Privacy, remembr

1. The very short version

Most scoring happens on your phone. Every photo gets a local quality score on-device. We never upload your full library.
A small shortlist goes to our AI partner. The likely keepers (roughly the photos that might end up in your book) are sent through our backend to Anthropic to fine-tune the layout, ordering and one-line captions. This step is necessary to make the book good, and you can disable it in the app to fall back to a local-only layout.
The finished PDF goes to our print partner. Once you confirm the preview, a flattened PDF is sent to Gelato, which prints and ships your book.
We don’t sell data. Not now, not ever. No ads, no resale, no “partner” loopholes.
You can delete everything in two taps from the app, including any preview drafts we’ve cached.

2. What we actually collect

To run a subscription that mails physical books, we need a few things. We try to keep this list as small as we can.

Account info

Name, email, shipping address, and payment token from Stripe. We don’t store your card number, Stripe does that under their PCI-DSS Level 1 certification.

Subscription & order info

The tier you’re on, which books have shipped, billing history, and any preferences you’ve set (covers, hidden faces, captions).

Aggregated diagnostics

Anonymous counts like “the spring book auto-shipped without a preview tap, 64% of the time.” No individual events tied to your account.

3. What we do not collect

Your photo library
Photo metadata in bulk (EXIF, GPS, faces)
Contact list, calendar, browser history
Cross-app tracking identifiers (IDFA, advertising IDs)

4. How we use what we collect

We use account and order info to print and ship your books, answer your support emails, and let you know about anything important (price changes, lost shipments). That’s it.

We use aggregated diagnostics to make the layout engine and the app better, like noticing that previews were getting dismissed too often, then redesigning that screen.

5. Who we share with

The minimum set of vendors needed to make books and run a business:

Stripe, payments
Supabase, account database and backend proxy, hosted in the US. Our backend is the seam: photo shortlists pass through it on the way to Anthropic, and the finished PDF passes through it on the way to Gelato.
Anthropic (Claude), for the AI vibe / layout / caption pass on the shortlist of likely keepers. Calls go through our backend; we don’t send your full photo library and we don’t enable model training on this data.
Gelato, our print-on-demand partner, which prints and ships your book through its local production network. We send Gelato the flattened, laid-out PDF plus your shipping address.
Postmark, to send transactional emails

We do not share or sell your data to advertisers, brokers, or affiliated companies for marketing.

6. Your rights

You can request a copy of your account data, ask for corrections, or ask us to delete everything at any time by emailing privacy@remembr.co. We’ll respond within 30 days (faster for CA, EU, and UK requests).

If you’re in California, Europe, or the UK, you also have:

The right to know what we have
The right to delete it
The right to opt out of any sale (we don’t sell, but the right stands)
The right to non-discriminatory service if you exercise any of the above

7. Children

remembr is a service for adults choosing to print their own photos. We don’t knowingly collect information from anyone under 13. If you believe a child has signed up, email us and we’ll delete the account.

8. Security

We use modern industry baselines: TLS in transit, AES-256 at rest, scoped access for staff, and 2FA on every internal tool. No system is unbreakable, but we keep the surface small and audit our vendors annually.

9. Changes to this policy

We’ll email you before any material change. The “last updated” date at the top of this page reflects the latest version, and old versions are kept for transparency.

10. Contact

Privacy questions go to privacy@remembr.co. For anything else, our contact page has the right inbox.