Privacy Policy

Rememoir ("we", "us", or "our") is a storytelling platform that helps individuals and families preserve personal life stories. We are operated by Rememoir Inc. If you have questions about this policy, contact us at privacy@rememoir.com.

We collect the following information when you use Rememoir:

• Account information: Name, email address, and password (stored hashed) when you create an account.
• Profile information: Account type (individual or facility), language preference, and subscription status.
• Story content: Text, audio recordings, and photos you upload as part of your stories and memoir.
• Payment information: Billing details are processed and stored by Stripe. We never store card numbers on our servers.
• Usage data: Events such as sign-in, story creation, and memoir export collected via PostHog for product analytics.
• Error data: Crash reports and stack traces collected via Sentry to help us fix bugs.

• To provide the Rememoir service: storing and displaying your stories and memoir.
• To send transactional emails: account confirmation, password resets, subscription receipts.
• To improve the product: aggregated, anonymised usage analytics help us understand which features to build next.
• To debug errors: error reports help us fix issues before they affect more users.
• To process payments: billing and subscription management via Stripe.

We do not sell your data to third parties. We do not use your story content for marketing or advertising.

Your data is stored in Supabase (Postgres database and file storage), hosted on AWS infrastructure. Audio and photo files are stored in Supabase Storage. All data is encrypted at rest and in transit (TLS 1.2+).

We use Row Level Security (RLS) policies so that each user can only access their own data. Facility staff can access stories for residents assigned to their facility only.

We use the following third-party services, each with their own privacy policies:

• Supabase – Database and authentication (privacy policy)
• Stripe – Payment processing (privacy policy)
• Resend – Transactional email (privacy policy)
• PostHog – Product analytics (privacy policy)
• Sentry – Error monitoring (privacy policy)
• Vercel – Hosting and deployment (privacy policy)

We use browser localStorage and session cookies to keep you logged in. PostHog uses a first-party cookie to track anonymous usage before you log in. You can disable cookies in your browser, but some features (like staying signed in) may not work.

We do not use advertising cookies or third-party tracking pixels.

Depending on your location, you may have the following rights:

• Access: Request a copy of all data we hold about you.
• Correction: Update incorrect data via your Profile settings.
• Deletion: Request deletion of your account and all associated data. See Section 8.
• Portability: Export your stories as a PDF book at any time from the "My Stories" page.
• Objection: Opt out of analytics tracking by contacting us.

To exercise any right, email privacy@rememoir.com with "Data Request" in the subject line. We will respond within 30 days.

You can request deletion of your account and all associated data (stories, audio, photos, profile) by emailing privacy@rememoir.com. We will permanently delete your data within 30 days and confirm by email.

Note: If you have an active paid subscription, please cancel it before requesting deletion to avoid further charges.

Rememoir is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email.

For privacy questions or requests: privacy@rememoir.com