Privacy principles

Who we are

Remember is operated by Embodied Era LLC ("we", "us"). You can reach us about anything on this page — including a request to see, correct, export or delete your information — at privacy@embodied-era.com, or by post at 13509 Copper Ridge Dr, Herndon, VA, 20171. We answer privacy requests within 45 days.

What we collect

Only what the app needs to work. We do not buy information about you from anyone, and we have no advertising business.

• Account: your name, email address and profile photo, from the sign-in provider you choose.
• What you save: notes, reminders, people, life areas, tags, photos and files — and the text we read out of photos and documents so you can search them later.
• Usage: which screens you open and when you last used the app, counted by day. We do not record what you typed or looked at.
• Device: push notification tokens for the devices you turn notifications on for.
• Billing: if you subscribe, Stripe handles your card. We never see or store card numbers.
• Connected accounts: if you connect Google, the contacts or calendar entries you choose to import, and the access tokens needed to do it.

Information about other people

Remember is for keeping track of the people in your life, so most of what you save is about somebody else — a birthday, a preference, sometimes something health-related. Those people are not our users and have not agreed to anything. So: you are responsible for what you record about others, you should only record what they would reasonably expect you to, and anything you share is shared by you, not by us. If someone contacts us about information you hold about them, we will tell them it is yours and put them in touch with you rather than hand over or delete your notes ourselves.

Health-related information

We are not a healthcare provider and Remember is not a medical record, so HIPAA does not apply to it. But people do save medications, appointments, conditions and readings here, and some state laws — including Washington's My Health My Data Act and Nevada's SB 370 — treat that as consumer health data no matter who holds it. We treat it that way too: it is collected only because you typed it in, used only to show it back to you, never sold, never shared for advertising, and never used to build a profile of you. You can delete any of it at any time, and deleting your account removes all of it.

How AI is used

When you capture something, upload a photo or document, ask a question, or record a voice note, that content is sent to our AI providers to process that one request. They act on our instructions, do not use your content to train their models, and do not keep it beyond what is needed to return the result. Notes you write by hand are also turned into a numeric representation used for search. Nothing you save is used to train any model, ours or anyone else's.

Who else touches your data

Only the providers that make the app run, each limited to what its job needs and bound by contract to use it for nothing else. We do not sell your personal information and we do not share it for cross-context behavioural advertising — under California law, that means we have never sold or shared it, including the personal information of anyone under 16.

How long we keep it

Your content stays until you delete it or close your account — it is a memory app, and quietly expiring someone's notes would defeat the point.

• Notes, reminders, people, areas, photos and files: until you delete them, or you delete your account.
• Account record: until you delete your account.
• Usage counts: 13 months, then removed.
• Backups: deleted content disappears from routine backups within 35 days.
• Billing records: kept as long as tax and accounting law requires, typically seven years, and held by Stripe.
• Deleting your account removes your notes, photos, files, connected-account tokens and usage rows, and deletes your sign-in identity. It cannot be undone.

Your rights

Wherever you live, you can ask us to show you what we hold, correct it, give you a copy, or delete it — and you can do the first three yourself from Settings at any time. We will not treat you differently for asking. If we ever refuse a request we will say why, and you can appeal by replying to privacy@embodied-era.com. You may use an authorised agent; we will ask for proof they act for you. California residents have the specific rights to know, delete, correct, opt out of sale or sharing (we do neither), and limit the use of sensitive personal information (we only use it to run the app).

Security

Everything is encrypted in transit (TLS) and at rest — our database uses AES-256 and is SOC 2 Type II audited, and file storage is encrypted by the provider. On top of that, notes you mark sensitive and the tokens for any account you connect are encrypted again with a key held by the application, so they are unreadable even to someone holding the database. Access is limited to what is needed to run and support the service. No system is perfect; if a breach ever affects your information we will tell you and the relevant regulators as the law requires.

Where your data is

Remember is offered in the United States and your data is processed there. If you use it from elsewhere, you are sending your information to the United States, which may not offer the same protections as your home country.

Children

Remember is for adults: you must be 18 or older to have an account. We do not knowingly collect information from children under 13, and if we learn we have, we delete it. Note that a parent may save information about their own child here — that is the parent's record, held under their account, and it is deleted with it.

Cookies and local storage

We use cookies strictly to keep you signed in, and your browser's local storage to remember small preferences such as which tab you had open. We use no advertising or third-party tracking cookies, so there is nothing here to opt out of.

Changes to this policy

If we change anything that matters, we will update the date below and tell you in the app before it takes effect.

Who we share with

The complete list. Each one gets only what its job needs.