This is a pre-launch draft and will be reviewed by a lawyer before launch. Any changes will be shown here with a new version date.
In short
WorldMe (worldme.cc, “we”) is operated by World and Me Information Co., Ltd. (世界與我資訊有限公司, Taiwan company no. 61991099), 2F., No. 14, Ln. 156, Shalun Rd., Tamsui Dist., New Taipei City 251, Taiwan. For any question or request about your personal data, email support@worldme.cc.
| Data | When | Details |
|---|---|---|
| Account | When you sign in with Google | Your Google account ID, the email Google has verified, and your name. We do not take your profile picture or your Google password (you only enter it at Google). |
| Life map | When you add it | Moments and their text, dates, places, photos and videos, tags, relationship periods, places you want to go, comments, friends you tag, and who can see each item. Before storing a photo or video we strip the location, capture time and phone model from the file; the capture time and place are kept in your own data, visible only to you. |
| Imports | When you import from your photo library or from a Google, Facebook or Instagram “download your data” file | The file is read inside your browser and never uploaded as a whole; only the photos you tick, with their capture time, place and post text, are saved to your life map. |
| Friends | When you use friend features | Friendships, invitations, groups, blocks, reports, and the birth year you enter (to check age limits). |
| Settings | When you change settings while signed in | Interface language, followed countries and categories, your country, and similar. |
| Push subscription | When you turn on notifications in settings (one record per device) | The push address and two public keys your browser's push service gives this device (usable only to send notifications to it), interface language, time zone, the notification types and quiet hours you chose, the IDs and titles of news events you follow, your account ID if you are signed in, and how many notifications were sent today. It never includes the content of your memories or comments; notifications only say how many there are. Turning notifications off in settings, or revoking them in your browser, deletes the record. |
| Family check-in | When you create or join “Our family” (life map “Loved Ones”) | What your family calls you, the city you chose (city or district only, no street address; coordinates rounded to 2 decimals) and its time zone, the daily check-in time, your phone number (optional); each day whether you tapped “I’m fine today” or “Not feeling well”, your mood and one optional sentence; the ❤ and replies others send, “I’ll go check” and “Reached them”; “I need help” requests (what, details, when, who will help); how far “not checked in” notifications went; until when you paused daily check-in; and, if a family member reports that someone has passed away, who reported it (so we can tell that person if they come back, and handle false reports). Only people who joined the same group can see it; “not feeling well” is health-related and is shown only to the family you chose. No live location tracking. Check-in circles: members see only the district you chose; invite codes are stored only as hashes (7 days); who asked whom to be a check-in buddy and whether they agreed. “Arrived / home / good night” posts and the sentence you write (visible to the group, 90 days). Emergency contacts: the name and mobile number you enter (used only to text them when your family can’t reach you; they must agree by entering a code), and whether they agreed; text delivery records are kept 90 days, after which only the last three digits of the number remain. Texts are sent by our SMS providers (EVERY8D, SMS-GET, Twilio). In memory: records of a family member’s report and confirmation (who and when), and the words people leave on the “🤍” post (90 days). |
| Search | When you search the news | The words you type. |
| Browser ID, IP address | Every visit | A random browser ID (not linked to your account) and your IP address, used for rate limits and to stop scraping and abuse. |
| Signed-in devices | When you sign in | Sign-in time, last use, and device type (for example “Chrome · Windows”), so you can see and sign out other devices in Settings. |
| Reports | When you send one | Translation-error reports, “this site was blocked” reports (site and country only, not who sent it), and media removal requests (the email and website the media outlet enters). |
You can read the news without signing in; then we only have a browser ID and IP address.
These providers process some data on our instructions to run the service (each has its own privacy policy):
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Cloudflare | Network, protection, file storage (R2) | All connections (including IP); life-map photos, videos and files | Global network; files stored in Asia-Pacific |
| Backblaze | Daily backups | Encrypted backups of databases and files | United States |
| OpenAI | Translating headlines, matching searches | Only news headlines and the words you type into search; never your life map or account data | United States |
| Microsoft Azure Translator | Backup translation (when the AI cannot translate) | Same as above (headlines, search words) | Microsoft data centres (outside Taiwan) |
| Sign-in | The name and email you agree to share on Google's sign-in screen | Global | |
| Brevo | Sending service emails | Recipient email and message | European Union |
| Text message providers: EVERY8D (main), SMS-GET (backup), Twilio (second backup) | Sending Family check-in texts (only if you turn on “Text alerts”: the code text asking an emergency contact to agree, and texts to emergency contacts when no family member can reach you) | The emergency contact’s mobile number and the text (your name in Family check-in, the can’t-reach-you notice, the code and link) | EVERY8D, SMS-GET: Taiwan; Twilio: United States (used only if the first two cannot send) |
| Vultr (after launch) | Web server | All data on the site | Tokyo, Japan |
| Your browser's push service (e.g. Google, Apple, Mozilla) | Delivering notifications to your device (only if you turn notifications on) | The encrypted notification; the push service cannot read its content | Depends on the push service |
Apart from these and the legal requirements in section 6, we do not give your personal data to anyone.
“Sound memories” in the life map are recordings you make (they may include your voice or other people’s). They are stored in your photo space and, like photos, have file metadata removed on upload. By default only you can listen; if you set a sound to “same as this memory”, friends who can see that memory can listen too. Please get consent before recording other people; sounds can be reported. Recording, noise reduction, trimming, volume, warm tone and background music are all processed in your browser and are not sent to anyone else for analysis. A message “to my future self” stays locked, even from friends, until the date you chose.
“Loved Ones” in the life map (cities where family or friends live) are stored in your own data and only you can see them; the people concerned are not told. To show the weather, our server sends only the city’s coordinates (rounded to 2 decimals, about 1 km) to the Norwegian Meteorological Institute (MET Norway); earthquake data comes from the U.S. Geological Survey (USGS) public feed. Neither receives your account or any other personal data. Cards you mark “In memory”, the day they left us, what you write to them and the last check-ins you keep are also stored in your own data and only you can see them; deleted cards stay in “Recently deleted” for 30 days before they are really deleted.
These features connect directly from your browser to a service you choose, without going through us; that service's terms and privacy policy apply:
As listed in section 4, some data is stored or processed outside Taiwan (for example in the United States, Japan and the EU). We only use providers with security safeguards and give them only what they need to do the job.
When a court, prosecutor or other authority lawfully requires it, we provide data to the extent the law requires. For content involving the sexual exploitation of children or minors, we delete it, preserve the necessary evidence, and report it to the authorities under Taiwan's Child and Youth Sexual Exploitation Prevention Act.
| Data | Kept for |
|---|---|
| Account and life map | Until you delete it. After deleting your account, signing in with the same account within 30 days restores it; after 30 days everything (including photos and videos) is permanently deleted. |
| Backups | Daily database backups for 7 days, weekly ones for 4 weeks; deleted files stay in backups for at most 30 more days, then are removed automatically. |
| Search words | Kept with their English translation in the translation cache for 30 days so they need not be translated again (not linked to your account or browser). |
| IP addresses | Rate-limit counters are kept in memory only and reset daily; blocked connections are logged for 14 days; records of unusually heavy AI use are kept for 90 days. |
| Browser ID | Cookie lasts 30 days; daily user counts store only a hash of the ID for that day, then just the count. |
| Push subscription | Until you turn notifications off, revoke them in your browser, or the push service tells us the device is gone; the daily send count is kept only for that day. |
| Family check-in | Daily check-ins, ❤ and replies, notification records and finished requests are deleted automatically after 90 days; your name, city and phone are deleted when you leave your last group (if the creator leaves, the group is closed and everyone’s data in it is deleted). |
| Evidence of illegal content | As long as the law requires. |
We only use cookies the site needs to work; no advertising or tracking cookies at present (if ads are ever added, we will update this policy and tell you first, see section 12):
worldme_sid: keeps you signed in (365 days; ends when you sign out).worldme_browser: random browser ID for rate limits and scraper protection (30 days).worldme_pass: page pass that stops other programs from bulk-downloading (1 hour).Your settings, this device's copy of your life map, and your OpenRouter key are kept in your browser's local storage (localStorage, IndexedDB); clearing your browser data removes them.
The site's background script (service worker) keeps only public news headlines on your device (up to 6 hours, so you can see them when offline); private data such as your life map, photos, account and friends is never stored by it.
Under Taiwan's Personal Data Protection Act you may ask to see your personal data, get a copy, have it completed or corrected, have us stop collecting, processing or using it, or have it deleted.
Providing data is optional, but without signing in you cannot use the life map, sync or friend features.
On the anniversary of a memory you share with a friend (you tagged each other and they accepted, or you were in the same city on the same day and both have “overlaps” on), we show it in “On this day” in your life map, and round anniversaries may also be sent as a notification (saying only how many years ago and with whom — no place or content). When you tap “Send to” a friend, they get a notification and see in their own “On this day” that you remembered that day; they still only see the memory they could already see. You can turn notifications or the whole feature off in Settings › Life map; we record which ones were sent and whether you opened them only to limit how often.
In Settings › Account › “Leave to family” you can pass cards you choose (places you lived, memories, photos, videos, voices) to your children or someone you trust: you create a link (valid 7 days, for one account only, can be cancelled at any time; a link for a friend opens only for that friend; we store only a hash of the link’s random code). After opening it with their own account, they see only the cards you picked, your message and roughly how large it is, and can copy what they want into their own life map (photos use their own space; photo locations are not carried over). That copy then belongs to them; your own copy stays complete. Your account, messages, friends list, settings and relationship periods are never passed on; child tags, co-managing traces and labels are removed. Copied places you lived are visible only under their “Left to you” and are not shown to their friends.
You can also “arrange to leave to family”: choose who (any number; each must agree), after how long without signing in, and what (“Only me” cards are not included by default). When invited and agreeing, they see only your name and what they call you, your message and roughly how many items and how large — no card content. We count from the last time a device you are signed in on connected, and email you reminders (to your account email) before the date. Only if you don’t use WorldMe for 30 days after the last reminder are the people who agreed notified and able to copy what they want, as above. People who declined or left receive nothing.
After it is passed on, your map becomes a “memorial map”: family who received it see only the cards and places you passed on (read-only), and can add a memory of their own to a card, which the other family members on the list and you can see. If you are in fact still here, you can end the memorial map after signing in: what your family already copied stays with them, the rest can no longer be copied, and the memorial map is no longer visible.
WorldMe accounts are for people aged 13 and over; if you are under 13, please do not create an account. Ages 13–15 can currently use the life map only for themselves; friend features require age 16 (later, ages 13–15 will be able to use them after a parent agrees by email; the consent is recorded and a parent can withdraw it at any time); letting others find you by email requires age 18. If you learn that someone under 13 has given us personal data, tell us and we will delete it.
Parents can create a growth map for a child inside their own life map (a name or nickname, an avatar and the year and month of birth — no exact birthday) and tag memories with that child. This is data in the parent’s account, decided on and managed by the parent as the child’s legal guardian. Memories tagged with a child are only ever visible to the person who recorded them (and family members they invite who accept to “record together”): they cannot be shared with all friends or made public, never appear in the friends feed, overlaps or share links, and friends cannot be tagged on them. Photo locations (GPS) and camera data are always removed, and places are kept no finer than the district. If a parent deletes a child’s growth map, the memories stay on the parent’s map without the child tag.
When the child turns 16 (13–15 with the parent’s agreement), the parent can create a hand-over link (valid 7 days, one use, can be cancelled; we store only a hash of the link’s random code). After opening it with their own account, the child can copy the memories they want into their own account (photos are copied into the child’s space); that copy then belongs to the child. The parent’s copy stays complete. The child can ask the parent to hide some memories (the parent decides; once hidden, the child and family who record together can no longer see them, while the parent still can) and can remove themselves from a tag at any time. Before a parent deletes their account, we remind them how many memories are tagged with a child so they can hand them over or export a backup first.
All connections are encrypted (HTTPS); storage and backups are private and encrypted; recovery codes and device keys are stored only as one-way hashes — a recovery code is shown only once and we cannot recover it if you lose it, so keep it safe; only the people who need it can access data. No transmission over the internet is 100% secure; if a breach affects your data, we will notify you as the law requires.
When we change this policy we update the version date on this page; important changes are announced clearly on the site or shown for you to confirm the next time you sign in.
World and Me Information Co., Ltd. · 2F., No. 14, Ln. 156, Shalun Rd., Tamsui Dist., New Taipei City 251, Taiwan · support@worldme.cc