Legal
Privacy Policy
Last updated: 19 August 2026
This Privacy Policy explains how Toply Agency AB (“Toply,” “Memento Mori,” “we,” “us,” or “our”) collects, uses, stores, and protects personal data when you visit getmementomori.com, create an account, or use the Memento Mori service.
Toply Agency AB is the data controller responsible for the processing described in this Privacy Policy.
Data controller: Toply Agency AB
Country of registration: Sweden
Website: getmementomori.com
Email: oscar@toply.se
1.Information we collect
Depending on how you use Memento Mori, we may collect the following categories of personal data.
Account information
When you create or manage an account, we may collect:
- Your name
- Email address
- Authentication and account identifiers
- Account creation date
- Subscription status
- Communication preferences
- Country, language, and time zone
Memento Mori profile information
To provide the service, we may process information you choose to enter, including:
- Your date of birth
- Age and lifespan-related preferences
- Reminder frequency and delivery preferences
- Dates, time periods, and calculations displayed in your dashboard
- Other profile settings you choose to provide
Memento Mori’s lifespan calculations are illustrative and philosophical. They are not predictions, medical advice, or guarantees regarding any person’s lifespan.
Information about other people
The service may allow you to add information about people who are important to you. This may include names, birthdays, relationships, reminder dates, and other optional details you choose to enter.
You should only provide personal data about another person when you have a lawful and appropriate reason to do so. You must not use Memento Mori to store sensitive personal data about another person without their knowledge or permission.
Reminder and communication information
If you enable reminders or communications, we may collect:
- Your email address
- Your telephone number
- Reminder settings
- Communication delivery status
- Consent, subscription, and opt-out records
- Records showing whether a message was sent, delivered, or failed
SMS and email reminders may be delivered through third-party communication providers. Your mobile operator may apply standard message or data charges.
Payment information
If you purchase a subscription or another paid service, our payment provider may collect your payment card details, billing address, and other information needed to process the transaction.
We normally receive limited transaction information, such as:
- Your selected plan
- Payment status
- Transaction identifier
- Billing country
- Subscription renewal and cancellation dates
We do not directly store complete payment card numbers.
Technical and usage information
When you use the website or service, we may automatically collect:
- IP address
- Browser and device type
- Operating system
- Referring pages
- Pages and features used
- Dates and times of access
- Error reports and security logs
- Cookie or similar technology identifiers
Communications with us
If you contact us, we may collect your contact details and the contents of your message, including information you provide in support requests, feedback, or other communications.
2.How we use personal data
We may process personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Creating and administering your account | Performance of our contract with you |
| Providing dashboards, calculations, reminders, and other requested features | Performance of our contract with you |
| Processing subscriptions and payments | Performance of our contract and compliance with legal obligations |
| Providing support and responding to requests | Performance of our contract or our legitimate interests |
| Securing the service and preventing fraud, abuse, or unauthorized access | Our legitimate interests and compliance with legal obligations |
| Diagnosing errors and maintaining the service | Our legitimate interests in operating a reliable service |
| Improving the website and understanding general usage | Our legitimate interests or your consent where consent is required |
| Sending optional marketing communications | Your consent or another lawful basis permitted by applicable law |
| Complying with accounting, tax, regulatory, and legal requirements | Compliance with legal obligations |
| Establishing, exercising, or defending legal claims | Our legitimate interests |
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.
You may unsubscribe from marketing emails using the unsubscribe link included in each email. You may opt out of SMS communications by following the instructions in the message or by changing your account settings.
3.Where personal data comes from
We primarily collect personal data:
- Directly from you
- Automatically when you use the website or service
- From payment, authentication, communication, and hosting providers involved in delivering the service
- From marketing platforms or other sources where you have validly consented to receive communications from us
4.Service providers and sharing
We may share personal data with carefully selected service providers that help us operate Memento Mori, including providers of:
- Website and application hosting
- Databases and cloud infrastructure
- Account authentication
- Email and SMS delivery
- Payment processing
- Analytics and performance monitoring
- Customer support
- Security, fraud prevention, and error reporting
- Accounting, legal, and professional services
These providers may only process personal data for the agreed purposes and subject to appropriate contractual and security requirements.
We may also disclose personal data when reasonably necessary to:
- Comply with applicable law, a court order, or a lawful request from an authority
- Protect our rights, users, systems, or the public
- Investigate suspected fraud, abuse, or security incidents
- Complete a merger, acquisition, restructuring, financing, or sale of all or part of our business
If a business transaction occurs, personal data may be transferred subject to appropriate confidentiality and data-protection safeguards.
We do not sell your personal data.
5.International transfers
Some service providers may process personal data outside Sweden or the European Economic Area.
When personal data is transferred outside the EEA, we use legally recognized safeguards where required. These may include:
- A European Commission adequacy decision
- The European Commission’s Standard Contractual Clauses
- Additional contractual, technical, and organizational safeguards
You may contact us for further information about the safeguards used for relevant international transfers.
6.Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
In determining a retention period, we consider:
- How long your account remains active
- Whether the information is needed to provide requested reminders or services
- Applicable accounting, tax, and legal requirements
- Security and fraud-prevention requirements
- The time needed to resolve disputes or enforce agreements
- The duration of our backup and deletion cycles
Account information, profile information, and information about other people will generally be retained while your account is active. If you delete your account, this information will be deleted or anonymized in accordance with our deletion process, except where continued retention is legally required.
Residual copies may remain temporarily in encrypted backups until those backups are overwritten through the normal backup cycle.
Payment and transaction records may be retained for the period required under applicable accounting and tax laws.
Marketing information is retained until you unsubscribe, withdraw your consent, or the information is no longer needed. We may retain a limited suppression record to ensure that we respect your opt-out request.
7.Cookies and similar technologies
We may use cookies and similar technologies to:
- Keep you signed in
- Remember your preferences
- Maintain security
- Operate essential website functionality
- Diagnose technical problems
- Measure website usage and performance
- Support marketing activities where you have consented
Essential cookies may be used where they are necessary for the website or service to function. Non-essential analytics or advertising cookies will only be used where permitted and, when required, after you have provided consent.
You can manage non-essential cookies through the cookie banner or cookie settings available on the website. You can also control cookies through your browser, although disabling essential cookies may prevent parts of the service from working correctly.
8.Data security
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include access controls, encryption, secure infrastructure, monitoring, backups, and restrictions on who can access personal data.
No online system can be guaranteed to be completely secure. You are responsible for keeping your login credentials confidential and for notifying us if you suspect unauthorized access to your account.
9.Your data-protection rights
Subject to applicable law, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data
- Request restriction of processing
- Object to processing based on legitimate interests
- Object at any time to direct marketing
- Request your data in a structured, commonly used, machine-readable format
- Withdraw consent where processing is based on consent
- Submit a complaint to a competent supervisory authority
Some rights are subject to legal limitations and may not apply in every situation. We may need to verify your identity before processing a request.
To exercise your rights, contact oscar@toply.se.
You may also submit a complaint to the Swedish Authority for Privacy Protection:
Integritetsskyddsmyndigheten (IMY)
Website: https://www.imy.se/en/
If you live elsewhere in the EEA, you may also contact the data-protection authority in your country.
10.Automated calculations and decisions
Memento Mori may automatically calculate and display dates, time periods, percentages, or lifespan-related estimates based on information and settings you provide.
These calculations are used solely to provide the service. They are not used to make decisions that produce legal or similarly significant effects concerning you.
11.Information about other people
If you add another person’s information to Memento Mori, you are responsible for ensuring that you have an appropriate basis for storing and using that information.
Do not add confidential or sensitive information, such as health information, religious beliefs, political opinions, financial information, or identification numbers.
If someone believes their personal data has been added to Memento Mori improperly, they may contact us at oscar@toply.se.
12.Children’s privacy
Memento Mori is not directed to children under the age of 16, and we do not knowingly collect personal data directly from children under 16.
If you believe that a child has provided personal data to us, please contact oscar@toply.se so that we can investigate and take appropriate action.
13.Third-party websites
The website may contain links to third-party websites or services. We are not responsible for the privacy practices, security, or content of those third parties. You should review their privacy policies before providing them with personal data.
14.Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to the service, our business practices, or applicable law.
The latest version will always be available on this page. If a change materially affects how we use personal data, we will provide additional notice where appropriate.
15.Contact us
If you have questions, requests, or concerns about this Privacy Policy or our processing of personal data, contact: