Privacy Policy · Remina

# Privacy Policy — Remina **Effective Date:** 28-08-2026 **Last Updated:** 28-08-2026 This Privacy Policy explains how [Company/Proprietor Legal Name] ("**Company**," "**we**," "**us**," "**our**") collects, uses, stores, shares, and protects information in connection with the Remina application, including its mobile, web, and related services (the "**App**"). It is intended to comply with the Digital Personal Data Protection Act, 2023 ("**DPDP Act**"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable. > ⚠️ **Fill before publishing**: Company/proprietor legal name, registered address, Grievance/Data Protection contact, effective date. Have this reviewed by a lawyer licensed in India before publishing — the DPDP Act's implementing rules are still being finalized as of this drafting, and specific compliance obligations (e.g., Consent Manager requirements, breach notification timelines) may need updating. --- ## 1. Information We Collect ### 1.1 Account information - **Username** you choose (no email address or phone number is collected or required for account creation) - **PIN** — stored only in irreversibly hashed form; we cannot view or recover your actual PIN - **Recovery code** — generated and shown to you once at registration; we do not retain a readable copy after issuance beyond what is technically necessary to verify it during a recovery attempt (stored hashed) - **Trusted device identifiers** — device fingerprint/token, device name, and last-active timestamp, used solely to enable silent login on devices you have approved ### 1.2 Reminder data ("User Content") - Reminder titles, descriptions, categories, due dates, schedules, and repeat rules you create - Custom field values you enter, which depending on the category you choose **may include financial or identifying information** such as policy numbers, provider names, consumer numbers, premium amounts, or vehicle registration numbers - Edit history, snooze history, and notification delivery history associated with your reminders ### 1.3 Information you provide to AI features When you use the "Describe Reminder" (AI) feature, the free-text description you type, and the fields it extracts/suggests, are processed to generate a reminder. This processed text and its outputs may be retained as part of your reminder's edit/creation history. ### 1.4 Technical and usage information - Device type, operating system, app version - Push notification tokens (for delivering notifications via Apple Push Notification service or Firebase Cloud Messaging, as applicable to your device) - Basic usage/error logs necessary to operate, maintain, and secure the App ### 1.5 What we do NOT collect We do not collect your email address, phone number, government ID, or precise location, and we do not require any of these to use the App. ## 2. How We Use Your Information We use the information above to: 2.1 Create and secure your account, including trusted-device login and PIN-based authentication; 2.2 Provide the core functionality of the App — storing, organizing, displaying, and reminding you about the reminders you create; 2.3 Power AI-assisted features (extraction, category suggestion, schedule suggestion, duplicate detection, natural language search) that you choose to use; 2.4 Send you push notifications for reminders you have scheduled, where you have push notifications enabled; 2.5 Provide customer support, including administrator-assisted PIN resets that you request; 2.6 Detect, investigate, and prevent fraud, abuse, or security incidents; 2.7 Comply with applicable legal obligations. We do not use your information for third-party advertising, and we do not sell your personal data. ## 3. Legal Basis for Processing Under the DPDP Act, we process your personal data on the basis of your **consent**, given at the time of registration and reaffirmed if these terms are materially updated, and, where applicable, for legitimate uses necessary to provide the service you have requested. ## 4. How We Share Information We do not sell your personal data. We share limited information only as follows: 4.1 **Push notification providers** (Apple Push Notification service, Firebase Cloud Messaging) — receive a device token and notification content necessary to deliver your reminder alerts. 4.2 **Infrastructure/hosting providers** — process and store data on our behalf as part of operating the App's servers and databases, under contractual confidentiality obligations. 4.3 **AI processing infrastructure** — reminder descriptions and related data you submit to AI features are processed to generate suggestions; this processing occurs on infrastructure we operate or contract, and is not used to train third-party general-purpose AI models outside our control. 4.4 **Legal and safety** — if required to comply with a legal obligation, court order, or governmental request, or to protect the rights, property, or safety of the Company, our users, or the public. 4.5 **Business transfers** — if we are involved in a merger, acquisition, or asset sale, your information may be transferred, subject to this Policy's protections continuing to apply. ## 5. Data Storage and Security 5.1 Your PIN is stored using irreversible cryptographic hashing and is never stored or transmitted in plain text. 5.2 Data is stored on secured server infrastructure with access restricted to authorized personnel on a need-to-know basis. 5.3 Administrator access to reset a user's PIN or view account status is logged and used only for legitimate support or security purposes. 5.4 While we take reasonable technical and organizational measures to protect your information, **no method of electronic storage or transmission is 100% secure**, and we cannot guarantee absolute security. ## 6. Data Retention 6.1 We retain your account and reminder data for as long as your account remains active. 6.2 If you cancel or delete a reminder, it is retained in a soft-deleted/history state (as described in the App) to preserve your record trail, until you take further action, or as described in-app. 6.3 If your account is deleted [or upon request — reference actual deletion mechanism when available], we will delete or anonymize your personal data within [X days], except where retention is required for legal, security, or fraud-prevention purposes. ## 7. Your Rights Under the DPDP Act, as a Data Principal you have the right to: 7.1 **Access** — request a summary of the personal data we hold about you and the processing activities undertaken; 7.2 **Correction and updating** — request correction of inaccurate or incomplete personal data; 7.3 **Erasure** — request deletion of your personal data, subject to legal retention requirements; 7.4 **Grievance redressal** — raise a grievance regarding our handling of your personal data (see Section 9); 7.5 **Nominate** — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, where supported by our processes. To exercise these rights, contact us at [privacy@yourdomain.com]. We will respond within the timeframe required under applicable law. ## 8. Children's Privacy The App is not directed at, and we do not knowingly collect personal data from, individuals under 18 years of age. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete such data. ## 9. Grievance / Data Protection Officer **Name:** [Grievance/DPO Name] **Email:** [privacy@yourdomain.com] **Address:** [Registered Address, Hyderabad, Telangana] We will acknowledge and address privacy-related grievances within the timeframe required under applicable Indian law. ## 10. Cookies and Similar Technologies (Web) The web and admin applications may use strictly necessary cookies or local storage to maintain your session and preferences. We do not use third-party advertising or tracking cookies. ## 11. Third-Party Links The App may reference or link to third-party services (e.g., app stores). This Policy does not apply to those third parties, and we encourage you to review their privacy practices independently. ## 12. Changes to This Policy We may update this Privacy Policy from time to time. Material changes will require you to re-accept this Policy before continuing to use the App, consistent with the versioning shown in the App. ## 13. Governing Law and Jurisdiction This Privacy Policy shall be governed by the laws of India. Subject to the dispute resolution provisions of our Terms and Conditions, courts at **Hyderabad, Telangana** shall have exclusive jurisdiction over any disputes arising in connection with this Policy. ## 14. Contact Us For any questions about this Privacy Policy or our data practices, contact us at [privacy@yourdomain.com] or write to us at [Registered Address, Hyderabad, Telangana]. --- *This document is a template drafted for general guidance based on the features described for the Remina application. It has not been reviewed by a licensed advocate and should not be treated as final or legally sufficient until it is. In particular, have counsel confirm current DPDP Act compliance obligations (Consent Manager registration, breach notification timelines, cross-border transfer rules if any infrastructure is hosted outside India) before publishing, since implementing rules under the DPDP Act may evolve.*