ReMemo™ Privacy Policy
DRAFT for the founder's lawyer. Not legal advice and not yet in force. Written on 2026-11-09 from what the product actually collects and does (the code in this repository,
docs/architecture.md§1.4, §3, §9). Items in [LAWYER] need a legal decision; items in [FOUNDER] need a product or business decision. When it is final, publish it athttps://rememohq.com/privacy(Settings → Your data → Privacy policy links there) and keep this file and the App Store / Chrome Web Store answers (docs/release.md"Store privacy answers") in step.
Effective date: [FOUNDER: date] · Company (controller): Halite LLC, 418 Broadway, STE N, Albany, NY 12207, USA [LAWYER: state of formation and registration details] · Contact: [email protected]
1. What ReMemo is and who provides it
ReMemo is provided by Halite LLC ("Halite", "we", "us"), 418 Broadway, STE N, Albany, NY 12207, USA. Halite LLC is responsible for your personal data in ReMemo (the "controller" where that term applies). Questions about this policy or your data go to [email protected].
ReMemo is a personal assistant with a memory. You talk to it, record conversations, save notes, files, pages and calendar events, and it remembers them so it can answer you later. This policy explains what we collect, why, who processes it for us, how long we keep it, and how you control it.
The short version:
- Your memory is yours. We use it only to run ReMemo for you.
- We do not sell your data, show ads, or train AI models on your content.
- You can download everything (Settings → Your data → Download your data), forget any part of it, or delete your account (Settings → Your data → Delete account; on iPhone, Settings → Account → Delete account).
- Product analytics never include what you say or save, and you can turn them off.
2. What we collect
2.1 Your account
| Data | Why |
|---|---|
| Email address | Your account and sign-in: we email you one-time codes. Also account notices (export ready, deletion). |
| Display name (optional), time zone | Shown in the app; the time zone makes dates and reminders correct. |
| Devices you sign in on: a name you can see (for example "Laptop"), platform (web, Mac, iPhone, Chrome), when it was last used | So you can see and sign out devices in Settings → Devices. |
| Passkeys (if you add one): the public key and an identifier, never the private key | Signing in without a code. |
| Push notification tokens (if you turn notifications on) | To deliver reminders and briefs to that device. |
2.2 What you give ReMemo (your content)
Everything below is collected only because you give it to ReMemo, and is used only to provide the service to you.
| Data | Details |
|---|---|
| Conversations with ReMemo | What you type or say in Talk, and ReMemo's replies. |
| Recordings and transcripts | On iPhone and in some browsers, speech is recognised on your device and only the text is sent. When it is not, the audio is uploaded to be transcribed. Audio is kept according to Settings → Privacy → Keep audio (never / 30 days / always). |
| Notes, documents and docs | Text you save, documents you write in ReMemo, and their revision history. |
| Files and photos | Images, PDFs and documents you upload, share or drop into ReMemo. A photo's location data is used only if you turn on Settings → Privacy → Photo locations (off by default); otherwise it is removed before any processing. |
| Web content (Chrome extension) | Only the page, selection, link or image you choose to remember or ask about: its text, title and address. The extension reads nothing on its own. |
| Calendar and to-dos | Events and to-dos you create in ReMemo. If you connect Google Calendar or Outlook, the events in the calendars you choose (title, time, place, attendees' names and addresses, your response). On iPhone, if you allow it, the events of the calendars on your device. |
| Shared notes ("capsules") | What you choose to share, the note you add, and the recipient's name as you wrote it. |
| Feedback | The message you send from Settings → Help → Send feedback, and — only if you tick it — diagnostics (app version, platform, screen, error codes; never content) or an attachment you choose. |
From this content, ReMemo derives memories: facts, preferences, events, people and things you mention, to-dos and the links between them, each with a record of where it came from. People you mention are stored as you described them; [LAWYER: our position on third-party personal data the user provides, and the user's responsibilities toward those people — see the Terms §5].
2.3 Usage analytics (no content)
If analytics are on (the default; Settings → Privacy → Usage analytics turns them off), the apps and the server send events such as "a recording finished" or "an answer took between 0.7 and 1.5 seconds", with counts, durations, on/off values and random identifiers. They never include your messages, transcripts, memories, file names, document text, calendar titles, contacts' names or search terms: the event catalog is a fixed list checked in code (packages/contracts/src/telemetry.ts). Analytics use a random identifier, not your email or account id. Session replay is off unless you turn it on, and then every piece of text on screen is hidden.
2.4 Purchases
If you subscribe, the store that charges you (Apple, or Stripe on the web and Mac) tells us which plan you have, when it renews or ends, and an identifier for the subscription. We never see or store your card number.
2.5 Technical data
Our servers log requests (time, route, status, duration, a request id) for 30 days, without content. IP addresses are used for rate limiting and abuse prevention and are not stored with your content [LAWYER/FOUNDER: confirm log retention of IP addresses at the edge provider].
3. How we use it
- To provide ReMemo: store your memory, answer your questions, transcribe, read files, remind you, show your calendar, send what you choose to share.
- To keep it secure: sign-in, rate limits, detecting abuse.
- To improve the product, with analytics that carry no content (§2.3).
- To communicate with you about your account (sign-in codes, export ready, deletion notices, important changes).
We do not: sell or rent personal data; use it for advertising; let AI providers train on it; read your content ourselves, except when you ask for support and give us permission, or when the law requires it [LAWYER: law enforcement requests policy].
Legal bases (EEA/UK, if offered there) [LAWYER: ReMemo launches in the US; confirm whether EU/UK users are accepted at launch]: performing our contract with you (running the service), legitimate interests (security, content-free analytics, which you can turn off), consent (photo locations, session replay, notifications, connecting a calendar), legal obligations.
4. Who processes data for us
We use these service providers ("processors"), under contracts that limit them to processing on our instructions:
| Provider | What it does | What it receives |
|---|---|---|
| Anthropic (Claude) | The AI model that answers, writes and reads images and documents | The parts of your memory and content needed for each request. Used under zero-data-retention terms: not stored, not used for training [FOUNDER: confirm ZDR is enabled on the account]. |
| Speech-to-text provider: OpenAI or Deepgram [FOUNDER: pick one for launch] | Transcribes audio that was not transcribed on your device | The audio of that recording. [FOUNDER: confirm a no-retention / no-training agreement.] |
| Apple | On-device speech recognition (iPhone), push notifications, App Store payments | Push tokens and notification text previews, purchase records. On-device recognition stays on the device. |
| Google, Microsoft (only if you connect them) | Your calendar | Our requests for the calendars you chose, using the access you granted. |
| PostHog (US) | Product analytics | Content-free events and a random identifier (§2.3). |
| Resend [FOUNDER: or the chosen email provider] | Sends email | Your email address and the email text (sign-in codes, notices). |
| Stripe | Web and Mac payments | Your payment details (entered on Stripe's page, never ours) and your email. |
| Cloudflare | Network edge: TLS, DDoS protection, routing | Encrypted traffic passing through; request metadata. |
| [FOUNDER: cloud provider, e.g. AWS or Google Cloud], United States | Hosts our database and file storage | Everything stored, encrypted at rest. |
Web push notifications are delivered through your browser's push service (Google, Mozilla or Apple).
Google user data. ReMemo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is used only to show your calendar in ReMemo, prepare you for meetings and, if you ask, add or move events; it is never used for advertising, never sold, and never read by people except as above. [LAWYER: required wording for Google's OAuth verification.]
5. Where data is stored
In the United States. Our edge provider may handle traffic in other countries on its way to us. [LAWYER: international transfer mechanism if non-US users are accepted.]
6. How long we keep it
| Data | Kept |
|---|---|
| Your memory and content | Until you forget it or delete your account. Older memories are only made less prominent, never silently deleted. |
| Audio | As set in Settings → Privacy → Keep audio. |
| Calendar events from a connected calendar | A rolling window around today, refreshed from the provider; removed when you disconnect and forget it. |
| Data exports | The download link works for 24 hours; then the archive is deleted. |
| Backups | Up to 30 days. Files and recordings in backups are encrypted with keys we destroy when you delete them, so they become unreadable at once; other data ages out of backups within 30 days. |
| Server logs | 30 days, without content. |
| Analytics | [FOUNDER: PostHog retention setting]; deleted when you delete your account. |
| Deleted account | After a 7-day period in which you can cancel, everything is deleted. We keep a deletion receipt of identifiers and counts only (no content), so a restore from backup cannot bring the data back. |
| Purchase records | As long as tax and accounting law requires [LAWYER: period], at the store and in our billing records (identifiers and dates only). |
7. Your choices and rights
- See and download everything: Settings → Your data → Download your data gives you a ZIP of Markdown and JSON files: your memories with where each came from, your conversation, docs, calendar, to-dos, shared notes, settings and files.
- Correct: edit any memory, or tell ReMemo it got something wrong.
- Forget: forget one memory, a source (a recording, a note, a file), a person, a period of time, or everything. ReMemo shows exactly what will be removed first, and gives you a receipt. Forgetting removes it from the database, the search index, caches, every device's local copy, and pending exports.
- Delete your account: Settings → Your data → Delete account (on iPhone, Settings → Account → Delete account). We confirm it is you, then wait 7 days, during which you can cancel. An App Store subscription must be cancelled in your iPhone settings; we cannot cancel it for you.
- Turn things off: analytics, session replay, photo locations, notifications, calendar connections.
- Ask us: [email protected]. [LAWYER: CCPA/CPRA "know, delete, correct, opt out" wording and response times; GDPR rights and the supervisory-authority complaint right if EU users are accepted; verification process.]
California residents: we do not sell or share personal information for cross-context behavioural advertising. [LAWYER: CCPA notice at collection and categories table.]
8. Security
Encryption in transit (TLS) and at rest. Your recordings, files, connected-calendar credentials and shared snapshots are additionally encrypted with a key unique to your account, which is destroyed when you forget everything or delete your account. Every query is scoped to your account. Staff have no access to content by default. No system is perfectly secure; we will notify you of a breach affecting your data as the law requires.
9. Children
ReMemo is not for children under 13 [LAWYER: 13 in the US; 16 where required], and we do not knowingly collect their data. If you believe a child has an account, write to [email protected] and we will delete it.
10. Recording other people
Recording laws differ by place; in some (for example California), everyone in the conversation must agree. You are responsible for getting consent before recording others. ReMemo shows a consent reminder before your first recording (Settings → Privacy → Consent reminder).
11. Changes
We will tell you in the app and by email before a material change takes effect. The effective date is at the top.
12. Contact
Halite LLC · 418 Broadway, STE N, Albany, NY 12207, USA · [email protected] · [LAWYER: EU/UK representative if required]
ReMemo™ is a trademark of Halite LLC. © 2026 Halite LLC.