Privacy Policy

1. The short version

• We collect what the app needs to work: your account details, the material you add, and your review history.
• There are no ads in Rememberly. We do not sell your information, and we do not track you across other apps or websites.
• The app contains no analytics or advertising software.
• To write questions from your material, we send the text of that material to an outside AI service. Section 5 says exactly what is sent.
• You can delete your account, and everything stored with it, from inside the app at any time.

2. Information we collect

Information you give us:

• Account details. Your email address and a password if you sign up with email. The password is stored only as a hash, so we cannot read it. If you sign in with Apple or Google, we receive an identifier for your account with them, your email address (Apple lets you hide it and gives us a relay address instead) and your name if you choose to share it.
• Profile. The display name you choose.
• Study material. Text you paste or type, PDF, Word and PowerPoint files and images you upload, and the text taken from them. We keep the original file so you can open the page a question came from.
• Connected sources. If you connect Notion or Google Docs, we store the content of the pages and documents you pick, the name of the connected account, and access tokens that let us fetch those documents again when you ask for an update.
• Study content. The subjects you create, the notes and questions produced from your material, your edits to them, and any instructions you write for the generator.
• Review activity. Each answer or rating you give, when you gave it and where (in the app or from a notification), the schedule worked out from your answers, and any memory aid you write for a card.
• Settings. Your study days, daily limits, and reminder and refresher preferences.
• Messages. Whatever you send us if you write to us for help.

Information the app collects on its own:

• Language and time zone. Read from your device so that text appears in your language and reminders arrive at the right local time.
• Push notification details. If you allow notifications, we store a push token issued by Apple or Google, the platform (iOS or Android), and a random identifier for the app installation. We also keep a record of the notifications we sent and whether delivery succeeded.
• Server logs. When the app talks to our servers, the servers record the IP address, the time, the address requested and the result. Logs do not contain your study material, your password, or your sign-in tokens.

What we do not collect: your precise location, your contacts, your advertising identifier, health or payment information, or anything from your camera or microphone. The app opens the system file or photo picker when you add a file, and it receives only the items you select.

Text recognition for images and scanned PDFs runs on your device. The file and the recognized text are uploaded only when you save the material.

3. How we use it

• To create your account, sign you in, and keep the account secure.
• To store your material and turn it into notes and questions.
• To schedule reviews and show you what is due.
• To send the reminders and refreshers you switched on.
• To answer you when you contact us.
• To keep the service running: finding and fixing faults, and preventing abuse.
• To meet legal obligations.

We do not use your information for advertising or to build a profile of you for anyone else. We do not use your material to train AI models.

4. Legal bases (EEA, UK and Switzerland)

If the GDPR or a similar law applies to you, we rely on the following grounds:

• Performing our contract with you. This covers your account, storing and processing your material, generating study content, scheduling reviews, and syncing across your devices.
• Your consent. This covers push notifications and connecting a Notion or Google account. You can withdraw consent at any time in your device settings or in the app.
• Our legitimate interests in running a secure and reliable service. This covers server logs, fault finding and abuse prevention.
• Legal obligation, where a law requires us to keep or disclose information.

5. Who we share it with

We share information only with the companies that help us run Rememberly, and only as far as they need it to do that job. We use each of them under terms that require them to protect the information and to use it only to provide their service to us.

• Supabase: sign-in, the database, and file storage. It holds your account, material, study content and review history.
• Fly.io: the servers that run our service. Requests from the app pass through them.
• OpenRouter and OpenAI: AI generation. When you ask Rememberly to prepare material, we send the text of that material and any instructions you wrote to OpenRouter, which passes them to an OpenAI model. We do not send your name, your email address or your account identifier. Original files are not sent, only text. Three optional helpers use the same route, and only when you ask for them: checking an explanation you typed or dictated (we send that explanation and the key points of the card), suggesting a memory aid, and writing one more question about a card (we send the text of that card). An explanation sent for checking is not stored once it has been checked. Dictation is done by your phone’s keyboard: we receive text, never audio.
• Google Firebase Cloud Messaging and Apple Push Notification service: delivery of notifications. They receive your push token and the text of the notification. Refresher notifications contain a short piece of your own study content.
• Apple and Google: if you sign in with them, they learn that you signed in to Rememberly.
• Notion and Google Drive: if you connect them, we ask them for the documents you chose.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or of others. If Rememberly is ever sold or merged, your information would move to the new operator under this policy, and we would tell you beforehand.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. Information from Google and Notion

Connecting a Google account gives Rememberly access only to the files you select in the Google picker. It cannot list or read the rest of your Drive. Connecting Notion gives access only to the pages you choose on the Notion consent screen.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use it only to import the documents you chose into your library and to prepare study content from them. We do not use it for advertising, we do not transfer it to others except as described in section 5, and no person reads it unless you ask us to look into a problem, or the law requires it.

Access tokens are encrypted before they are stored. You can disconnect a service in the app at any time. When you do, we revoke our access with the provider and delete the stored tokens.

7. Where your information is stored

Our servers are in the United States, and the companies listed above may process information in other countries as well. If you live elsewhere, your information will be transferred to and stored in a country whose privacy laws may differ from your own, and it may be accessible to courts and authorities there.

For transfers out of the EEA, the UK or Switzerland, we rely on the standard contractual clauses our providers offer, or on another transfer mechanism the law recognizes.

8. How long we keep it

We keep your account and its content for as long as the account exists.

• Deleting a source from your library deletes it for good, together with its original file and the cards, questions and review history made from it. This cannot be undone.
• Records of background jobs are cleared automatically, usually within 30 days.
• Server logs and backups are kept for a limited period set by our hosting providers and then deleted.

When you delete your account, we delete your profile, material, uploaded files, study content, review history, settings, device tokens, connections and sign-in identity. This happens right away and cannot be undone. We keep one record showing that the account was deleted: a random identifier and the dates. It contains no name, email address or content. Copies in backups and logs disappear as those expire. Text that was already sent to the AI service for a request in progress cannot be recalled.

9. Your choices and rights

• See and correct. Your material, study content and settings are visible and editable in the app.
• Delete your account. In the app, open Profile and choose Delete account. If you cannot get into the app, email argo.mohrad@gmail.com from the address on the account and we will delete it for you.
• Notifications. Turn them off in the app settings or in your device settings.
• Connected services. Disconnect Notion or Google in the app.

Depending on where you live, the law may also give you the right to ask for a copy of your information, to have it corrected or deleted, to object to or restrict certain uses, to receive it in a portable format, and to withdraw consent. To use any of these rights, write to argo.mohrad@gmail.com. We reply within 30 days. We may need to confirm that the request comes from the account holder. We will not treat you differently for making a request.

If you are not satisfied with our answer, you can complain to the data protection authority where you live.

10. California residents

In the last 12 months we have collected these categories of personal information, from you and from your device: identifiers (email address, account identifier, push token, IP address), internet activity (server logs and your activity in the app), and the content you chose to add. We use them and disclose them to our service providers for the purposes described in sections 3 and 5.

We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information for purposes that would need an opt-out. You have the right to know what we hold, to have it deleted or corrected, and not to be discriminated against for using these rights. You or an authorized agent can make a request at argo.mohrad@gmail.com.

11. Canadian residents

Your information is stored outside Canada, including in the United States, where it is subject to local law. You may ask to access or correct your personal information, withdraw consent, or put questions to the person responsible for privacy at RadAtelier by writing to argo.mohrad@gmail.com. You may also file a complaint with the Office of the Privacy Commissioner of Canada or, in Quebec, with the Commission d’accès à l’information.

12. Children

Rememberly is not meant for children under 13, or under 16 in the EEA and the UK. We do not knowingly collect information from them. If you believe a child has created an account, write to argo.mohrad@gmail.com and we will delete it.

13. Security

Connections between the app and our servers are encrypted. Your uploaded files are kept in private storage and can be opened only through short-lived links issued to your account. Database rules restrict each account to its own records. Tokens for connected services are encrypted with a key that is kept apart from the database.

No system is perfectly secure. If a breach affects your information, we will tell you and the relevant authorities as the law requires.

14. Changes to this policy

If we change this policy, we will post the new version on this page and update the date at the top. If a change affects how we use information we already hold in a way you would not expect, we will tell you in the app or by email before it takes effect.

15. Contact

Questions, requests and complaints about privacy go to RadAtelier at argo.mohrad@gmail.com.