Privacy Policy

Overview

At Remy Care, we believe privacy is fundamental to brain health and digital wellness. This policy explains how we collect, use, share, and protect your information when you use the Remy Today iOS app, home screen widget, and related pages on remycare.org (such as sign-in and account confirmation).

Who We Are

Data controller: Remy Care (operated from the United States).

Contact: support@remycare.org for privacy questions, data requests, or account deletion.

Scope: This policy applies to the Remy Today app, Remy widget, and remycare.org pages used for account sign-in, password reset, companion invitations, and this privacy policy.

Wellness, Not Medical Care

Remy is a brain-health and daily-planning companion. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Mood, activity, and goal logs are wellness information you choose to record—not clinical records. Remy is not designed as a HIPAA-covered health provider service. If you have medical questions, consult a qualified healthcare professional.

Information We Collect

Account and identity

• Email address and authentication credentials (or sign-in via Apple or Google)
• Profile information you provide: display name, username, optional website, profile photo
• Account identifiers assigned by our authentication provider

Content you create and sync

When you use Remy while signed in, we store this information in our cloud database so it syncs across your devices:

• Calendar events – title, dates, notes, location text, reminders, recurrence
• Tasks (todos) – title, notes, due dates, priority, completion status, recurrence
• Goal logs – activity type, duration, notes, mood, completion status
• Goal settings – weekly targets and preferences per category
• Achievements and points – progress toward in-app milestones and reward history

Wellness and Apple Health

Only if you grant permission in iOS Settings:

• Apple Exercise Time – we read daily exercise minutes from HealthKit on your device
• We sync aggregated daily minute totals to your goal log in the cloud (not raw HealthKit samples)

We do not read heart rate, sleep, steps, or other Health categories. We do not write data to HealthKit. Health data is not used for advertising.

Calendar and reminders on your device

With your permission, Remy reads (and may sync) data from Apple Calendar and Reminders via EventKit. The home screen widget reads today’s calendar and reminder data on your device only; it does not independently sync to our servers.

Location

We do not collect GPS or precise device location. If you add a place to an event, you may type or search for a location; search queries are sent to Apple’s MapKit service, and the location text you save is stored with that event in the cloud.

Companion (caregiver) relationships

• Companion email address when you send an invitation
• Relationship role – view (read-only) or manage (can edit shared data, where enabled)
• Invitation and acceptance status

Companions you invite can access your shared schedule, tasks, goals, and profile information according to the role you assign, after they accept the invitation.

Device and technical data

• Push notification token (APNs) to deliver reminders and companion alerts
• Device platform (e.g., iOS) associated with your account
• App version and OS version as needed for support and compatibility

Usage and product improvement (first-party only)

We do not use third-party advertising or cross-app tracking analytics. We do record limited first-party usage on our servers to operate features you expect—for example, daily app-use streaks, achievement progress, and in-app rewards. This data is tied to your account and is not sold.

Payments and subscriptions

• Apple In-App Purchase – transaction and subscription identifiers for verification (Remy Pro / companion features). Payment cards are handled by Apple, not stored by Remy.

Marketing waitlist

If you join our email waitlist on the marketing site, we collect your email address only for launch updates. This is separate from creating a Remy account.

What we do not collect

• Advertising identifiers or cross-app tracking for ads
• Contacts from your address book
• GPS or continuous location tracking
• Browsing history outside Remy
• Third-party crash-reporting or marketing analytics SDKs in our apps

How We Collect Information

• Directly from you – when you create an account, enter events, tasks, goals, or profile details
• From your device – when you authorize Calendar, Reminders, HealthKit, notifications, or photo library access
• Automatically – when you sign in and data syncs, when we send push notifications, or when you use subscription features
• From sign-in providers – Apple or Google may share basic profile information during OAuth sign-in

How We Use Your Information

• Provide the service – sync your data and enable companion sharing you request
• Notifications – local reminders, daily briefings, and companion alerts when you opt in
• Subscriptions – verify Remy Pro access and manage billing through Apple In-App Purchase
• Product features – achievements, streaks, brain-training games, and goal tracking
• Support and safety – respond to your requests, prevent abuse, and protect accounts
• Legal compliance – meet applicable legal obligations

How We Share Your Information

Companions you invite

If you invite a companion, they may see and (depending on role) edit your shared data after accepting. You can revoke access. If you enable “notify companion on complete” for a task, companions may receive a push notification that includes the task title and your display name.

Service providers (subprocessors)

We use trusted providers to operate Remy. They process data only on our instructions:

• Supabase – authentication, database, file storage, and backend functions (United States)
• Apple – App Store, Sign in with Apple, In-App Purchase, push notifications (APNs), HealthKit, Calendar, and MapKit
• Google – Sign in with Google (when you choose that option)
• Resend – companion invitation emails to existing users

Public profile visibility

Profile fields such as display name, username, and avatar may be visible to other signed-in Remy users (for example, when companions look up your account). Avatar images are stored in a publicly readable storage bucket linked to your profile.

We do not sell your personal information

Remy Care does not sell, rent, or share your personal information with third parties for their independent advertising or marketing purposes.

Legal and safety

We may disclose information if required by law, court order, or to protect the rights, safety, and security of Remy, our users, or others.

Data Storage, Retention, and Security

Where data is stored

Account and synced content are stored on Supabase servers in the United States. Some data is also cached on your device (for example, offline copies of events and tasks, theme preferences, and game progress).

Security

We use industry-standard protections including encrypted connections (TLS), authenticated access, and database access controls. No method of transmission or storage is 100% secure; we work to reduce risk and address issues promptly.

Retention

We keep your information while your account is active and as needed to provide the service. If you request account deletion, we will delete or anonymize your personal data within a reasonable period, except where we must retain information for legal, security, or billing purposes (for example, tax records tied to subscriptions).

Your Rights and Choices

• Permissions – revoke Calendar, Health, Reminders, or notification access anytime in iOS Settings
• Companion access – revoke or change companion roles in the app
• Notifications – control reminders and companion digests in app settings
• Export – generate a Remy Report PDF from the app to export a summary of your data
• Delete synced events and tasks – use in-app delete tools (this does not delete your entire account)
• Account deletion – email support@remycare.org to request deletion of your account and cloud data. Uninstalling the app does not delete server-side data.
• Questions – contact us at support@remycare.org

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Delete personal information we hold about you (subject to legal exceptions)
• Correct inaccurate personal information
• Opt out of sale or sharing – we do not sell or share personal information for cross-context behavioral advertising
• Non-discrimination – we will not discriminate against you for exercising these rights

To exercise these rights, email support@remycare.org. We will verify your request and respond within the timeframes required by law.

European Economic Area and United Kingdom (GDPR)

If you are in the EEA or UK, we process your personal data based on:

• Contract – to provide Remy and features you sign up for
• Consent – for optional permissions (HealthKit, notifications, companion invites)
• Legitimate interests – to secure and improve the service, subject to your rights
• Legal obligation – where required by law

You have the right to access, rectify, erase, restrict processing, data portability, and to object to certain processing. You may lodge a complaint with your local supervisory authority. For requests, contact support@remycare.org; we aim to respond within 30 days.

Data may be transferred to the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses offered by our service providers.

Automated Decision-Making

Remy does not make decisions with legal or similarly significant effects based solely on automated processing.

Data Breaches

If we become aware of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

Children's Privacy

Remy is intended for general audiences and is commonly used by adults managing their own schedules or supporting family members. We do not knowingly collect personal information from children under 13 without appropriate parental consent. If you believe a child has provided us personal information, contact support@remycare.org and we will take steps to delete it.

International Users

Remy Care is based in the United States. If you use Remy outside the United States, your information may be transferred to and processed in the United States and other countries where our service providers operate, which may have different data protection laws than your country.

Changes to This Policy

We may update this privacy policy from time to time. We will post the updated policy on this page with a new “Last updated” date. For material changes, we may also notify you through the app or by email where appropriate. Your continued use of Remy after changes become effective constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or our data practices:

• Email: support@remycare.org