SUPPLEMENTAL PRIVACY POLICY

Last Updated: March 17, 2026

This Supplemental Privacy Policy describes the privacy practices of Interactive Memories, Inc. (“Mixbook”, “we”, “us”, or “our”), and how we handle personal information that we collect through and in connection with the AI-powered functionality within the Mixbook platform (the “Services”). It applies solely to the processing of personal information in connection with our AI-powered features and does not apply to other Mixbook services.

This Supplemental Privacy Policy should be read together with the Mixbook Privacy Policy, which sets out additional information regarding how we process personal information when you use the Mixbook platform, including our disclosure practices, international transfers, data retention, and data subject rights.

Personal Information We Collect

We collect the following categories of personal information about you:

Information you provide to us

Photo and video information, such as photos, videos, or other user-generated content that you upload or otherwise provide through the Services.
User generated information, such as contextual information you provide about visual information you upload, including captions and responses to our Service’s prompts and metadata associated with your content.
AI-generated information, such as memory titles, summaries, narratives, event groupings, contextual tags, and other metadata created through our AI-powered features based on the content you upload or provide through the Services.
Facial recognition information. We may use facial recognition technology to help you organize and manage your photos. This may involve processing certain biometric information from the photos you upload. Please see Section 2 (Facial Recognition and Biometric Information) and our Biometric Notice and Consent for more detail.
Communications that we exchange with you, including when you contact us with questions, feedback, or otherwise.
Other information not specifically listed here, which we will use as described in this Supplemental Privacy Policy or as otherwise disclosed at the time of collection.

Information you provide to us about others

Where you provide us with the personal information of third parties, such as your friends or other individuals appearing in your uploaded content or referenced in contextual inputs, you are responsible for ensuring that you have the right to share that information with us. You should inform such individuals, where appropriate, that their personal information may be processed in accordance with this Supplemental Privacy Policy.

Information we obtain from other sources:

Other users may upload photos and videos that identify you, or include information about you in user-provided contextual inputs (for example, identifying an image as “sister” or including your name as part of a memory).

Facial Recognition and Biometric Information

The Services include facial recognition functionality to help you organize, enhance, and tell stories with your photos. When you upload images, we may process certain biometric information, such as facial features, patterns, and embeddings, to identify when the same person appears across different photos in your collection. This supports functionality such as grouping similar photos, suggesting tags, identifying individuals in memory stories, and enabling personalized artwork and storytelling experiences.

Our facial recognition technology is self-hosted within Mixbook’s secure infrastructure and operates only within your Mixbook account. We do not create a centralized or cross-account facial recognition database, and facial data is not searchable, matched, or combined across different user accounts. and we do not use facial data for any form of advertising, surveillance, identity verification, authentication, or public search. The use of facial data is limited to enhancing your personal experience within the Services.

The data processed for these purposes includes facial feature vectors and embeddings, face bounding boxes, face match identifiers, and related metadata. We do not collect biometric identifiers issued by governments. Facial data is retained only while your account is active and while facial recognition functionality is enabled. If you delete your account, or withdraw your consent for facial recognition, we permanently delete all facial data from our systems, including all associated embeddings and face collections. Facial recognition features are only activated with your explicit consent. You may disable facial recognition in your account settings or request deletion of facial data associated with your account at any time. For more information about how we handle biometric data and your options, please see our Biometric Notice and Consent.

How We Use Personal Information

We collect, hold, use and disclose personal information for the following purposes or as otherwise described at the time of collection:

To provide our Services. We use your personal information to perform our contractual obligation towards you to provide you with the Services. This includes:

Processing your content to create customized memories and generate personalized product suggestions, such as “Suggested Books” and “Memory Art”, powered by your unique context;
Administering, hosting, and operating our Services;
Communicating with you and responding to any inquiries you may have; and
Analyzing your use of our Services to allow us to evaluate and improve the Services.

For research, development, benchmarking, and improving our Services. We may use personal information where it is permitted by law (which may include where it is in our legitimate interests) to analyze and improve the Services, identify trends, and operate and expand our business activities. We may also create aggregated, anonymized, or other de-identified statistics, which we may use and disclose for lawful business purposes, including for analytics, forecasting, and strategic planning.

Except where consent is required, we carry out marketing and advertising where permitted by law (which may include where it is in our legitimate business interests).

For compliance and protection. We may use personal information to comply with legal obligations, including to enforce any applicable terms and conditions, and where we have a legitimate interest to defend against legal claims or disputes, protect the security and integrity of our Services, and identify and investigate fraudulent, harmful, unauthorized, unethical or illegal activity.
For other lawful purposes. We may also use personal information as otherwise permitted or required by law.

Changes to This Supplemental Privacy Policy

We reserve the right to modify this Supplemental Privacy Policy at any time. Where we do so, we will update the date of this Supplemental Privacy Policy and post it on the Services. If we make material changes to this Supplemental Privacy Policy, we will let you know.

How to Contact Us

Contact us. Interactive Memories, Inc. is the entity responsible for your personal information, as the controller under applicable laws.

If you have any questions about this Supplemental Privacy Policy, please contact us at privacy@mixbook.com. You may also contact us by mail at 2000 Broadway St., Redwood City, CA 94063.

If you are an individual in the EU, UK, Iceland, Norway or Switzerland, you can also contact DataRep, our Data Protection Representative, by emailing mixbook@datarep.com or writing to DataRep, DataRep, The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland (referencing “Mixbook” or “Interactive Memories” in the body of the correspondence).