any memories.

Depending on where you live, you may have additional rights under state privacy laws, such as the right to know, access, correct, delete, or port your information, and to appeal our decision on a request. Email bill@companywrx.com and we will respond within the time the law requires. We will not treat you differently for using your rights.

Children

The service is for people 13 and older. Users under 18 need a parent or guardian's permission. We do not knowingly collect personal information directly from children under 13. Family archives will naturally include photos of children added by their families; we use these only to provide the service. If you believe a child under 13 has created an account, please contact us and we will delete it.

Changes to this policy

If we make a significant change, we will tell you by email or in the app before it takes effect. The date at the top shows the latest version.

Contact us

CompanyWRX, LLC [Mailing address — to be confirmed] Email: bill@companywrx.com