Privacy Policy

Remmie is operated by Remmie Inc., an Ontario corporation ("Remmie," "we," "us," or "our"). Our mailing address is [MAILING ADDRESS].

Remmie helps you maintain meaningful relationships by capturing memories, tracking the rhythm of your connections, and prompting you to stay in touch with the people who matter. This privacy policy explains what personal information we collect, why we collect it, how we use it, and how you can control it.

We collect detailed information about your relationships because that is how the product works. We are transparent about this. We do not sell your data, we do not display advertising, and we do not use your personal information for any purpose other than operating and improving Remmie.

If you have questions about this policy, contact us at mat@remmie.io.

1. Who This Policy Applies To

This policy applies to:

Registered users — people who have created a Remmie account. You have agreed to our Terms of Service and this Privacy Policy.

People described in user content — Remmie users create contact records about people in their lives (friends, family, colleagues) and may record memories that mention or involve those people. If someone uses Remmie to maintain their relationship with you, information about you (such as your first name, relationship context, and shared memories) may be stored within that user's account. This is similar to a personal address book or journal. See Section 12 for more about how we handle information about people mentioned in user content.

Invited users — people who have received an email invitation from a registered user. If you receive an invitation, we process your email address and the invitation content.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Email address
Password (stored as a cryptographic hash; we cannot read your password) or authentication credentials from Google Sign-In
Display name and profile photo (optional)

2.2 Profile Information

You may choose to add details to your profile, including:

Photographs
Employment history (employer, position, dates)
Location history (cities or places where you have lived)
Hobbies and interests
Social media links
Birthday

All profile fields beyond email are optional. The more you share, the better Remmie can help you maintain relationships, but you decide how much to provide.

Your profile information is not visible to other Remmie users. When you connect with another user on Remmie, the app may compare your profile with the contact record they created about you to verify shared details, but the other user only sees confirmation that a detail matches (e.g., a checkmark indicating agreement), never the contents of your profile itself.

2.3 Contact Information

Remmie lets you create profiles for people in your life. You can enter contact details manually or import them from your device's address book. For each contact, the following information may be stored:

Name, photographs, and birthday
Employment and location history
Hobbies, interests, and tags
Relationship category (friend, family, colleague, etc.)
Preferred contact method (call, SMS, WhatsApp, email)
Notes about planned next steps
Communication frequency preferences (how often you want to stay in touch)

Device contacts import: If you choose to import contacts from your phone, Remmie accesses your device's address book to let you select which contacts to bring into the app. We only import the contacts you select. We do not upload your entire address book to our servers, and we do not retain contact data for people you choose not to import.

This information is stored in your account. It is not shared with the contact unless you create a shared memory (Reminisce) with them and they are a registered user.

2.4 Memories

Remmie supports three types of memories:

Remember — private notes about an interaction. Only you can see these.
Reminisce — shared memories visible to you and the people you tag. These may include text, photographs, dates, and locations. Each tagged user who has a Remmie account can see and add their own perspective to the memory.
Reflect — private journal entries about your relationships. These are always private and never shared with anyone.

2.5 Voice Notes and AI Processing

You can create memories by recording a voice note. When you do, the following processing occurs:

Audio recording — your voice is recorded and stored on our servers for playback.
Transcription and AI analysis — the audio is sent to Anthropic's Claude API (a US-based service) for processing. The AI transcribes the audio, classifies the memory type, identifies people mentioned, extracts dates and locations, and matches references to your existing contacts (including nicknames and relationship terms like "dad" or "my sister").
User review — the AI-generated suggestions are presented for your review. You confirm or edit before the memory is saved.

The audio recording is stored permanently unless you delete the memory. Anthropic does not retain your data after processing; see Section 5 for details on third-party data handling.

2.6 Photographs and Media

When you upload photographs to a memory or profile, we may extract metadata embedded in the image file (EXIF data), including the date, time, and GPS coordinates where the photo was taken. This metadata is used to suggest dates and locations for your memories. You can disable location services for Remmie on your device to prevent GPS-tagged photos.

2.7 Location Data

Remmie may collect location data in the following ways:

Device location — if you grant location permission, we may use your GPS coordinates to suggest nearby places when creating memories. You can revoke this permission at any time through your device settings.
Photo metadata — as described in Section 2.6.
Places you search — when you search for a location (e.g., a restaurant or city), your search query is sent to the Google Places API to return results.

2.8 Interaction and Cadence Data

Remmie tracks when you last interacted with each contact and compares this against your preferred contact frequency. This generates the cadence reminders in your feed. The data includes:

Date of each logged interaction
Whether you reached out via the app (call, SMS, WhatsApp, email)
Snooze preferences for specific contacts
Communication history timestamps

2.9 Invitation Data

When you invite someone to Remmie, we collect:

The invitee's email address (provided by you)
Any personal letter you include with the invitation
Delivery status (sent, opened, bounced)
Whether the invitee creates an account

2.10 Device and Technical Information

We collect standard technical information necessary to operate the app:

Device type, operating system, and app version
Push notification tokens (if you enable notifications)
Error logs and diagnostic information

When you submit feedback through the app, your feedback message and accompanying diagnostic logs (device information, app version, and relevant error data) are sent to us to help identify and resolve issues. These logs do not contain your memory content, contact details, or voice recordings.

We do not collect advertising identifiers and we do not use device fingerprinting.

3. How We Use Your Information

We use your information for the following purposes:

Operating the app — storing your memories, displaying your feed, calculating cadence reminders, delivering notifications, and enabling shared memories between users.
AI-powered features — analysing voice notes to extract context, classifying memory types, matching contacts by name or nickname, and generating relationship-enrichment questions.
Communication — sending invitation emails on your behalf, delivering push notifications, and sending you service-related emails (e.g., account verification, security alerts).
Improving the service — understanding how features are used so we can fix problems and build better ones. We do not use your personal relationship data (memories, contact details, voice notes) for training AI models.
Legal compliance — responding to lawful requests from authorities and complying with applicable privacy legislation.

We do not use your information for advertising, profiling for third parties, or any purpose unrelated to operating and improving Remmie.

4. Lawful Basis for Processing

Under Canadian law (PIPEDA): We process your personal information based on your consent, which you provide when you create an account, grant device permissions (contacts, location, notifications, microphone), and use specific features. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting mat@remmie.io or deleting your account. We will explain the consequences of withdrawal.

For users in the United Kingdom and European Economic Area (GDPR): Our lawful bases for processing are:

Consent — for device contacts access, location data collection, microphone access, voice note recording, and push notifications. You may withdraw consent at any time.
Contract performance — processing necessary to provide the Remmie service you have signed up for (storing memories, calculating cadence, enabling shared memories).
Legitimate interests — service improvement, security, and fraud prevention, where these interests are not overridden by your rights.

For users in California (CCPA/CPRA): See Section 11.

5. Who We Share Your Information With

5.1 Other Remmie Users

When you create a Reminisce memory and tag another registered user, that memory (including text, photos, dates, and location) becomes visible to them. They can also add their own perspective to the memory. You control who you tag. Private memories (Remember and Reflect) are never visible to other users.

5.2 Service Providers

We use the following third-party services to operate Remmie:

Provider	Location	What They Process	Purpose
Supabase	United States	All user data (database, file storage, authentication)	Core infrastructure: database hosting, user authentication, file storage, real-time updates
Anthropic (Claude API)	United States	Voice note audio, transcripts, memory text	Voice transcription, AI analysis: memory classification, entity extraction, contact matching, enrichment questions
Google (Places API)	United States	Location search queries	Returning place suggestions when you search for a location
Google (Sign-In)	United States	Authentication tokens (if using Google Sign-In)	Account authentication

These providers process data on our behalf under contractual obligations to protect your information. They do not use your data for their own purposes.

Important: Anthropic's Claude API processes your voice note audio and memory text. Audio is sent to Anthropic for transcription and analysis (entity extraction, memory classification, contact matching). Anthropic does not use data sent through their API to train their models. Your data is processed and the results returned to Remmie; Anthropic does not retain your content after processing. For details, see Anthropic's API data usage policy at https://www.anthropic.com/policies.

5.3 Invitation Recipients

When you send an invitation, the recipient receives an email from invitations@remmie.io containing: the number of shared memories you have logged with them, any personal letter you wrote, and a link to create an account. We do not share the content of those memories in the invitation email.

5.4 No Sale of Personal Information

We do not sell, rent, or trade your personal information to anyone, for any reason.

5.5 Legal Requirements

We may disclose your information if required to do so by law, by a court order, or by a regulatory body with jurisdiction over us. We will notify you of such a request where legally permitted.

6. Cross-Border Data Transfers

Remmie is operated by a Canadian company. However, your personal information is stored and processed in the United States by our infrastructure providers (Supabase and Anthropic).

What this means: Your data leaves Canada and is subject to US laws, including potential access by US government authorities under applicable US legislation.

For Canadian users: Under PIPEDA, we are responsible for your personal information when it is transferred to a third party for processing. Our contracts with service providers require them to protect your information to a standard comparable to PIPEDA.

For UK and EEA users: We transfer data to the United States under Standard Contractual Clauses (SCCs) as approved by the European Commission. Both Supabase and Anthropic incorporate SCCs into their Data Processing Addendums, with UK-specific addenda where applicable. You may request a copy of the relevant transfer safeguards by contacting mat@remmie.io.

7. Data Retention

We retain your personal information for as long as your account is active.

When you delete a memory: The memory content, associated photos, and voice note audio are deleted from our servers. If the memory was a shared Reminisce, the other tagged users' perspectives of that memory are also removed.

When you delete a contact: The contact profile and all private memories (Remember, Reflect) associated with that contact are deleted. Shared Reminisce memories that tagged the contact are not automatically deleted, as other users may have their own perspectives attached.

When you delete your account: We delete your profile, contacts, private memories, voice notes, and associated data. Shared Reminisce memories you created will be removed. Your perspectives on other users' Reminisce memories will be removed. Other users' independently created content is not affected by your account deletion. Account deletion is processed within 30 days.

Contact records: If you delete your account, all contact records you created are deleted. Contact records that another user created about you (within their own account) are not affected by your account deletion, as that information belongs to the other user's account.

Diagnostic and feedback logs: Error logs and feedback-related diagnostic data are retained for 90 days and then deleted.

8. Data Security

We implement the following security measures:

All data transmitted between the app and our servers is encrypted in transit using TLS.
Database access is governed by Row Level Security policies, meaning users can only access their own data and shared content they have been explicitly tagged in.
Passwords are stored as cryptographic hashes; we cannot read or recover your password.
Authentication uses JSON Web Tokens with appropriate expiry.
File storage (photos, voice notes) is access-controlled and associated with individual user accounts.

No system is perfectly secure. If we become aware of a security breach affecting your personal information, we will notify you and the relevant authorities in accordance with PIPEDA's mandatory breach reporting requirements (and GDPR Article 33/34 for affected UK/EEA users) without unreasonable delay.

9. Your Rights

Registered Account Holders

If you have a Remmie account, you have the right to:

Access your personal information held by Remmie.
Correct inaccurate information in your profile or contact records.
Delete your account and associated data (see Section 7).
Export your data in a portable format. Contact mat@remmie.io to request an export.
Withdraw consent for specific processing activities (e.g., revoke location permissions, disable notifications).

If You Are Mentioned in Someone Else's Content

Remmie users may create contact records that include information about you, such as your name, interests, or details of shared experiences. This information is stored within that user's private account, similar to a personal address book or journal.

If you believe a Remmie user has stored information about you and you have concerns, contact mat@remmie.io. We will review your request and respond within 30 days. Because contact records can be stored with limited identifying information (sometimes only a first name), we may not be able to locate records about you without additional context.

Additional Rights for UK and EEA Users (GDPR)

If you are located in the United Kingdom or European Economic Area, you also have the right to:

Restrict processing of your data in certain circumstances.
Object to processing based on our legitimate interests.
Data portability — receive your data in a structured, commonly used, machine-readable format.
Lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ico.org.uk). In the EU, contact your national supervisory authority.

Additional Rights for California Users (CCPA/CPRA)

See Section 11.

10. Children's Privacy

Remmie accounts are not available to anyone under 16 years of age. We do not knowingly allow children under 16 to create accounts. If you are a parent or guardian and believe your child has created an account, contact mat@remmie.io and we will delete the account and associated data.

Remmie users may naturally include the names of children in their contact records or memories (for example, noting a friend's child's name or birthday). This information is stored within the user's own account as part of their personal relationship notes and is not used to create accounts for or market to children.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

Right to know: You can request the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collection, and the categories of third parties with whom we share it.
Right to delete: You can request deletion of your personal information, subject to certain exceptions.
Right to correct: You can request correction of inaccurate personal information.
Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioural advertising. There is nothing to opt out of.
Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact mat@remmie.io or use the in-app account deletion feature.

12. Information About People in Your Contacts and Content

Remmie is designed to help you maintain your personal relationships. The contact records you create and the memories you write or dictate will naturally contain information about other people: their names, interests, life events, and your shared experiences.

We treat this content as your personal information (your notes about your own life and relationships), similar to a personal address book or journal. The AI processing serves you: it helps categorise your memories and build your personal relationship context. Extracted information (names, places, topics) is stored within your account and is not shared with the people mentioned, unless you explicitly create a shared Reminisce memory and tag them.

Data isolation between users: Contact records and private memories are strictly isolated to the user who created them. If you create a contact record about someone and add notes, interests, employment details, or other information, none of that information is visible to any other Remmie user, including the person the record is about. The only information that crosses between users is the content of a shared Reminisce memory (text, photos, date, location) when you explicitly tag another registered user. Even then, the tagged user sees only the Reminisce itself, not your contact record, private notes, or any other information you have stored about them.

We do not combine or cross-reference contact data across different users' accounts. If two different users both create a contact record for someone named "Sarah," those records are entirely separate and unconnected within our systems.

13. Cookies and Tracking

The Remmie mobile app does not use cookies. We do not use advertising trackers, pixels, or cross-app tracking technologies.

If we operate a website (e.g., remmie.io), we will publish a separate cookie notice for that site.

14. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will notify you through the app or by email before the changes take effect. We will not reduce your rights under this policy without your consent.

The "Last Updated" date at the top of this policy indicates when it was most recently revised.

15. How to Contact Us

For any questions or requests related to your privacy or this policy:

Email: mat@remmie.io
Mail: Remmie Inc., [MAILING ADDRESS], Ontario, Canada

If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

16. Accountability

Mathew Szeto is responsible for Remmie's compliance with this privacy policy and applicable privacy legislation. Enquiries or complaints may be directed to mat@remmie.io.

This is version 1.0 of the Remmie Privacy Policy.