Your photos stay yours.

1. The short version

• Scoring happens on your phone. Every photo gets a quality score on-device. We never upload your full library.
• The AI step needs your agreement. Only after you agree in the app, copies of a small shortlist of photos, and some text, go through our backend to Anthropic. The app builds books with that step, so without your agreement it does not build them.
• The finished PDF goes to our print partner when you order, together with the delivery address.
• We don’t sell your data. The app does measure which ads led to an install or a purchase, and that goes to Meta through Appstack. Section 6 explains it.
• You can delete your account in the app. That also deletes the print files we hold for you.

2. Who is responsible

The controller of your personal data is Feldt Holding ApS, CVR 14274995, Martinsvej 5, st., 1926 Frederiksberg C, Denmark, which operates Remembr. Write to us at hello@remembr.dk for anything on this page. You can also complain to the Danish Data Protection Agency, Datatilsynet (datatilsynet.dk), or to the data protection authority where you live.

3. What we collect, why, and on what basis

“Basis” is the legal ground under the GDPR (Article 6) that lets us use the data for that purpose. What is required to use the service is stated below; everything else is optional. We make no decisions about you by automated means that have legal or similarly significant effects.

Account and sign-in

If you sign in with Apple or Google, in the app or on this website, they share your name, your email address and an account ID with us. Apple lets you hide your real address, in which case we only see Apple’s relay address. If you sign in on the website with email, we only get the address you type. We use it to run your account, your plan and your orders. An email address is required to have an account. An account is required for a plan. You can order a single book without signing in; we then tie your first-book offer to the app’s install ID. Basis: contract (Art. 6(1)(b)).

Orders, payments and delivery

Your name, email, delivery address and, if the carrier needs one, a phone number, plus what you ordered. These are required to ship a book to you. If you send a book as a gift, we also handle the recipient’s name and address and your message. Card details go to Stripe, which holds them; we never see your card number. Basis: contract (Art. 6(1)(b)), and legal obligation (Art. 6(1)(c)) for accounting records.

Your photos and what is sent to our AI provider

The app scores your photos on your phone. The app’s AI step, which builds and lays out your book, only runs after you have agreed to it in the app. You can withdraw that agreement in the app; the app then stops building books until you agree again. When the step runs, these go through our backend to Anthropic (Claude):

• small copies of the photos in the running for your book, about 512 pixels on the long side, never the originals
• if you use People, one small reference face photo for each of up to three people, and the names of the people you have included, so the AI can find them in your photos
• the text of your book (title, captions, the opening letter, dates and place names) and what you ask the editor to change, plus small pictures of the pages for the design check

Our backend passes these on and does not keep them. We have not opted in to any use of this data to train models. What Anthropic keeps and for how long is set by its own terms for its API. Basis: contract (Art. 6(1)(b)), because the AI step is how the app makes your book, together with your agreement in the app. Reference face photos can be sensitive: the app uses them to recognise a person in your photos. Add a person only if you are comfortable with that, and tell the people in your photos what you are doing with them.

Print files

When you order, the app makes a print-ready PDF of your book, which contains your photos at print resolution. We store it in private storage so our print partner can fetch it, and the download link we give out expires after 14 days. When you delete your account, we delete the print files the app uploaded while you were signed in, but only those uploaded since we switched this on. Older files, files uploaded while signed out, and files made by the website’s browser book builder are not covered; we remove them if you ask by email. We do not yet delete print files on a schedule. Basis: contract (Art. 6(1)(b)).

Places in your book

When the app names a place from a photo’s location, it asks Apple’s location service for the name. The place name can end up in your book text and then goes to Anthropic as part of that text.

An anonymous ID for your install

Shortly after the app opens, it asks our backend (Supabase) for a random anonymous ID for your install. No name, email or password goes with it. The app keeps it in your iPhone’s Keychain and sends it with requests to our server, so the server can tell one install from another and protect itself from abuse, for example by limiting how much AI help one install can use in a day. Supabase also records the usual connection details for that request, such as your IP address and device type.

It is not an account. It does not sign you in or unlock anything, and it is never merged with an account if you create one later. If the app cannot get one, it carries on without it. iOS can keep Keychain items after an app is deleted, so a reinstall may pick the same ID up again; deleting your account in the app removes it. Unused IDs are deleted after 90 days. Not used for tracking. Basis: our legitimate interest in keeping the service secure and preventing abuse (Art. 6(1)(f)).

Backup in your iCloud

If you are signed in, the app copies your books and settings to your own private iCloud storage so you can restore them. That is held by Apple under your Apple ID, not by us. Deleting your account removes it.

How you use the app

Every copy of the app has a random install ID. It isn’t your name, your email or your Apple ID. We note when you first reach certain steps (finishing onboarding, getting your first book, starting a plan), together with the app and iOS version. These are dates and step names, never photos, captions or text. They tell us where people get stuck. Basis: our legitimate interest in keeping the app working (Art. 6(1)(f)). You can object, see section 8. They are not removed when you delete your account; write to us and we’ll delete yours.

Phone number (only if you opt in)

The app may ask if Albert, who makes Remembr, can call you. Saying no, or skipping it, changes nothing about how the app works. If you type your number and tick the box, we store your phone number, when you agreed, your phone’s time zone and language setting (so we don’t call at night), and the app’s install ID, so we can see which screens you reached before we talk. We use it only to text you to find a time and then call you about Remembr. It isn’t used for ads. It is stored with Supabase, and an email carrying it is sent to us through Resend. Basis: your consent (Art. 6(1)(a)); to withdraw it or have your number deleted sooner, write to us.

Newsletter (only if you opt in)

If you tick the newsletter box when you sign in on the website, we store your email address, your account ID and the time you said yes. The box is unticked by default. Every newsletter has an unsubscribe link; after you unsubscribe we keep only a record that you did, so we never email you by mistake. Basis: your consent (Art. 6(1)(a)).

Support email

If you write to us, we keep the conversation to answer you and to handle problems with an order. Basis: our legitimate interest in answering you (Art. 6(1)(f)), or contract if it is about an order.

This website

We use Vercel Web Analytics for page-view counts. It does not use cookies. If you sign in on the website, a session cookie keeps you signed in. A browser version of the book builder exists. It is not linked from the site, but anyone who signs in can reach it. If you use it, the photos you add (previews and full-size originals) and some details about them, such as their size, are uploaded to our storage and analysed as in the app, including by Anthropic, and the pages it builds are stored. Nothing is printed from it. We have not set a retention period for what it stores; ask us to delete it.

4. Who receives your data

• Supabase, our database and backend. Hosted in Ireland (EU). Photo copies for the AI step and the print PDF pass through our backend on their way to Anthropic and Gelato. It also holds your install’s anonymous ID.
• Anthropic (Claude), for the AI step above.
• Gelato, our print-on-demand partner, which prints and ships your book. We send it the print PDF and the name, address, email and, if needed, phone number of the person the book is delivered to.
• Stripe, payments and billing for plans.
• RevenueCat and Superwall, which keep track of your plan and show the plan screen. They receive an ID for you (once you sign in, it is derived from your email address), whether you have a plan, and the attribution information described in section 6.
• Appstack and Meta, for ad measurement (section 6).
• Resend, which sends our emails: orders, sign-in codes, tracking, the newsletter if you opted in, and the notice that you asked for a call.
• Vercel, which hosts this website.
• Apple and Google, if you sign in with them; Apple also for location names and your iCloud backup.

We don’t sell your data. Where one of these companies is our processor, it handles your data only on our instructions.

5. Transfers outside the EU and EEA

Supabase stores your data in the EU. Anthropic, Stripe, RevenueCat, Superwall, Resend, Vercel, Google, Apple and Meta are based in, or operate from, the United States, so data we send them is transferred there. Gelato prints in many countries, so your delivery details go to the country where your book is printed. For details of the safeguards that apply to a particular provider, ask us at hello@remembr.dk.

6. Ad measurement and tracking

The app includes an attribution tool from Appstack. It tells us which ads brought people to the app, so we can stop paying for the ones that don’t work. It records when the app is installed and first opened, which onboarding steps you reached, when the plan screen was shown, when you sign up, when you start a checkout, and when you buy a plan or a book, with the amount, currency, plan or book format. It also records how the first sample book turned out (how many photos and pages, and the names of its theme and cover, never the photos or text), whether you ordered or deleted it, and whether you saw or tapped the lesson card and the plan reminder shown after you leave the plan screen. Appstack passes these events on to Meta.

The tool starts when the app opens, before iOS asks you the tracking question, and the app does not wait for your answer before it records the install, first-open and onboarding events. The app lists Appstack’s servers as tracking domains, which iOS blocks until you allow tracking, and we rely on that block; we have not independently confirmed that nothing reaches Appstack before you answer. Our basis for measurement that does not use your advertising identifier is our legitimate interest in knowing which advertising works (Art. 6(1)(f)), and you can object (section 8). The iOS prompt, which comes after onboarding, governs the advertising identifier (IDFA): it is included only if you allow tracking. You can change your choice any time in iOS Settings → Privacy & Security → Tracking.

The app also passes the attribution reference Appstack holds for your install to RevenueCat and Superwall, and it does not check your answer to the iOS prompt first. No photos, captions, names or book text are ever included in these events. We don’t show ads in the app.

7. How long we keep it

• Account record (name, email, sign-in): until you delete your account.
• Print PDFs: in private storage until you delete your account, for files the app uploaded while you were signed in since we switched that on; otherwise until you ask us to remove them. The download link expires after 14 days. We have not set a schedule.
• Orders, invoices and payments (at us, at Stripe and at Gelato): as long as the law requires us to keep accounting records. Deleting your account does not remove them.
• Photo copies and text sent for the AI step: not kept by us. Anthropic’s own terms govern what it keeps.
• Install and step records: until you ask us to delete them; we have not set a shorter limit.
• Phone number: deleted after the call, and after 90 days at the latest even if we never spoke.
• Newsletter: until you unsubscribe, then only the record that you did.
• Support emails: as long as we need them to help you.
• Events sent to Appstack, Meta, RevenueCat and Superwall: kept by them under their own terms. Deleting your account in the app deletes your RevenueCat customer record. For the others, write to us and we will pass your request on.

8. Your rights

Under the GDPR you can ask us for access to your data, to correct it, to erase it, to restrict how we use it, and to receive it in a portable format. You can object to processing we base on legitimate interest. Where we rely on your consent, you can withdraw it at any time, and that doesn’t affect what we did before. Email hello@remembr.dk; we reply within 30 days. You can delete your account yourself in the app under Me → Delete account. You also have the right to complain to Datatilsynet (datatilsynet.dk) or to the authority where you live.

If you’re in California, you also have the right to know what we have, to delete it, and to opt out of any sale. We don’t sell personal data.

9. Children

remembr is for adults, and our terms ask you to be 18 to create an account. We don’t knowingly collect personal information from anyone under 18. If you believe a child has signed up, email us and we’ll delete the account.

10. Security

Data travels over TLS. Our database and storage are provided by Supabase, which encrypts stored data, and access to our systems is limited to the people who need it. No system is unbreakable, so we keep what we collect small.

11. Changes to this policy

When we change this policy, we update the date at the top of this page. If a change affects you, we’ll tell you in the app or by email.

12. Contact

Privacy questions go to hello@remembr.dk. For anything else, our contact page has the right inbox.