Privacy Policy

Remember is operated by Embodied Era LLC (“we”, “us”), a Virginia limited liability company. This policy explains how we handle personal information when you use the Remember app and website (the “Service”). How we handle health information is covered in more detail in our Consumer Health Data Policy. Contact us about anything here at privacy@embodied-era.com.

We collect only what the Service needs to work. We don't buy information about you, and we have no advertising business.

• Account information: your name, email address and profile photo, and records of sign-in activity, handled by our sign-in provider.
• What you save: notes, reminders, people, life areas, tags, photos and files; text we extract from photos and documents so you can search them; your recent Ask AI questions and answers; and the text of voice notes. Voice recordings are sent to be transcribed and are not stored by us afterwards.
• Health information you choose to save, about yourself or others — see section 5 and the Consumer Health Data Policy.
• Consent records: when you confirmed your age and agreed to how health information is handled, and — if you subscribe — your agreement to the renewal terms.
• Usage information: which screens you open, counted per day (never what you typed or looked at), when you last used the app, how much of each plan limit you've used, and how much text or audio our AI providers processed for you and what it cost (the amounts, never the content).
• Device and technical information: push notification subscriptions for devices where you turn notifications on, your time zone, and — like any website — IP address and browser details in server logs kept for up to 30 days.
• Approximate location at sign-up: we check the country and US state your IP address comes from when you create an account, only to confirm the Service is offered there. We don't store it. We don't collect precise location. Photos you add to notes are resized in your browser before upload, which removes the location data phones embed in photos, and we remove it from JPEG and PNG images you attach as files too. Other image formats you attach as files (such as HEIC) are stored as you uploaded them.
• Billing information: if you subscribe, Stripe collects your payment details directly — we never see your full card number. We keep your plan, its status and renewal date, any extra packs you bought and what's left of them, and Stripe's reference numbers for your account.
• Invitations: if you signed up through someone's invite link, which account invited you, so you each get the month of credit the invite promises once you've kept a plan for 30 days. They aren't told who you are: they get an email, without your name, when someone joins with their link and when a month is credited, and see how many of the people they invited have earned one.
• Legacy contact: if you name one, their name and email, and a scrambled form of their access key, never the key itself. If they claim your account after you die: their name and email, your date of death, their signed statement, and a copy of your death certificate. We delete the certificate once we decide the claim. A memorial records your date of death and who may read it.
• Connected accounts and imports: if you connect Google, the contacts or calendar entries you choose to import and the access tokens needed to do it; if you subscribe to a calendar by link (for example from iCloud), that link, so we can keep the events up to date; and the contents of any contact or calendar file you import.
• Messages to us: anything you send when you email us.
• Reports: if you report content, the details you give us — your name, email, where the content is and what you tell us about it — and a scrambled form of your IP address, used only to limit how many reports come from one place.

• to provide the Service — store what you save, show it back to you, search it, and answer your questions;
• to send the reminders, digests and emails you've turned on, and service messages such as billing receipts and changes to these policies;
• to process payments and manage subscriptions;
• to keep the Service secure, prevent abuse and enforce usage limits;
• to answer your support and privacy requests;
• to understand how the app is used, from usage counts per account and in total — never by reading your content;
• to comply with the law and protect our rights and other people's.

We do not sell personal information, use it for targeted advertising, or use it to make automated decisions that have legal or similarly significant effects on you.

When you capture something, save a note, add a photo or document, search, ask a question or record a voice note, the content being processed is sent to an AI provider to handle that request: Anthropic to organize, tag and read what you save and to answer questions, and OpenAI to index notes for search, to match your searches and questions to them by meaning, and to transcribe voice. This includes notes you write yourself, which are tagged and indexed on every plan. They process it on our instructions.

Both providers may keep that content for up to 30 days to detect abuse of their services, and longer only if it's flagged as violating their usage policies. Neither uses it to train their models, and neither do we: nothing you save is used to train any AI model.

You agree to this on the setup screen, before anything is processed. Remember runs on AI, so the way to withdraw that agreement is to delete your account.

AI output can be wrong. It organizes and retrieves your own information; it doesn't make decisions about you.

People save medications, appointments, conditions, readings and similar details here — about themselves and the people they care for. We treat all of it as sensitive, and we ask for your consent before you start. We use it only to provide the Service to you: we never sell it, use it for advertising, or share it except with the service providers who run the Service, or with people you choose to share it with. This includes information about sexual or reproductive health and vital signs.

Remember isn't a healthcare provider or a medical record, so HIPAA doesn't apply — but state consumer health data laws may, and we follow them. The Consumer Health Data Policy sets out the details and your rights, including how to withdraw consent.

Most of what people save in Remember is about someone else. Those people aren't our users and haven't agreed to anything with us. The person who saved the information controls it: they can edit, share or delete it, and it's deleted when they delete their account.

If someone shares something with your email address or asks to connect with you, we email you about it. Every one of those emails has a link to stop them. If you use it, we keep only a scrambled form of your address, so we know not to email it again. Anything already shared with you stays in place, and is there if you ever sign up with that address.

If you believe someone holds information about you in Remember, we'll forward your message to them where we can identify the account, and we'll act ourselves where the law requires or the content breaks our Terms. Contact privacy@embodied-era.com.

We share personal information only:

• with the service providers below, each limited to what its job needs and bound by contract to use it for nothing else;
• with other Remember users, when you choose to share something with them;
• with services you connect, when you direct us to;
• with the legacy contact you name: a warning if your account is due to be deleted for inactivity, and, after you die and the claim process in our Terms, your account as a memorial;
• when required by law, or to protect the safety, rights or property of our users, the public or us — and we'll tell you about a legal demand for your information unless we're prohibited from doing so;
• as part of a merger, acquisition or sale of assets, subject to this policy, and we'll tell you before your information becomes subject to a different policy.

Push notifications are delivered through your device maker's push service (such as Apple or Google) in encrypted form. Here is every provider that handles personal information for us:

If you connect a Google account, we use the contacts and calendar information you choose to import only to add those people and events to your Remember account. We don't use it for advertising, we don't sell it, and we don't use it to train AI models. You can disconnect Google at any time from the contacts or calendar import page in Remember, which revokes our access, or from your Google Account's security settings.

Remember's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Remember is a memory app, so what you save stays until you delete it — or, if your account is left without a plan, until a year after it became read-only. Specifically:

• Your content: until you delete it, or delete your account.
• Accounts without a plan: when a free trial or paid plan ends and no plan is chosen, the account becomes read-only. If it stays read-only for 12 months, we delete it and everything in it, after emailing you three times (the last at least 7 days before). An account that never saved anything of its own is deleted instead after 12 months without a sign-in. Choosing a plan at any point before then stops this.
• Questions you ask Ask AI, and their answers: your 50 most recent, so you can reopen them from Search. Delete any or all of them there, anytime; older ones are deleted automatically.
• Account information: until you delete your account, or it's deleted as described above.
• Usage counts, including what AI requests cost: 13 months, then deleted automatically.
• Memorial accounts, kept after the holder dies for their legacy contact: kept unchanged while someone may read them, and deleted when that person asks. Legacy claims: the death certificate is deleted once the claim is decided. The claim record, with names, emails, date of death and decision, is kept 3 years in case of a dispute.
• Visit counts for our public pages: anonymous totals kept by Vercel, which can't identify anyone.
• Server logs: kept by our hosting provider for up to 30 days, so problems and security incidents can be investigated. They record requests (the page or feature used, IP address, browser) and error messages. Search requests are sent so that what you search for isn't part of what they record.
• Emails we send you (reminders, digests, account and billing notices): our email provider keeps a copy for 30 days so it can deliver them and investigate delivery problems.
• Backups: content you delete is removed from our database backups within 35 days.
• Billing and consent records: kept by Stripe, and by us where needed, for as long as tax, accounting and consumer-protection laws require — typically up to seven years for billing records, and at least three years for your agreement to renewal terms. These survive account deletion. The consent records keep your email only in scrambled form, which also lets us offer the free trial once per email address.
• Requests to stop invitation emails: only a scrambled form of the email address, kept so the request keeps working.
• Emails and feedback you send us: as long as needed to handle your request and keep a record of it.
• Reports of content: as long as needed to handle the report and keep a record of what we did.

You can delete your account at any time from Settings → Your data. It permanently removes your content, photos, files, connected-account tokens and usage records, and deletes your sign-in identity. It can't be undone, so export anything you want to keep first. Anything you've shared is deleted for the people you shared it with (copies they saved to their own account stay theirs), and notes, reminders and photos you added to things others shared with you are deleted too; the app shows you exactly what before you confirm. Deleting your account also cancels any subscription immediately, so you won't be charged again; the rest of the current period isn't refunded, so if you're paying you may prefer to cancel first and delete once the period ends. Unused extra packs and invite credit end with the account. An account left without a plan is deleted the same way, automatically, as described under How long we keep it.

Information is encrypted in transit (TLS) and at rest by our database and file-storage providers; our database provider is SOC 2 Type II audited. On top of that, the tokens for any account you connect are encrypted again by the application with a key our database provider doesn't hold. Access to production systems is limited to what's needed to run and support the Service.

No system is perfectly secure. If a breach affects your personal information, we'll notify you and the relevant authorities as the law requires.

Wherever you live, you can:

• see and download a copy of your information — use Settings → Your data → Export, or ask us;
• correct it — most of it you can edit directly;
• delete it — individual items, or your whole account;
• withdraw consent to how health information is handled (see the Consumer Health Data Policy);
• turn off emails and notifications in Settings, or use the unsubscribe link in any reminder or digest email (billing notices about a subscription are sent regardless, because the law requires them);
• disconnect a connected account at any time.

To make a request, email privacy@embodied-era.com from the address on your account. We'll verify it's you, and respond within 45 days (we may extend once by another 45 days where the law allows, and we'll tell you if we do). You can use an authorized agent; we'll ask for proof they're acting for you. We won't treat you differently for exercising your rights.

Appeals. If we decline a request, we'll explain why, and you can appeal by replying to that message with “Appeal” in the subject. We'll respond within 45 days. If we deny your appeal, you can contact your state Attorney General — for example, Virginia residents at oag.state.va.us and Connecticut residents at portal.ct.gov/ag.

• California. We don't sell or share personal information for cross-context behavioral advertising, including of anyone under 16, and we use sensitive personal information only to provide the Service. Under the “Shine the Light” law, we don't disclose personal information to third parties for their own direct marketing.
• Virginia and Connecticut. You have the rights described in section 12, and we process sensitive data, including health data, only with your consent.
• Nevada. We don't sell personal information as defined by Nevada law. Health data is covered by the Consumer Health Data Policy.
• Washington. New accounts are not currently offered to Washington residents. The Consumer Health Data Policy applies to any Washington consumer health data we hold.

We use cookies only to keep you signed in and secure (plus a short-lived one while you connect a Google account, to protect that step, and, if you arrive through someone's invite link, one holding just that link's code for 30 days so the invite counts when you sign up), and your browser's local storage to remember preferences, keep the app fast and, once you've signed in on a browser, leave it out of our visit counts. We use no advertising or analytics cookies and no advertising trackers, and we don't track you across other websites.

On our public pages only (such as the home and pricing pages, not inside the app), our hosting provider Vercel counts visits for us with Vercel Web Analytics. It records the page, the site you came from, your approximate location (country, region and city), and your browser, operating system and device type. It sets no cookies and doesn't identify you: visits are told apart for 24 hours by a scrambled value made from the request, which is then discarded, and we see only totals. Visits from a browser that has signed in to Remember aren't counted.

Because we don't track you across sites, there's nothing for a browser's Do Not Track signal to switch off, and we treat it the same as any other visit. We honor Global Privacy Control signals as a request not to sell or share your personal information — which we don't do anyway.

We don't collect biometric identifiers. The AI that reads your photos describes what's in them and extracts text; it doesn't identify people by their faces or create face geometry. Voice notes are converted to text; we don't create voiceprints.

Remember is for adults: you must be 18 or older to create an account. We don't knowingly collect personal information from children under 13; if we learn we have, we'll delete it. A parent may save information about their own child — that's the parent's content, held in their account and deleted with it.

The Service is offered in the United States, and your account and everything you save are stored in the United States. Some of the service providers listed above may process information in other countries while doing their job for us.

If we make a material change to this policy, we'll email you before it takes effect and update the date at the top. We won't use information in a materially different way from what this policy described when it was collected without asking for your consent.

Privacy questions and requests: privacy@embodied-era.com.