Create Something Good Inc.

Privacy Policy — memo beta (memo.somethinggood.io)

Effective Date: April 25, 2026

Last Updated: April 25, 2026

1. Introduction

Welcome to memo, a beta service provided by Create Something Good Inc (“we,” “us,” or “our”) and accessible at memo.somethinggood.io. This Privacy Policy explains how we collect, use, disclose, and protect your personal information — including voice recordings and photographs — when you use our services.


By accessing or using memo, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our service.


Because memo is currently in beta, some features and data practices may change as we develop the product. We will notify you of material changes by updating the “Last Updated” date above and, where appropriate, by sending you an email.

2. Who We Are

Create Something Good Inc is the data controller responsible for your personal information. We are incorporated in the State of Delaware, United States. If you have questions about this policy, please contact us at:

Email: info@somethinggood.io

Website: somethinggood.io

3. Information We Collect

We collect information in the following ways:


3.1 Information You Provide Directly

  • Account registration and authentication. memo uses your mobile phone number as your primary account identifier. When you register or sign in, we collect your phone number and deliver a one-time verification code via SMS through Twilio’s Verify service. Your phone number is stored as the unique identifier for your account.

  • Email address (optional). You may choose to link an email address to your account after registration. If provided, your email is verified before being stored and is used to notify you of new contributions to your memories. An email address is not required to use the Service.

  • Your name, as provided when you set up your profile.

  • Voice recordings you create through memo.

  • Photographs and images you upload or capture through memo.

  • Written notes or captions you add to memories.

  • Communications you send to us (e.g., support requests, feedback).


3.2 Information Collected Automatically

  • Usage data, including features used and actions taken within memo.

  • Device and browser information (e.g., IP address, browser type, operating system).

  • Log data, including access times, referring URLs, and error reports.

  • Session interaction data collected via Mixpanel session replay, including clicks, scrolls, and on-screen content (see Section 8.1).

  • Cookies and similar tracking technologies (see Section 8 below).


3.3 Information from Third Parties

  • Twilio, Inc., which we use for phone number verification at login and for SMS communication features within memo.

  • Analytics providers (Mixpanel, Vercel Analytics) that help us understand how our service is used.

3A. Information Collected from Memory Contributors (Guests)

memo allows account holders to invite others to add a voice recording to a shared memory. If you receive an invitation and contribute to someone’s memory without creating a memo account, we collect the following:

  • Your name, as provided when you submit your contribution.

  • Your phone number, if provided (optional).

  • Your email address, if provided (optional).

  • Your voice recording, and the transcription of it generated by OpenAI’s Whisper API (see Section 5A).


This information is stored to enable the memory contribution feature and to allow the memory owner to identify who contributed. If you subsequently create a memo account using the same phone number or email address, your previous contributions will be linked to your new account.


Guest contributors have the same privacy rights as registered users (see Section 11). To exercise your rights as a guest contributor, contact us at info@somethinggood.io with the name and contact details you used when contributing.


The memory owner who invited you is responsible for ensuring you are aware your voice and details will be processed via memo. We require memory owners to obtain appropriate consent from contributors before sending invitations.

4. Voice Recordings and Photographs

Voice recordings and photographs are central to what memo does, and we treat them with particular care.


When you create a voice recording through memo:

  • Your recording is transmitted securely to our servers and stored in encrypted form.

  • Your recording is processed by OpenAI for transcription and summarisation, as described in Section 5A.

  • Your recording is used only to provide and improve the memo service — we do not use it for advertising or any purpose beyond what you would reasonably expect.

  • We do not sell, licence, or share your voice recordings with third parties for commercial purposes without your explicit consent.

  • Your media files are stored on AWS S3 and served via time-limited signed URLs. Your recordings and photos are never publicly accessible.


The same principles apply to photographs and other media you upload through memo.


By recording your voice or uploading media through memo, you explicitly consent to the capture, storage, and processing of that content in accordance with this Privacy Policy.


Where you record the voice or likeness of another person, you are responsible for obtaining their consent before doing so.

5. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the memo service.

  • Authenticate your identity via phone number OTP and issue secure session tokens.

  • Store and enable playback of your voice recordings and photographs.

  • Transcribe and summarise voice recordings using OpenAI’s AI services (see Section 5A).

  • Process and facilitate SMS and other communications through Twilio’s infrastructure.

  • Send invitation and contribution notification emails via Resend.

  • Personalise your experience and improve our product.

  • Send you service-related communications, including security alerts and support messages.

  • Send you marketing communications, where you have consented to receive them.

  • Monitor usage patterns and diagnose technical problems.

  • Comply with legal obligations and enforce our Terms of Service.

  • Protect the security and integrity of our service.

5A. AI Processing of Voice Recordings

memo uses OpenAI’s artificial intelligence services to process voice recordings. By using voice features in memo, you consent to the transmission and processing of your audio by OpenAI as described below.


Transcription. When you create a voice memory, your audio recording is transmitted to OpenAI, Inc. (“OpenAI”) via OpenAI’s Whisper API for speech-to-text transcription. The resulting transcription is stored in your account and used to generate a title or summary for the memory. This same processing applies to voice recordings submitted by guests who contribute to your memories.


Summarisation. Your transcription is passed to OpenAI’s GPT-4o model to generate a short, evocative title capturing the essence of your memory. This title is stored alongside your recording.

Live voice features. memo may offer a live voice assistant feature powered by OpenAI’s Realtime API (gpt-4o-realtime). When you use this feature, your voice is streamed in real time to OpenAI’s servers for processing. This feature will be clearly labelled within the app when available.


OpenAI acts as a data processor on our behalf and is contractually bound to handle your data in accordance with applicable law. By default, OpenAI does not use data submitted via its API to train its models. OpenAI’s API data usage policies are available at openai.com/policies/api-data-usage-policies.


Your voice recordings are transmitted to OpenAI only for the purposes described above. If you do not wish your recordings to be processed by OpenAI, you should not use the voice recording features of memo.

6. Twilio and Communications Data

memo uses Twilio, Inc. (“Twilio”) for two purposes: (1) phone number authentication — when you register or sign in, Twilio Verify sends a one-time SMS code to your phone number, which we use to verify your identity; and (2) SMS and voice communication features within the app. Your phone number is shared with Twilio for both purposes.


When you use authentication or communication features within memo:

  • Your phone number is shared with Twilio to deliver verification codes and, where applicable, other SMS messages.

  • Twilio may log metadata about communications, including timestamps and delivery status.

  • Twilio is a sub-processor acting on our behalf and is contractually required to protect your data.


Twilio’s own privacy policy governs their handling of data on their platform, available at twilio.com. We remain responsible for ensuring Twilio processes your data in accordance with applicable law.


Phone number transfer. If you change your phone number, memo offers a feature to migrate your memories and account data to your new number. During this process, your new number is verified via Twilio Verify and associated with your existing account. Your old phone number is removed from our systems once the transfer is complete.

7. Legal Bases for Processing

Where applicable data protection law (including the UK GDPR and EU GDPR) requires us to identify a legal basis for processing personal data, we rely on the following:

  • Contract performance: to provide the memo service you have signed up for, including storing and enabling access to your voice recordings and photographs, and authenticating your identity via phone number.

  • Legitimate interests: to improve our service, ensure security, and prevent fraud, where these interests are not overridden by your rights.

  • Consent: for the recording and AI processing of voice data, for Mixpanel session recording, for marketing communications, and for non-essential cookies, where we have obtained your explicit consent.

  • Legal obligation: to comply with applicable laws and regulations.


For voice recordings, AI processing, and session recording specifically, we rely on your explicit consent. You may withdraw consent at any time, though this may affect your ability to use certain features.

8. Analytics, Cookies, and Session Recording

We use cookies and third-party analytics tools to understand how memo is used and to improve the service.


8.1 Mixpanel — Event Analytics and Session Recording

We use Mixpanel, Inc. to track product usage events (such as audio playback, OTP requests, and share actions) and to record user sessions. Session recording captures your interactions with the memo interface — including clicks, scrolls, and on-screen content — using Mixpanel’s session replay technology (powered by rrweb). This helps us identify usability issues and improve the product.


Mixpanel may collect your IP address, device identifiers, and interaction data. We configure Mixpanel to associate session data with your user ID, not your phone number directly. Mixpanel’s privacy policy is available at mixpanel.com/legal/privacy-policy.


Session recording is a non-essential analytics function and requires your consent. We will seek this consent when you first use memo. You may opt out at any time by contacting us at info@somethinggood.io.


8.2 Vercel Analytics

The memo web app uses Vercel Analytics, provided by Vercel Inc., to collect anonymous page view and performance data. Vercel Analytics does not use cookies and does not track individual users. Data is aggregated and used solely to monitor service performance.


8.3 Essential Cookies

We set a small number of essential cookies required for the service to function — for example, to maintain your login session and remember UI preferences such as sidebar state. These cannot be disabled.


8.4 YouTube Embeds

If you attach a YouTube video to a memory, the embedded YouTube player is served by Google LLC and is subject to Google’s privacy policy (policies.google.com/privacy). YouTube may set its own cookies and collect usage data when the player loads. We do not control these cookies.


When you first use memo, we will ask for your consent to non-essential cookies and session recording. You can update your preferences at any time through your account settings or browser settings. Note that disabling certain cookies may affect the functionality of memo.

9. How We Share Your Information

We do not sell your personal information. We do not sell, rent, or trade your voice recordings or photographs. We may share your information with:

  • Sub-processors: third parties that help us operate our business, under appropriate data processing agreements. Our current sub-processors include Twilio Inc. (phone authentication and SMS), OpenAI Inc. (AI transcription, summarisation, and live voice features), Resend Inc. (transactional email delivery), Mixpanel Inc. (analytics and session recording), Vercel Inc. (web hosting and analytics), and cloud infrastructure providers for database and file storage. These providers access only the data necessary to perform their functions and are prohibited from using it for other purposes.

  • Professional advisors: lawyers, accountants, and auditors under confidentiality obligations.

  • Law enforcement or regulators: when required by law, court order, or to protect the rights, property, or safety of our users or others.

  • Business transfers: in connection with a merger, acquisition, or sale of assets, where your data may be transferred to a successor entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the service. Specifically:

  • Voice recordings and photographs: retained for the duration of your account, plus 30 days following account deletion to allow for recovery in the event of accidental deletion.

  • Guest contributor recordings and data: retained for the same duration as the associated memory. If the memory owner deletes the memory, contributor data is deleted in cascade.

  • Account information (including phone number): retained for up to 90 days following account deletion, then permanently deleted or anonymised.

  • Usage and log data: retained for up to 12 months for diagnostic and security purposes.

  • Session recording data (Mixpanel): subject to Mixpanel’s own data retention settings, which we configure to minimise retention periods in accordance with applicable law.


We will also retain information where required to comply with legal obligations, resolve disputes, or enforce our agreements. During the beta period, data may be reset or deleted as part of service development — we will provide reasonable notice where possible.

11. Your Privacy Rights

Depending on where you are located, you may have the following rights regarding your personal information. These rights apply to both registered users and guest contributors:

  • Access: request a copy of the personal data we hold about you.

  • Correction: request that we correct inaccurate or incomplete data.

  • Deletion: request that we delete your personal data, including your voice recordings and photographs.

  • Portability: request your data in a structured, machine-readable format.

  • Objection: object to certain types of processing, including direct marketing or session recording.

  • Restriction: request that we restrict processing of your data in certain circumstances.

  • Withdraw consent: where processing is based on consent (including for voice recordings, AI processing, and session recording), you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.


To exercise any of these rights, please contact us at info@somethinggood.io. We will respond within 30 days (or within one month as required by UK/EU GDPR), and may extend this period by a further two months for complex requests, with notice.


You also have the right to lodge a complaint with your local data protection authority. If you are in the United Kingdom, this is the Information Commissioner’s Office (ICO) at ico.org.uk. If you are in the EU, you may contact the supervisory authority in your country of residence.

12. Data Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or destruction. These measures include:

  • Encryption of voice recordings and photographs in transit and at rest.

  • Time-limited, signed URLs for media access — your recordings and photos are never publicly accessible.

  • Access controls limiting who within our organisation can access your data.

  • Regular security reviews of our infrastructure and practices.


Because memo is in beta, please be aware that no system is completely secure. We encourage you to contact us immediately at info@somethinggood.io if you suspect any unauthorised access to your account.

13. International Data Transfers

Create Something Good Inc is based in the United States. Your data — including voice recordings, photographs, and session data — may be stored and processed in the United States or other countries where our service providers (including OpenAI, Twilio, Mixpanel, and Resend) operate.


Where we transfer personal data from the United Kingdom or European Economic Area to countries that may not have equivalent data protection laws, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or the UK ICO, or other lawful transfer mechanisms.

14. Children’s Privacy

memo is not directed at children under the age of 13 in the United States, or under the age of 16 in the United Kingdom and European Economic Area. We do not knowingly collect personal information — including voice recordings — from children below these ages. If you believe a child has provided us with personal data, please contact us at info@somethinggood.io and we will delete it promptly.

15. Beta Service Notice

memo is provided as a beta product. During the beta period, features, data practices, and third-party integrations may change. In particular:

  • The list of sub-processors may expand as we add new features.

  • Data retention periods and storage infrastructure may evolve.

  • We may introduce additional data collection as new functionality — including expanded AI features — is developed.


We will update this Privacy Policy as our practices evolve and will provide notice of material changes as described in Section 1.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes — including changes to how we handle voice recordings, AI processing, or session recording — we will notify you by updating the Effective Date above and, where required, by sending an email to the address associated with your account.


Your continued use of memo after a change to this Privacy Policy constitutes your acceptance of the updated policy.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

Create Something Good, Inc.

169 Madison Avenue

New York, NY 10016

Email: info@somethinggood.io

Website: somethinggood.io

© Create Something Good Inc. 2026