Privacy Policy

1. Introduction

RemindFly ("we," "our," or "us") operates Wopsi, an AI-powered reminders application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

By using Wopsi, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not download, register with, or use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign in using Google or Apple, we receive your name, email address, and profile picture from the authentication provider.
• Reminder Content: Text, voice recordings, and images you provide when creating reminders. Voice recordings and text are processed in real-time and are NOT stored - only the resulting reminder data is saved.
• Photo Attachments: Images you attach to reminders are securely stored to display within your reminders.
• Family and Sharing Information: If you create or join a family, we store the family name, your role in it, the display name you choose to show other members, and any private nickname you set for another member. When you invite someone by email, we store a one-way cryptographic hash of that address to match the invite - not the address itself. When you send a reminder to another person, we store the link between the original reminder and the copy so both sides stay in step.
• Payment Information: Subscription payments are processed by Apple App Store, Google Play Store, or Stripe. We do not store your credit card details.

2.2 Information Collected Automatically

• Location Data: With your permission, we collect location data to enable location-based reminders (geofencing). Location tracking occurs only on your device - our servers do not continuously track your physical location. If you share a place with your family, the name and coordinates of that place become visible to the members of that family. Your own position is never shared: other members see the place, never where you are.
• Device Information: Device type, operating system version, and app version.
• Usage Analytics: We collect app usage data linked to your account to improve our Service, including:
  • App usage events (opens, closes, session duration)
  • Feature usage patterns (reminders created/completed, places saved)
  • Permission grant/deny actions and onboarding completion
  • Subscription status and payment provider (not payment details)
  • Technical context (platform, OS version, app version)
  • Performance metrics (request latency)

  This data does NOT include reminder content, saved places, or location coordinates. See "Data Retention" for how this data is handled when you delete your account.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your voice and text inputs to create reminders using AI
• Deliver location-based reminder notifications
• Process subscription payments and manage your account
• Send you service-related notifications and updates
• Monitor and analyze usage patterns to enhance user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service (account management, reminders, notifications)
• Legitimate Interest: Processing usage analytics to improve our Service (Art. 6(1)(f) GDPR). You may object to this processing by deleting your account
• Consent: Processing location data and voice recordings, which you provide through explicit permission grants

Data Sharing

We do not sell, rent, or share your personal data with third parties for advertising or tracking purposes. Analytics are used solely for internal product improvement. We only share data with third-party service providers as necessary to operate the Service (see "Third-Party Services" section).

Separately from the above, the Service lets you deliberately share content with other Wopsi users - by adding them to your family, or by sending a reminder directly to someone. That sharing happens only when you ask for it, and only with the people you pick. It is described in full in "Family Sharing and Sharing With Others" below.

4. AI Processing and Data Handling

Wopsi uses Google's Gemini API (paid service) to process your voice recordings and text inputs to understand and create reminders. Here's how this works:

• One-Time Processing: Your voice recordings and text messages are sent to Gemini for processing only once, in real-time.
• No Raw Data Storage: We do NOT store your original audio recordings or the exact text of your messages. Only the processed reminder results (title, time, location, etc.) are encrypted and saved.
• No Model Training: We use Gemini's paid API service. Per Google's Paid Services Terms, your prompts and responses are not used to improve Google's products or train AI models.

5. Data Security

We implement industry-leading security measures to protect your data:

• Encryption at Rest: All personal data, including reminder content, PII, and location data, is encrypted in our database using per-user Data Encryption Keys (DEK) managed by a secure key management service. Content you share with a family is encrypted under a separate key belonging to that family, so that its members - and only its members - can be served it. When someone joins or leaves, that content is re-encrypted under the updated key.
• Encryption in Transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption.
• Secure Storage: Photo attachments are stored with server-side encryption enabled.
• Access Controls: Encryption keys are held in a managed key service and are never exposed to other users or to the public internet. Every request is checked against your account and, for shared content, against your role in the family it belongs to.
• How Your Keys Are Used: Your content is encrypted in transit and at rest, under a key scoped either to you or to the family you shared it with. Wopsi holds those keys in a managed key service so that the Service can do its job - deliver a notification at the right moment, serve a shared reminder to the family it belongs to, and carry out the requests you make. Beyond those operations, access is limited to a small number of authorised personnel, and only where strictly necessary for support, security, or legal compliance. We do not read your reminders for any other purpose, we never use them for advertising, and we never sell them.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Family Sharing and Sharing With Others

Wopsi lets you share with other people on purpose. Nothing described in this section happens automatically - it happens only when you choose to share.

6.1 Families

You can create a family of up to six people, or join one you are invited to by QR code or email. An invite always requires the invited person to accept, and an email invite additionally requires an owner or adult to approve the join.

Members of a family can see: the family name, each member's display name and profile picture, and any reminder, place, or photo attachment that has been shared into that family - including who completed a shared reminder and when. Members cannot see your private reminders, your private places, or your location.

Each family has an owner - the person who created it - who can invite and remove members, and who must transfer ownership before leaving. Everyone else joins as a member, and members can see, add, edit and complete anything shared into the family, and invite others. What each person may do is enforced on our servers, not only in the app.

6.2 Sending a reminder to one person

You can send a reminder directly to another person without a family. When you do, that person receives a copy containing the reminder's title, notes, timing, location, and any photos you attached. They see your display name as the sender. They cannot see anything else in your account.

6.3 Share links

You can also create a link to a reminder and pass it on outside the app. Anyone holding that link can claim a copy of that reminder until the link is revoked or expires, so treat a share link as you would any other link that grants access. You can revoke a link at any time from the app.

6.4 Sharing is not undoing

Once someone holds a copy of something you sent them, it is theirs. Leaving a family, revoking a link, or deleting your own reminder removes your content from the shared context going forward, but it cannot reach into another person's device or recall a copy they already received. Please share accordingly.

7. Third-Party Services

We use the following third-party services that may collect information:

• Google Sign-In / Apple Sign-In: For authentication. Subject to Google's Privacy Policy and Apple's Privacy Policy.
• Google Gemini API: For processing voice and text inputs. Subject to Gemini API Terms of Service. As a paid API user, your data is not used to train models.
• Firebase (Google): For push notifications and crash reporting. Subject to Firebase Privacy Policy. Note: We use our own first-party analytics system for usage tracking, not Firebase Analytics.
• Stripe: For payment processing. Subject to Stripe's Privacy Policy.
• Cloudflare: For security and performance. Subject to Cloudflare's Privacy Policy.
• App Store / Google Play: For app distribution and in-app purchases. Subject to their respective privacy policies.

8. Data Retention

We retain your data as follows:

• Account Data: Retained while your account is active and for 30 days after account deletion.
• Reminder Data: Active reminders are retained until completed or deleted. Completed or triggered reminders, including attachments, are automatically deleted after 30 days.
• Shared Content: A reminder or place you shared into a family is retained for as long as that family holds it. If you leave a family, or the family is dissolved, content you contributed is returned to you and removed from the other members. A copy someone already received through a direct send or a share link belongs to their account and follows their retention, not yours.
• Voice/Text Inputs: NOT retained - processed in real-time and immediately discarded.
• Analytics Data: Usage analytics linked to your account are retained for up to 2 years for service improvement purposes, then automatically deleted. When you delete your account, your analytics data is anonymized (the user identifier is permanently removed) rather than deleted, allowing us to retain aggregate statistics. Anonymized data cannot be linked back to you.

9. Your Rights and Choices

9.1 Access and Portability

You can request a copy of your personal data by contacting us at [email protected].

9.2 Deletion

You can delete your account at any time through the app settings. Upon deletion:

• Your account will be deactivated immediately
• Your personal information (account data, reminders, places, attachments) will be permanently deleted within 30 days
• Historical analytics events will be anonymized (user identifier removed) rather than deleted - anonymized data contributes to aggregate statistics but cannot be linked back to you
• If you own a family, its shared content is handed back to the members who contributed it before the family is closed - deleting your account does not delete other people's reminders
• Copies that other people already received from you remain in their accounts
• This action cannot be undone

9.3 Permissions

Wopsi requests the following permissions, each explained during app onboarding. You can manage these through your device settings at any time:

• Location: Required for location-based reminders (geofencing). We offer "While Using" or "Always" options - background location is needed for reminders to trigger when you arrive at/leave locations.
• Microphone: Required for voice input when creating reminders. Used only while you're actively recording - we cannot access your microphone without your action.
• Camera: Optional, for attaching photos to reminders. Used only when you choose to take a photo.
• Notifications: Required to deliver your reminders at the scheduled time or location.
• Battery Optimization (Android only): We may request you disable battery optimization for Wopsi to ensure location-based reminders work reliably in the background.

Disabling permissions may limit app functionality. All permissions are controlled by your device's operating system.

9.4 California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it's used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do NOT sell your data)
• Non-discrimination for exercising your privacy rights

10. Children's Privacy

Wopsi is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will delete such information.

Family sharing does not change this. Every member of a family signs in with their own account and must meet the same minimum age. Do not create an account on behalf of a child under 13, and do not invite one into your family.

Members of a family can see each other's display name and profile picture, along with any content shared into the family and who completed it. Wopsi does not report a member's location to other members.

11. International Users

Wopsi is operated from the United States and is intended for users in the United States. The Service is not available in certain restricted regions including, but not limited to, North Korea, Russia, Iran, Syria, and Cuba. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the app and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: