Privacy policy

This policy explains how the Remyra mobile app (“Remyra”, “the app”) handles information. Remyra is developed by AggiNova (“we”, “us”). If anything here is unclear, write to destek [at] re-my-ra.com.

Summary

1. Data that stays on your device

Memories (titles, descriptions, tags, places, addresses, people, phone numbers, links, notes, loans), reminders, photos you take or pick, recent questions and app settings are stored in the app’s local database on your device. Without an account they are not uploaded to our server. Recent questions and settings always stay on your device, and so do photos unless you have Pro.

Backup and sync: when you are signed in, the app sends the text of your memories and reminders (the details listed above, including a photo’s random ID but not the photo) to our server and keeps it the same on every phone you sign in on. If the phone already has memories when you sign in, the app asks before uploading them. Sample data is never uploaded. When you delete a memory or reminder, its content is deleted on our server too; only its random ID and change times stay, so your other phones remove it as well. The free plan backs up up to 200 memories.

Photo backup (Pro): with Pro, the photos your memories use are backed up too. The app reduces each photo to at most 1280 pixels and uploads it directly to Cloudflare R2 (EU jurisdiction) through a link from our server that is valid for 15 minutes; the photo itself does not pass through our server. Cloudflare stores objects encrypted, and a photo can only be fetched through a link issued to your account. Photo backup holds up to 5 GB and, unless you change it, only uses Wi-Fi. A photo no memory uses any more is deleted from the backup after a day. When Pro ends, no new photos are uploaded; backed-up photos can still be downloaded for 90 days and are then deleted.

The app also stores a random device identifier and, if you sign in, your sign-in tokens on the device. The device identifier is created by the app; it is not your phone’s hardware or advertising ID. (The ad SDK reads the advertising ID separately; see section 9.)

You can remove everything the app keeps on your device in Settings → Privacy & security → Delete all data on this device, or by uninstalling the app. If you are still signed in, backed-up memories and reminders come back from your account; to remove them from our server, delete your account.

Android’s own backup can include your memories and photos so they move to a new phone; sign-in tokens are excluded from that backup. The backup is handled by your device provider, not by us.

2. Account data

You can use Remyra without an account. If you create one, we store:

• your email address, the name you enter (optional) and your preferred language;
• your password as a one-way bcrypt hash — we never see or store the password itself;
• session records: a hashed sign-in token, when it was created and last used, and a coarse device label such as “Android” or “iOS”;
• if you sign in with Google: the Google account ID, email address and name that Google confirms for your account. We never receive your Google password, contacts or other Google data. An account created with Google has no Remyra password.
• if you sign in with Apple: the Apple user ID, the email address Apple shares (if you chose “Hide My Email”, an Apple relay address that forwards to you), the name you allowed on the first sign-in, and a token from Apple, stored encrypted, that we use only to remove Remyra’s link with your Apple ID when you delete your account.
• email verification and password reset codes, stored hashed and valid for 30 minutes.

We use this data only to run your account: signing in, keeping you signed in, verifying your email and resetting your password.

3. AI features

AI features are optional and use monthly credits. When you use one, the app sends the following to our server, which forwards it to Google's Vertex AI (Google Cloud, running Gemini models) and returns the answer:

• Photo analysis: the photo, reduced in size and converted to JPEG, and for “update contents” also the names of the items already saved in that container;
• Ask Remyra: your question (up to 500 characters) and short summaries of up to 12 matching memories or reminders, which can include a title, place, description, notes, address or link.

Our server does not store the photo, the question or the answer. It records that a request happened: time, request type, model, token counts, estimated cost, credits used and whether it succeeded, linked to your account ID or the app’s device identifier.

These requests run on Vertex AI in our own Google Cloud project. Google does not use their content to train or improve its products. Even so, as a precaution, do not include sensitive personal information in AI requests.

Offline search (“Where are the scissors?”) runs entirely on your device and does not use AI or the network.

4. Subscriptions

Remyra Pro is sold through Google Play or the App Store. Payment is handled entirely by Google or Apple; we never receive your card details.

When you buy or restore Pro while signed in, the app sends the store’s purchase record to our server, and our server checks it directly with Google or Apple. The purchase is linked to your Remyra account ID (a random identifier, not your email). Google and Apple also tell our server when a subscription renews, changes level, is cancelled, refunded or expires. We store your subscription status, the product, its expiry date, the store’s order or transaction ID and the notifications the store sends us.

5. Emails

We only send emails you need to use your account: a verification code when you sign up or ask for a new one, and a password reset code when you request it. We do not send marketing emails. Emails leave our mail server through Amazon SES (Amazon Web Services), which delivers them from its Stockholm (Sweden) region. Amazon SES delivers the email as we wrote it: it adds no tracking image and does not change the links, so nobody records whether an email is opened or a link in it is followed. Amazon processes your email address to deliver the message, and if an email to your address bounces or is marked as spam, the address is kept on a suppression list so that no further emails are sent to it. Nothing you saved in Remyra is in these emails.

6. Error reports

When the app or our server runs into an error, a report is sent to an error tracker (GlitchTip) that runs on our own server; no other company receives it. A report from the app contains what went wrong and where in the code, the app version, the screen (without the ID of any memory or reminder), the device platform and the pages opened just before. Reports never contain your memories, notes, photos, search questions, request contents, email address or name. Reports from our server additionally carry your random account or device ID and the browser or app version, but no request contents or IP address.

Error reports are kept for 90 days. You can turn them off in Settings → Privacy & security → Send error reports; the app then sends none. We process error reports for our legitimate interest in keeping the app working.

7. Problem reports

If you use Report a problem, we store your message, the category you picked, the email address you give for a reply (optional) and, if you leave Include device details on, the app version, platform, screen, language and your system and browser version. The report is linked to your account or device ID and emailed to our support mailbox. We use it only to answer you and fix the problem.

8. Device permissions

• Camera and photos: to take or pick photos of your items. Photos stay on your device unless you use AI analysis or Pro photo backup.
• Reading a photo on the device: when you tap “Read from a photo” while saving a link, your phone reads the text and the QR codes in that picture itself, using models that ship inside the app. The picture is not uploaded anywhere, it costs no AI credit and it works with no connection. Only the address you then choose is used.
• Contacts: Remyra never reads your address book and asks for no contacts permission. When you lend an item you can tap “Pick from contacts”: your phone’s own contact picker opens, and only the contact you choose — name and phone number — comes back to the app. That name and number are saved as a person memory, backed up like any other if you are signed in.
• Notifications: to show reminders. Reminders are scheduled on your device.
• Microphone: for voice input. Your speech is turned into text by your device’s speech recognition service (for example Google’s on Android), under that provider’s terms; Remyra only receives the text.
• Location: only when you tap “use my location” while saving a place, and only while the app is open. The coordinates are written into that memory. If you are signed in, that memory is backed up like any other, so the coordinates reach our server with it. Your phone’s own location service turns coordinates into an address and an address into coordinates (Google on Android, Apple on iPhone). Nothing tracks your location in the background and we never read your position on our own.
• Link previews: when you save a web address, the app asks our server for that page’s own title, description and picture, and our server fetches the page — so the site you are saving sees our server, not your phone. We keep the address and what the page said for 30 minutes and record nothing about who asked. Our server only fetches ordinary public web pages over http or https.
• Maps and address search: maps of places are drawn by the Google Maps SDK, which loads map images from Google, so Google receives your device’s IP address and the area shown. When you type into address search, the text — and the map’s position, to suggest nearby addresses first — goes through our server to Google Places; we count the searches to stay within limits but do not store what you typed.

You can refuse or withdraw any permission in your device settings; the rest of the app keeps working.

9. Ads

Without Remyra Pro — with no account or a free account — the app shows a banner ad from Google AdMob (Google LLC), and you can choose to watch rewarded ads to earn AI credits. With Pro no ads are shown.

To show and measure ads and to prevent ad fraud, Google’s ad SDK in the app collects your device’s IP address (from which a general location can be estimated), your device’s advertising ID and app set ID, information about your device and the app, and your interactions with ads such as views and taps. Google processes this data under its own advertising privacy policy. On iPhone, Remyra does not ask to track you, so ads do not use Apple’s advertising identifier.

Personalised ads: ads are not personalised unless you agree. Where the law requires it (for example in the EEA, the UK and Switzerland) Google’s consent form asks you, and you can change your choice at any time in Settings → Privacy & security → Ad preferences. You can also reset or delete your advertising ID in your phone’s settings.

Rewarded ads: when you watch a rewarded ad, the app gives Google your random Remyra account ID and a one-time check code, and Google confirms each completed view to our server. We store the view’s ID, the ad unit and the time, linked to your account, to add credits and to make sure a view counts only once.

Nothing you save in Remyra — memories, notes, photos or questions — is given to advertisers. We do not use analytics SDKs, and we do not sell, rent or share personal data for marketing.

10. Service providers and transfers

We share data only with providers that help us run Remyra, only for that purpose:

• Google LLC — Vertex AI (Gemini models) for AI requests, see section 3; Sign in with Google, if you choose it; Google Maps SDK and Google Places for maps and address search; Google AdMob for ads, see section 9 (for ads Google also acts under its own privacy policy);
• Apple Inc. — Sign in with Apple, and its relay for “Hide My Email” addresses, if you choose it;
• Google Play / Apple App Store — app distribution, payments and purchase verification, see section 4, under their own privacy policies;
• Amazon SES (Amazon Web Services) — email delivery, see section 5;
• Cloudflare, Inc. — network protection for our server, encrypted database backups and Pro photo backup in Cloudflare R2 (EU jurisdiction);
• our hosting provider, which runs the server that hosts our API, database and error tracker.

Some of these providers process data outside your country, including in the United States. Where required, transfers rely on the providers’ contractual safeguards such as standard contractual clauses.

We may disclose information if the law requires it, for example in response to a valid court order.

11. How long we keep data

• On your device: until you delete it in the app or uninstall the app.
• Account data: until you delete your account.
• Backed-up memories and reminders: until you delete them or your account; a deleted record keeps only its random ID and change times.
• Backed-up photos (Pro): until no memory uses them (plus one day), until you delete your account, or 90 days after Pro ends.
• Verification and reset codes: deleted one day after they are used or expire.
• Session records: deleted 30 days after you sign out or the session expires.
• Rewarded ad views: while your account exists.
• AI usage and subscription records: while your account exists; when it is deleted, usage counters and subscription events are deleted and AI request records keep only the cost, without any link to you.
• Problem reports: deleted one year after the problem is resolved, or with your account.
• Error reports: 90 days.
• Backups: the database is backed up daily, encrypted, to Cloudflare R2. Daily copies are deleted after 14 days, weekly copies after 56 days and monthly copies after 180 days, so deleted data disappears from backups within 180 days.

12. Deleting your account

In the app, open Settings, tap your profile, then Delete account and confirm with your password. You can also request deletion by email. When an account is deleted, we remove Remyra’s link with your Apple ID if you signed in with Apple, and delete your account, backed-up memories, reminders and photos, sign-in sessions, codes, subscription status and events, usage counters, rewarded ad views and the problem reports you sent while signed in. AI request records stay only as anonymous cost figures. Memories on your device are not affected; remove them in Settings → Privacy & security. Details: Delete your Remyra account.

Deleting your account does not cancel a store subscription. Cancel it in Google Play or the App Store.

13. Your rights

Depending on where you live — including under the EU/UK GDPR and Türkiye’s Personal Data Protection Law (KVKK) — you can ask to access, correct, export or delete your personal data, and object to or restrict its processing. You can change your name in the app, turn off error reports, change your ad preferences and delete your account yourself. For anything else write to destek [at] re-my-ra.com; we answer within 30 days. You also have the right to complain to your data protection authority.

We process account data to provide the service you asked for (contract), AI requests and problem reports at your request (contract), and usage records and error reports for our legitimate interest in keeping the app working, preventing abuse and controlling costs. Non-personalised ads fund the free version (legitimate interest); personalised ads are shown only with your consent.

14. Security

Connections between the app and our server use HTTPS. Passwords, sign-in tokens and codes are stored only as hashes. Sign-in tokens expire and rotate, and reusing an old token signs out every session. Backups are encrypted with AES-256 before they leave the server. No system is perfectly secure, but we work to protect your data.

15. Children

Remyra is intended for people aged 18 and over. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.

16. Changes to this policy

If we change how Remyra handles data, we will update this page and the date at the top. For significant changes we will also tell you in the app.

17. Contact

AggiNova · destek [at] re-my-ra.com · re-my-ra.com/privacy/