Remilo

REMILO / LEGAL

Privacy Policy

Last updated: October 12, 2026

Remilo provides personal notes, saved places, and the account and online features available in your version of the app. This policy explains how Remilo ("we," "us," or "our") handles personal information when you use our app, visit our support website, or contact us.

Contact: remiloapp@support.com

1. Information we handle

Account and profile information. For email sign-in, we receive your email address and the credentials needed to authenticate you. The same entry creates an account for a new user or signs in an existing user. With Sign in with Apple, we receive Apple's account identifier, authentication information, and any name or email address Apple shares with us. If you use Hide My Email, this may be an Apple relay address. Profile information may include your nickname, birthday, gender, and an optional avatar. Whether a profile field can be skipped depends on the available sign-in flow.

Personal library. Notes, optional links between notes and places, saved place names and addresses, coordinates, Want to go or Visited status, attached photos, and creation or update times are stored in an account-specific library on your device. These libraries are not automatically synchronized to a Remilo cloud library. Your operating-system backup may include local app files depending on your Apple settings. Uploads, online features, and exports are handled separately as described below.

Location and selected media. With permission, Remilo can use your location while you use a location feature, such as showing your position or finding a nearby place. Saved places can contain precise coordinates even if you enter or select the place yourself. Remilo does not request background location access for its personal place tools. Map, search, and address services may receive location or search information needed to respond. Camera access is used when you choose to take a photo. The system photo picker lets you choose individual items without granting access to your whole library. Additional Photos permission is requested separately when a feature needs it. Selected media may contain image metadata; review what you choose to share.

Device and connection information. Account and online requests can include an installation identifier, IP address, device model, operating-system and app versions, time zone or UTC offset, request identifiers, and authentication tokens. The installation identifier is stored in Apple's Keychain where available and may survive an app uninstall; a local fallback is used if Keychain storage fails. This identifier does not mean that local notes have been uploaded or can be recovered.

Notifications and measurement. Where configured, we process a push notification token to deliver notifications. Analytics and campaign measurement services may process app interactions, installation and campaign information, referral or deep-link information, device or SDK identifiers, IP addresses, and related technical information. Advertising identifiers and tracking that requires Apple's App Tracking Transparency permission are used only when that permission is granted. Denying tracking permission does not necessarily stop all non-tracking operational or analytics processing. Providers are described in Section 4.

Support. We receive your email address, message, and any attachments or other information you send us. Do not send passwords, authentication tokens, full payment details, or private notes unnecessary to your request.

Website requests. Our support and policy website is hosted on Cloudflare. Cloudflare processes connection and request information, such as IP address, browser information, requested pages, and timestamps, to deliver and protect the website. The website itself does not embed advertising or analytics scripts. Cloudflare may process additional information for its infrastructure and security services under its own privacy policy.

2. How we use information

We use information to:

  • Create and authenticate accounts, maintain sessions, and provide profile features.
  • Save, display, search, and organize personal notes, places, and selected photos.
  • Provide maps, location tools, uploads, and online features you choose to use.
  • Deliver notifications when enabled and handle supported notification actions.
  • Maintain security, prevent abuse, diagnose problems, and operate the service.
  • Respond to support and privacy requests and meet legal obligations.
  • Understand app usage and measure installation campaigns where measurement services are enabled, subject to applicable permissions and law.

We do not use the contents of your private local notes, saved place library, or attached local photos for advertising targeting, or provide those libraries to advertising providers for that purpose.

Where a legal basis is required, we rely on performance of our agreement with you for requested services; our legitimate interests in operating, securing, and improving the service where those interests are not overridden by your rights; compliance with legal obligations; and consent where required, including certain permission-based uses and tracking. Withdrawing consent does not affect processing that was lawful before withdrawal.

3. Local storage, exports, and online features

The personal library is separated by account on the device. Signing out keeps that account's local library on the device but hides it from the signed-out view and other accounts. Signing back into the same account on that device can make it available again. Signing in on another device does not automatically transfer it. Uninstalling the app or losing the device may remove local information that has not been separately backed up.

Where Backup is available, it exports a ZIP file that is not encrypted by Remilo. The export is a separate copy that may contain private content, and is not an automatic cloud backup. Remilo currently does not provide in-app restore or import. Files saved to Files, iCloud Drive, another app, or a recipient are handled according to that destination's settings and policies. Deleting an account or a note in Remilo does not delete exported or shared copies.

Account information and avatar uploads are handled by our servers and service providers. Embedded online features can process account, device, session, and other information needed for those features, including information you submit and location or media you choose to provide. These features may use cookies or similar web storage to maintain sessions. Information submitted to an online feature is separate from the local personal library.

Maps, links, payment pages, and other external services may be operated by third parties. Their policies apply to information they collect directly. Review the destination before sharing information.

4. How information is shared

We share information with providers as needed to operate the relevant feature, including hosting, authentication, file delivery, notifications, support, and measurement. Depending on the services configured in a release, providers may include:

A listed provider is not necessarily enabled in every version. Measurement providers do not need access to your private local note or place library to perform the measurement described here.

We may also disclose information when you direct us to do so; to comply with applicable law or a valid legal request; to protect rights, safety, or security; or as part of a merger, acquisition, or transfer of the service, subject to applicable privacy protections.

We do not sell your private note or place library. Certain disclosures of device identifiers or app events for advertising measurement may qualify as a "sale," "sharing," or targeted advertising under some privacy laws even when no money is exchanged. Where applicable, request an opt-out at remiloapp@support.com. Apple's tracking setting controls tracking covered by that permission; it is not a universal control for every form of processing.

5. Retention and account deletion

Local library information remains on your device until deleted through available features, the account's local data is removed, or app storage is removed. Successful account deletion through the app's deletion flow also removes that account's local library on the device performing the deletion. It cannot remotely remove exports or copies on other devices.

We keep server-side account, upload, support, security, and measurement information only as long as reasonably needed for the purposes in this policy, including operating your account, resolving requests, preventing abuse, and meeting legal obligations. The period depends on the type of information, the service involved, and legal requirements. After a verified deletion request, information no longer needed for an allowed purpose is deleted or de-identified. Limited records may be retained where required by law or necessary for security or legal claims. Provider backups may take additional time to expire under their retention processes.

Use Delete account in the app where available, or email remiloapp@support.com to request deletion. We may ask for limited information to verify ownership. Signing out, revoking a permission, or uninstalling Remilo does not by itself delete your server-side account. We cannot access an unshared local library to supply a replacement copy.

6. Your choices and rights

Review location, camera, Photos, notification, and tracking permissions in iOS Settings. Turning off a permission may limit the corresponding feature. You can choose not to add an avatar, avoid optional uploads, and delete local information using features available in your app version.

Depending on your location and applicable law, you may have rights to access or obtain a copy of personal information; correct or delete it; restrict or object to processing; withdraw consent; request portability; opt out of sale, sharing, or targeted advertising; and limit certain uses of sensitive information. You may also have the right to use an authorized agent, appeal a decision where required, or complain to your local privacy regulator. We will not unlawfully discriminate against you for exercising your rights.

Send requests to remiloapp@support.com. We respond within the periods required by applicable law and may verify your identity or an agent's authority before acting. Explain your request without including your password. Local-only content may need to be accessed or deleted on the device holding it.

7. Security and international processing

We use reasonable technical and organizational measures intended to protect personal information. No storage or transmission method is completely secure. This policy does not promise end-to-end encryption, encryption of local libraries, or encryption of exported ZIP files. Protect your device and review the recipients and storage destinations you choose.

Providers may process information outside your state, province, or country, where privacy laws may differ. Where applicable law requires protections for an international transfer, those requirements apply. Contact us for information about the handling of your personal information.

8. Adults only

Remilo is intended for people who are at least 18 years old and have reached the age required to use the service where they live. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information, contact remiloapp@support.com so we can investigate and take appropriate action.

9. Changes and contact

We may update this policy as the service changes. The date above identifies the latest version. We will provide additional notice of material changes and obtain consent when required by law.

For privacy questions or requests, contact Remilo at remiloapp@support.com.