The Remae app

Privacy policy

Version 2026-10-07

On this page

This policy covers the Remae app. The website remae.ai has its own website privacy notice.

The short version

Remae is an AI, not a person. It keeps a memory of your life so it can be useful tomorrow, and it can be wrong — about the world and about you.

To do that, Remae sends what you write, what you show it and, while listening is on, what it hears to AI services run by other companies — in the United States, except that for speech-to-text the gateway OpenRouter picks the company (today also in the United States). All of them are named below, with what each one gets.

While listening is on, Remae hears everyone near you, not only you, and keeps the text. Telling the people around you is your job.

What Remae keeps stays until you delete it, apart from a few things that expire on their own (see “How long we keep it”). You can export most of it, or delete a single fact, a single overheard conversation or everything — from the app, at any time, without asking anyone.

We don’t sell your data, there are no ads, and nothing in Remae tracks you across other companies’ apps or websites.

Who is responsible

VxNeo Labs FlexCo, Wagramer Straße 81, Stiege 1, Top 203, 1220 Vienna, Austria, is responsible for your data in Remae — the “controller” under the EU’s General Data Protection Regulation (GDPR).

Write to contact@vxneolabs.com about anything in this policy. We have not appointed a data protection officer; that address reaches the people who run Remae.

This policy covers the Remae app for iPhone and iPad, the servers behind it, and the public web pages with this same text, so people who don’t use Remae can read it too. The page on our website, remae.ai, is hosted by Vercel: when you open it, Vercel sees your IP address, and our website privacy notice says what it keeps and how visits are counted. A plain-text copy is hosted by Supabase, which sees your IP address and keeps it in its server logs for at most 90 days; that copy loads nothing from anyone else.

The web page is at https://remae.ai/privacy.

Remae is an AI

Every reply, note, summary and notification Remae writes comes from an AI model. No person reads your chats to answer you.

AI makes mistakes. Remae can mishear, misread a photo, remember something wrong or say something untrue with confidence. Check anything that matters before you act on it, especially about health, money or the law.

Remae makes no decision about you that has legal or similarly significant effects. The AI does decide small things on its own — what to remember from what you say, which part of a transcript is yours, whether a new email is what a routine looks for — and you can see the results and delete them.

What leaves your phone

  • Chat — your message goes to an AI model, together with what Remae needs to answer: your first name, today’s tasks, recent memories (including recaps of conversations it overheard), facts it holds about you, your routines, a running summary of the chat, earlier messages, and anything it fetched from an app you connected.
  • Daily Memories — when you open Home, Remae may write you a short note on its own: in the morning, in the evening, or after you have finished a lot in a short time. For it, the AI model gets what Remae would use in chat — your first name, today’s tasks and how many you finished, tomorrow’s tasks in the evening, recent memories and the notes it left you, facts it holds about you, the summary of your latest chat and what you wrote there in the last day — with the time of day and, if you allow location, the weather from your widgets. Your calendar is not sent. A note is kept in Memory until you delete it, and for a week we keep which times of day Remae has already written for, so it does not write twice.
  • Photos and files — a photo goes to the AI model as an image, re-saved first without its location and camera details. From a PDF, Word or text file, Remae sends the text it reads; the file itself uploads unchanged, with any details stored inside it.
  • Listening and dictation — while listening is on, Remae records clips of about 30 seconds (in the background sometimes longer, up to 4 minutes); when you dictate, one clip of up to a minute. Clips that are silent, or recorded while another app on your phone was playing music or video almost the whole time, are dropped on your phone. The rest go to our server and straight on to a speech-to-text service — a TV or radio in the room included, which is labelled as media. We don’t store the audio, and the copy on your phone is deleted as it is sent.
  • What it heard — the text that comes back goes to AI models again: one labels which parts are yours; one picks out facts and tasks from your own words — it also reads what others said, as context, but is told not to learn from it; and one writes a recap when a conversation ends. The recap model gets the whole transcript, other people’s words included.
  • Search — your messages, what Remae heard (your own words when labelling works, the whole part when it fails), the facts it keeps, your routines’ instructions and what you search for are also turned into number patterns (“embeddings”) by an AI service, so Remae can find related memories.

Photos and files you attach in chat are uploaded to your account as soon as you attach them, before you send, and kept privately with your conversation. What you send goes to an AI model run by another company so Remae can answer, and the text Remae reads from a file is kept with the chat. One you remove before sending is deleted; one still unsent when you sign out or close the app stays until you delete everything, which deletes them all.

Your permission: Apple asks apps to get your explicit permission before they share personal data with third-party AI. Remae asks for it on its own screen, right after this policy, naming each AI service and what it gets; nothing goes to them before you allow it. Remae can’t answer without them, because every reply comes from them. You can turn them off at any time in Settings › Privacy › AI services: Remae then sends them nothing more, and can’t reply, listen or run routines until you turn them on again. That doesn’t undo what was already sent.

Listening and the people around you

Listening is off when Remae starts. It runs only after you turn it on, and then keeps running in the background until you pause or stop it. While it runs, iOS shows its microphone indicator, and on iPhone Remae shows a Live Activity on the Lock Screen.

It hears everyone nearby, and a TV or radio too. Remae keeps the text of all of it as your transcript. It tries to label each part as yours, someone else’s or media; other voices and media are labelled, not removed. When labelling fails, that part stays unlabelled, and Remae may learn facts and tasks from all of it.

Facts and tasks are meant to come only from your own words, and that labelling is good, not perfect. Facts learned from listening wait for you to confirm them before Remae uses them in chat. Remae is set up to leave anyone else’s health, beliefs, sex life or sexual orientation, political views, racial or ethnic origin, union membership or genetic data out of facts, notes and recaps — and yours too, unless you allowed it on the AI screen; the transcript itself keeps what was said. The labels come from the words alone: Remae makes no voiceprints and recognises no one by their voice.

Remae also notes whether a phone call was going on and for how long, which explains gaps in the transcript. It never learns who was on the call.

Telling people is your responsibility. Let the people around you know Remae is listening, and pause it if anyone objects. Don’t use it where people expect privacy — meetings, workplaces, schools, medical or therapy appointments — or on speakerphone calls. In many countries, including Austria and Germany, recording or listening in on other people’s private words without their consent can be a crime. Before you first turn listening on, Remae shows you this and asks you to confirm you understand.

You can delete a single fact, a single conversation, or a single moment of one. Under Memories › Timeline, a conversation’s Delete removes its transcript, its recap and the facts, notes and task suggestions learned from it (a task you already added stays); in an open transcript, each moment has its own. Settings › Privacy › Delete everything Remae knows removes them all at once.

Who receives your data

Supabase, OpenRouter and the hosts that run the AI models and speech-to-text behind it, Smithery, Arcade, Composio, ZeptoMail and Microsoft 365 (our mailbox) process your data for us, each under its data processing terms. Each of them is bound by a contract to protect your data at least as well as this policy does and as the law requires. Within that, their terms set how long they keep it; where we know more, it says so here or under “How long we keep it”. Apple, Google, Open-Meteo, the logo services, the apps you connect and connectors run by others are different. They receive your data as recipients in their own right, under their own terms, not as our processors. You choose the apps and connectors, and they receive what Remae sends them for you.

  • Supabase (Supabase Inc., USA) — hosts our database, sign-in, file storage and server code. Your account’s data is stored in its data centre in Ireland (AWS, eu-west-1). Our server code runs on its network, normally in the region nearest you.
  • OpenRouter (OpenRouter Inc., USA) — the gateway between Remae and every AI model below. It receives everything sent to them, including your first name. Remae doesn’t attach your email address or account ID to these requests, but your address can be part of what is sent — for example in an email or calendar entry from an app you connected.
  • AI models, through OpenRouter — today, DeepSeek V4.1 Flash (made by DeepSeek) writes replies, reads photos and files, picks out facts and runs routines; OpenAI’s GPT-6 Luna learns from listening and writes recaps; OpenAI’s gpt-oss-20b labels who is speaking; and OpenAI’s text-embedding-3-small makes the embeddings. When we change models, we update this list.
  • Who runs those models — Remae lets OpenRouter send a request only to hosting companies based in the United States, and there only to servers that keep nothing once they have answered and don’t learn from it (“zero data retention”): Microsoft Azure, Amazon Web Services, Google Cloud, DeepInfra, Together AI, Fireworks AI, Baseten, Parasail, CoreWeave and Groq. Today DeepSeek V4.1 Flash runs at DeepInfra, Together AI, Fireworks AI, Baseten, Parasail or CoreWeave; gpt-oss-20b at DeepInfra, Parasail, CoreWeave, Amazon Web Services, Google Cloud or Groq; GPT-6 Luna and text-embedding-3-small at Microsoft Azure.
  • Speech-to-text, through OpenRouter — NVIDIA’s Nemotron model, or OpenAI’s Whisper when that fails. OpenRouter picks the company that runs it (today DeepInfra or Groq, in the United States); unlike for the models above, Remae can’t restrict that choice. These services receive your audio clips and, if you have set only one spoken language, the text of the clip before (up to 150 words, other voices included).
  • Smithery (part of Arcade.dev, USA) — connects the apps you add as Sparks and holds the sign-ins for them. It receives your Remae account ID, every request Remae makes to a connected app and what the app sends back, and the address of any connector you added yourself in an earlier version of Remae.
  • Arcade (Arcade.dev, USA; Smithery is part of it) — runs the connection behind Gmail, Google Calendar, Google Drive, Google Sheets, Slack and Outlook, and holds the access you allow.
  • Composio (Composio Inc., USA) — Todoist, Trello, YouTube and Zoom connect through Smithery with toolkits made by Composio, which may run those connections and hold the access you allow them.
  • The apps you connect — Google, Microsoft, Slack, GitHub, Notion and the others you choose — receive Remae’s requests, and anything Remae writes or sends there for you.
  • Connectors run by others — a connector you added in an earlier version of Remae, by its address or from search, that isn’t one of Remae’s own apps runs on its developer’s server, not ours. It keeps working until you disconnect it; Remae no longer adds new ones. That developer receives what Remae sends it — your request, and whatever from your chat it needs — and their own terms decide what they keep. Remae asks you before every call to one.
  • Apple — Sign in with Apple, if you use it, and notifications: the text of each one (up to 180 characters of Remae’s message) passes through Apple’s push service.
  • Google — Sign in with Google, if you use it. When you use Continue with Google, Google’s sign-in code in the app can also send Google usage and device information, such as identifiers for your device and your Google account, for Google’s own analytics.
  • Our email provider, ZeptoMail by Zoho (Zoho Corporation B.V., Netherlands) — sends your sign-in codes for our sign-in system from Zoho’s data centre in the EU, so it receives your email address and the code.
  • Our mailbox, Microsoft 365 (Microsoft Corporation, USA) — holds the email sent to contact@vxneolabs.com, so it receives whatever you write to us, including a reply from Remae that you report from the app.
  • Open-Meteo (OpenMeteo GmbH, Switzerland) — the weather. Your phone sends it your location and IP address; a weather routine sends it the place you name, from our server.
  • Logo services — the app loads app logos from Smithery, Composio’s logo service and the jsDelivr network, which see your phone’s IP address.

We give your data to no one else, unless the law obliges us to — for example, a court order.

Data outside the EU

Your account’s data is stored in Ireland, but Supabase is a US company, and so is Microsoft, which holds our mailbox; OpenRouter, the AI hosts, the speech-to-text services, Smithery, Arcade, Composio, Apple, Google and the logo services (jsDelivr among them) process data in the United States. Most of the apps you connect are US companies too — Google, Microsoft, Slack, GitHub, Notion, Stripe, HubSpot, Linear and Airtable among them.

For the United States we rely on the EU–U.S. Data Privacy Framework for each company certified under it, and otherwise on the European Commission’s standard contractual clauses where the company’s data processing terms include them. Switzerland, where Open-Meteo is based, has an EU adequacy decision. Write to us for a copy of the safeguards that apply.

Connectors run by others can be in any country, including countries without an EU adequacy decision, and we have no contract with their developers. Data goes only to one you added in an earlier version of Remae and haven’t disconnected, and Remae asks you before every call.

Apps you connect

If you connect a Spark — a mailbox, a calendar, a task list — Remae reads from it when you ask, or when one of your routines checks it, and only while it is connected.

Remae can also act there for you — send, reply to or forward an email, save a draft, add an event. Before it writes or sends anything, it asks you, every time.

A routine you turn on keeps checking, even while Remae is closed: new email in Gmail within a few minutes, or Remae’s own apps and the weather on the schedule you set. The AI model reads each new email’s sender, subject and preview, and the whole email when it looks relevant. Pause or delete the routine and that stops.

What a routine finds — for an email, its sender, subject and a short quote — is kept until you delete the routine or everything. Deleting a routine removes what its checks found; tasks and notes it already gave you stay.

Disconnecting a Spark in Settings ends Remae’s access through Smithery straight away. For the apps Arcade connects — Gmail, Google Calendar, Google Drive, Google Sheets, Slack and Outlook — the access you gave Arcade can outlast that: remove it under third-party connections in your Google Account, under installed apps in Slack, or under app permissions in your Microsoft account. What Remae already learned from an app stays until you delete it.

What we keep, and why

  • Your account — your email address; the first name you gave, if you gave one; the name Apple or Google passes on when you sign in with them; if you sign in with Apple, a sign-in token from Apple, kept only so that deleting your account can revoke it; your settings; and when you agreed to this policy and confirmed you are 16 or older, allowed AI services and, if you did, sensitive information, and acknowledged the listening notice. To run your account, call you by name and show what you agreed to.
  • Chats — your messages and Remae’s replies, the photos and files you attached, and a record of each reply’s steps: what Remae looked up, what it found (including emails and calendar entries from connected apps) and the text it read from your files. To carry on the conversation and show what Remae did.
  • Listening — transcripts with their speaker labels, conversation recaps, and recording details: which microphone or headset was used, whether media was playing or a call was going on, why recording was interrupted, and your iOS version. To remember what was said, and to explain gaps and errors.
  • Memory — facts about you, each with the short quote it came from (up to 200 characters of what was said); timeline memories, including the notes Remae leaves you on Home; and suggested tasks, which can quote up to 300 characters of what was heard or of an email. This is what makes Remae useful tomorrow.
  • Tasks and routines — your tasks and their steps, your routines, and what each routine check found.
  • Your devices — each phone’s push address, language and when it last checked in; the time zone and language your routines run in; and, for each sign-in, the IP address and device type, which our sign-in system records. To deliver notifications, run routines at the right time and keep your account secure.
  • Server logs — technical records of what ran, when, and what failed: account and item IDs, model names, timings and short error messages, and for each sign-in your email address and IP address. We keep transcripts and AI replies out of them, but an error message can occasionally repeat a title. To find and fix problems and keep Remae secure.
  • Usage and account controls — how much of Remae you use: for each request to an AI or speech-to-text service, the feature, the model, the number of tokens, the cost and the length of audio, never what was said or written. And your account’s status and daily limits, with a record of any change our staff make and why. To run Remae fairly, keep it from being abused, set daily limits and pay for the services it uses.

To create your account, Remae needs only your email address. A first name is optional; without one, Remae greets you without it. Everything else is up to you — but without the microphone there is no listening, without a connected app Remae can’t read it, and so on.

How long we keep it

  • Until you delete it — your account, chats, transcripts, memories, facts, tasks, routines and what they found, attachments, and the record of each reply. None of these expires on its own.
  • Suggested tasks — removed once they run out: a day after they are suggested if you don’t act on them (a dated one the day after it is due; one a routine holds, after 14 days), and a week after you accept or dismiss them. A task you accepted stays as your own.
  • A fact you forget — gone within about 15 minutes (you have 10 to undo it), with the older versions it replaced and the chat summaries that could mention it. The chat or transcript it came from stays.
  • Audio — we never store it. The speech-to-text services handle it under their own terms.
  • Push addresses — until you sign out or delete your account. One record outlasts both on purpose: each phone’s push address, paired with a fingerprint of a random code that phone made, so that no other account can take over your phone’s notifications. It holds no account, name or content — only that push address and the fingerprint — and it is deleted once the phone hasn’t registered for notifications for 12 months.
  • Server logs — deleted automatically by Supabase after a short time, at most 90 days.
  • Backups — Supabase’s backups of our database can hold deleted data until they expire, at most 30 days later.
  • Usage records — 13 months, then deleted. The record of staff changes to your account stays as long as your account does.
  • Emails to us — an email you send to contact@vxneolabs.com, including a report from the app with the reply it quotes, stays in our mailbox for as long as we need it to answer you and deal with what you raised.
  • Everyone else — what OpenRouter, the speech-to-text services, Smithery, Arcade, Composio, ZeptoMail, the apps you connect and connectors run by others keep is set by their own terms and settings; for the companies that process your data for us, within the contract that binds them (see “Who receives your data”). The hosts that run the AI models Remae uses keep nothing once they have answered — except the speech-to-text services, whose host OpenRouter picks and whose own terms decide, within OpenRouter’s data processing terms.

Deleting

Settings › Privacy › Delete everything Remae knows removes your chats, transcripts, listening sessions, memories, facts, tasks, routines and what they found, attachments and the record of each reply from our servers, and ends every connection Smithery holds for your apps (what Arcade holds: see “Apps you connect”).

It is immediate and it cannot be undone. There is no thirty-day grace period and no copy kept “for your convenience”. It leaves your account itself: your email address, the name Apple or Google gave us, the Apple sign-in token if you have one, when you agreed to this policy and answered each permission, your notification setting, your phones’ push addresses and the time you deleted everything.

Settings › Privacy › Delete my account deletes the account itself and everything in it, ends every connection Smithery holds for your apps, and removes your files. A short note — your account ID and any app Remae could not yet disconnect — stays for at least a day while it keeps trying.

Neither one reaches backups until they expire, server logs until they are deleted, the push-address record above, copies the companies above keep under their own terms, exports you saved, or Remae’s widgets and reminders on another phone that is still signed in, until it signs out.

If you signed in with Apple, deleting your account also asks Apple to remove Remae from Sign in with Apple. If Remae is still listed there afterwards, remove it in iOS Settings, under your name, in Sign in with Apple. Deleting your account doesn’t remove Remae from your Google Account, and access you gave Arcade for Gmail, Google Calendar, Google Drive, Google Sheets, Slack or Outlook stays until you remove it there: under third-party connections in your Google Account, under installed apps in Slack, and under app permissions in your Microsoft account.

Location and weather

If you allow location, the app gets your position from iOS when you open Remae and sends it, rounded to about a kilometre and with your phone’s IP address, straight to Open-Meteo for the local weather in your widgets. We never receive your position, and it isn’t stored. For Daily Memories the app sends us only the weather Open-Meteo returned — the temperature, the sky and when rain is likely — never where you are.

A weather routine stores the place you name, with its coordinates, and looks up its weather at Open-Meteo from our server.

Notifications

When a routine finds something or Remae writes to you, up to 180 characters of it reach you as a notification through Apple’s push service — so its text, such as who a bill is from and when it is due, passes through Apple. Turn them off in Settings › Notifications from Remae, or in iOS Settings.

Task reminders are scheduled on your phone, with the task’s title as their text. They never leave your device.

If you turn on News and offers in Settings, Remae also sends you occasional notifications about new features and offers — at most one a week. It is off unless you turn it on, and you can turn it off there at any time; we keep when you changed it. Notices about Remae itself, such as maintenance, reach everyone who allows Remae’s notifications.

What stays on your phone

Remae keeps your sign-in in the app’s own storage, and shares the current access key with its widgets through the iOS Keychain so they can tick off tasks.

For the widgets, your first name, up to 12 task titles, your routines’ names and the weather are stored where they can read them, and can appear on your Home Screen and Lock Screen. The listening Live Activity shows only its timer and status, never what was said.

If you connect your calendar, Remae reads the events on your iPhone — from every calendar on it, including accounts like Google or iCloud added in iOS Settings — to show them on Home and in its calendar. They are read on your phone and kept only in memory while the app is open. They are never sent to our server, to an AI model or to anyone else, and Remae never adds, changes or deletes an event. Remove it in Settings › Connected calendars, or turn off calendar access in iOS Settings.

The app also keeps your language and a few preferences. Signing out clears the widgets’ data and your reminders. Deleting the app removes the rest, apart from what iOS keeps in the Keychain after an app is deleted: a random install code for notifications and, if you were still signed in, the widgets’ copy of your access key, which expires on its own and is erased when you install and open Remae again.

An export is written to the app’s temporary folder before you share it; iOS empties that folder from time to time.

Remae has no advertising or crash-reporting code from other companies. The one piece of another company’s code in it that reports on use is Google’s sign-in: when you use Continue with Google, it can send usage and device information to Google for Google’s own analytics. If you choose in iOS to share analytics with app developers, Apple passes Remae’s crash reports on to us.

Permissions

Remae asks iOS for the microphone (listening and dictation), notifications, location (weather), your calendar (your events on Home and in its calendar), and the camera and photos (attachments) — each only when you choose to allow it, with a reason you see first. None of them is required, and each can be turned off in iOS Settings without uninstalling Remae.

Turn one off and that feature stops; nothing else breaks. It does not erase what Remae already has: turning off the microphone stops new listening, but what was heard and learned stays until you use Settings › Privacy › Delete everything Remae knows.

  • Our contract with you (Art. 6(1)(b) GDPR) — your account, chat, memory, tasks, routines, connected apps, notifications, weather, export and deletion, and sending what they need to the companies above, the AI services included. That is the service you signed up for. The permission for AI services that Remae asks for on its own screen is the one Apple requires; the legal basis for that processing stays this contract, and turning the permission off stops it.
  • Your consent (Art. 6(1)(a)) — for listening. You give it by turning listening on, after Remae has shown you what it hears and what you owe the people around you and you have confirmed it; you withdraw it by turning listening off.
  • Your explicit consent (Art. 9(2)(a)) — for keeping sensitive things about you in facts, notes and recaps, such as your health, beliefs, sex life or sexual orientation, political views, racial or ethnic origin, union membership or genetic data, that you tell Remae or that it hears. You give it with its own box on the AI screen, which stays unticked unless you tick it; without it, Remae is set up to leave them out of facts, notes and recaps. Either way, your chats and transcripts keep what was said, sensitive things included, until you delete them. You withdraw it in Settings › Privacy › Sensitive information; what Remae already keeps stays until you forget it or delete it.
  • Legitimate interests (Art. 6(1)(f)) — other people’s words that listening picks up, and people who appear in your chats or emails: your interest, and ours, in a memory assistant that works in real life. We limit it by labelling their words, not learning from them on purpose, leaving their health, beliefs, sex life or sexual orientation, political views, racial or ethnic origin, union membership and genetic data out of facts, notes and recaps, and deleting them when you or they ask — down to a single overheard conversation. Those limits don’t reach the transcript: it keeps their words as they were said, sensitive things included, until you delete it.
  • Legitimate interests (Art. 6(1)(f)) — server logs, sign-in records and the push-address record: our interest in keeping Remae secure and working.
  • A legal obligation (Art. 6(1)(c) with Art. 7(1)) — keeping a record of when you last agreed to this policy, when you last changed each permission on the AI screen or in Settings › Privacy, and when you confirmed the listening notice, to be able to show it.

Your rights

Under the GDPR you have these rights:

  • Access and a copy — Settings › Privacy › Export my memories gives you most of what we hold as a file. For the rest — your profile, settings, devices, attachments, sign-in records and the record of each reply — write to us.
  • Correction — forget a wrong fact, tell Remae in chat, or edit a task; for anything else, such as your name, write to us.
  • Erasure — Delete everything Remae knows, or Delete my account, or ask us to delete something specific.
  • Restriction — pause listening, disconnect apps, or ask us to stop using some of your data while a question about it is settled.
  • Portability — the export is a machine-readable JSON file you can take elsewhere.
  • Withdrawing consent — at any time, as easily as you gave it: turn listening off, or turn sensitive information off in Settings › Privacy. What happened before stays lawful. Turning AI services off there isn’t withdrawing a consent, because that processing rests on our contract, but it stops Remae sending anything more to them. You can also forget facts, delete a single overheard conversation, delete everything or delete your account.

Your right to object: where we rely on legitimate interests — other people’s words in transcripts, people who appear in your data, server logs — you can object at any time, on grounds relating to your situation. We then stop, unless we have compelling legitimate grounds or need the data for legal claims.

Write to contact@vxneolabs.com. We answer within one month; if a request is complex, we may take up to two more months and will tell you why. We may ask you to confirm that the account is yours.

You can also complain to a data protection authority. Ours is the Austrian Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at. You can also turn to the authority where you live or work.

If you don’t use Remae

Remae may hold your words because someone near you had listening on, or your name, email address or messages because someone who uses Remae talked about you or connected a mailbox. We don’t know who you are unless you tell us.

You have the same rights. Write to contact@vxneolabs.com with what you can tell us — when and where, or whose Remae it was — and we will find and delete what we can, or ask that person to; they can delete a single conversation, or a single moment of one, themselves.

What we don’t do

We don’t sell your data, share it with advertisers or use it for advertising, and we don’t track you across other companies’ apps or websites.

We don’t train AI models on your data, and the hosts that run the AI models Remae uses may neither keep it nor train on it: Remae lets OpenRouter use only hosts that keep nothing once they have answered. Speech-to-text is the exception: there OpenRouter picks the host itself. OpenRouter’s data processing terms bind that host, and within them the host’s own terms decide what it keeps.

People at VxNeo Labs look at your data only to fix a problem, keep Remae secure, answer a request from you, or when the law requires it.

Our staff can pause an account, limit how much it can use, or close it, to keep Remae safe and fair — for example after abuse or very heavy use. Every such change is logged with who made it and why, and the app tells you when your account is paused or a limit is reached. These tools show usage counts and costs, not your chats, memories or transcripts.

Security

Data travels encrypted and is stored encrypted. Each account’s data is locked to it at the database level, so another user can’t read yours even by accident, and attachments sit in private storage that only your account can open.

You sign in with a one-time code, with Apple or with Google; Remae never has a password of yours. Audio is never stored on our servers.

No system is perfect. If a breach puts your data at risk, we will tell you and the authority as the law requires.

Children

Remae is for people aged 16 and over, and you confirm that you are when you agree to this policy. If you are younger, please don’t use it. Remae doesn’t ask for your age. If we learn that someone under 16 has an account, we will delete it.

Changes and contact

If this changes in a way that affects what we do with your data, Remae will ask you again rather than quietly updating a page you already agreed to.

Questions, or a request about your data: contact@vxneolabs.com · VxNeo Labs FlexCo, Wagramer Straße 81, Stiege 1, Top 203, 1220 Vienna, Austria. Help and answers to common questions: https://remae.ai/support.

Imprint

VxNeo Labs FlexCo · Wagramer Straße 81, Stiege 1, Top 203, 1220 Vienna, Austria · contact@vxneolabs.com

Legal form and company register: FlexCo · FN 681201 t · Handelsgericht Wien