Privacy Policy
Last updated: 13 October 2026
MINNGR is a place to keep memories (photos, videos, places and the days between) and to share them with a link or an NFC tag. This policy explains what we collect, why, who helps us run the service, and what you can do about it.
Who is responsible. Þorsteinn Emilsson, Postbox Kaplakriki, Iceland. You can write to us at hello@minngr.com about anything in this policy.
What we collect
| What | Why | How long |
|---|---|---|
| Your account: email address, password (stored only as a one-way hash), and the name, short bio and profile photo you choose to add | To create and secure your account and to show your name where you ask us to | Until you delete your account |
| Your memories: titles, descriptions, dates, ratings, places, itinerary days, tips and notes | This is the service itself | Until you delete them or your account |
| Photos and videos you upload, including the details inside the files, such as when and where a photo was taken (GPS) | To show your gallery, the photo map and your memories | Until you delete them or your account |
| Your device location, only when you press a button that uses it | To fill in a place and find places and memories nearby | It is used on the spot; it is saved only if you save it in a memory |
| Messages you send us through Send feedback: the message, what it is about, the app version, the type of device and the screen you were on, and your email address | To fix problems and improve MINNGR | We keep the message; if you delete your account your email address is removed from it |
| Your email address on the waiting list, if you signed up on minngr.com, with the date and your country | To tell you when MINNGR opens | Until you ask us to remove it |
| Technical records that our hosting providers keep when you use the service, such as your IP address and browser or device type | To deliver the service and keep it secure | A short period set by each provider |
We do not sell your data. We do not show advertising and we do not use advertising or tracking cookies.
Why we may use your data
- To provide the service you asked for (creating your account, storing and showing your memories). This is the main reason for almost everything above.
- With your permission, for your device location. You can say no, and you can withdraw permission in your device settings at any time.
- For our legitimate interests in keeping the service secure, preventing abuse and fixing problems, for example by reading the feedback you send us.
Sharing your memories
Sharing is always your choice. When you turn it on for a memory, anyone who has its link, or taps its NFC tag, can see that memory: its text, places, itinerary, tips, photos and videos. They do not need an account.
- Treat a link like a private address. If you post it publicly, the memory is public.
- You decide whether guests see your name and profile photo, and whether they see a download button for photos.
- You can end sharing at any time, or make a new link so the old one (and any NFC tag written with it) stops working.
- Photos are kept private. Guests receive short-lived addresses for the files, valid for about an hour. Someone who copied such an address could open that file until it expires. Anyone who can see a photo can also take a screenshot of it.
- A memory you share may include photos of other people. Please make sure you have the right to share them.
An NFC tag holds only the link to the memory, not the memory itself.
Who helps us run MINNGR
We use a small number of companies to provide the service. They process data for us and only for that purpose.
| Company | What it does for us | What it receives |
|---|---|---|
| Supabase (data stored in Frankfurt, Germany) | Our database, sign-in and file storage | Everything in your account, memories, photos and videos |
| Cloudflare | Hosting for minngr.com and the web app, DNS, forwarding of our email, and counts of visits | Requests to our sites (including IP address), and the waiting-list address |
| Resend (EU region) | Sending the emails you ask for: confirming your account, resetting a password, replying to you | Your email address and the content of the email |
| OpenStreetMap | Map pictures and place search | The map area you look at and the place names or coordinates you search for |
| Overpass API (overpass-api.de) | Finding places nearby | The coordinates you look around |
| Open-Meteo | Historical weather for a place and date | Coordinates and dates |
Some of these companies are based outside the European Economic Area. Where your data goes there, it is covered by the standard contractual clauses the European Commission has approved, or an equivalent safeguard.
Keeping and deleting your data
- Delete your account in the app: Settings, then Delete account. This permanently removes your account, memories, photos, videos and share links. It happens straight away and cannot be undone.
- Delete a single memory or photo whenever you like; its files are removed too.
- Backups. We do not keep separate backups of your content at the moment. Keep your own copies of anything you cannot replace. If this changes, we will update this policy.
- Feedback. If you delete your account, your feedback messages stay, but without your email address, so we cannot tell who sent them.
- Waiting list. Ask us and we will remove your address.
Your rights
Under data protection law, including the GDPR, you can:
- see and download your data. In the web app, open Storage and press Download my data.
- correct it. Edit your memories and your profile.
- have it erased. Delete it in the app, or write to us.
- restrict or object to how we use it, and move it elsewhere.
- withdraw consent you gave, for example for location.
- complain to your data protection authority. In Iceland that is Persónuvernd (personuvernd.is).
To use any of these, or if you cannot do it in the app, email hello@minngr.com. We answer within a month.
How we protect it
Everything travels over encrypted connections. Photos and videos are stored privately. The people who run MINNGR have access to the systems that hold your data, and the admin tools require two-factor sign-in. No system is perfectly secure, and we will tell you if something that affects you goes wrong.
Cookies and similar storage
The web app keeps your sign-in session and your settings in your browser's storage so you stay signed in. We do not use advertising or tracking cookies. Our admin tools use a Cloudflare cookie to sign our own team in.
Children
MINNGR is not meant for anyone under 13. We do not knowingly collect data from children under 13. If you think a child has given us data, write to us and we will delete it.
Changes
If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top shows when it was last updated.