Privacy policy

Information we collect

• Account information: your name, email address, account identifier, sign-in verification and household membership. The iOS app offers Google, Apple and email-code sign-in. Google can supply your verified email, name and Google account identifier. Apple can supply an account identifier, your email or an Apple private-relay address, and your name when first authorised. We use verified account associations to recognise you and support sign-in methods you choose and verify.
• Pet and household information: pet profiles and photos; routines, activity history, notes, medication, appointments, veterinary records, weight entries and pantry information.
• Shared-care information: carer names, trip dates, care instructions, emergency contacts, veterinary contact details, guest permissions and check-ins.
• Documents you upload: the selected file, its name and type, and text extracted by a requested scan on a supported website feature. The public iOS app retains document upload, viewing, deletion and existing extracted text, but does not offer new scans. Photos and documents can contain personal information about you or other people.
• Optional Care Plan notifications: an app installation identifier, device messaging token, your personal reminder settings and delivery timestamps. We associate the installation with your current account and household after you opt in. Notification text can include your pet’s name, the care or appointment type and reminder timing. Medication names, doses and private notes are excluded. Full care details are retrieved after authenticated opening.
• Service and security information: sign-in/session records, provider account associations, protected provider credentials used for revocation, request identifiers and timestamps, saved-operation receipts and recovery records, invitation access records, and IP-based request limits. Our hosting and email providers may also process technical and delivery logs.
• Support information: messages and attachments you choose to send us. The website also collects waitlist details and email preferences when you join the waitlist.

How we use it

We use this information to create and secure accounts, deliver verification emails, save and share care records, show reminders, manage household and guest access, process requested document scans, prevent abuse and respond to support requests. Website waitlist emails follow the preference you give when joining.

Remie does not sell your data, show advertising, or use advertising identifiers or cross-app tracking. The app has no advertising or third-party analytics SDK. Care records concern pets; Remie does not read Apple Health, your address book or your device location.

Feature availability and existing records

The website and public iOS app can offer different controls. The public iOS app keeps everyday care, household membership, food and medication management, and basic health, document and weight records. It does not offer new trips, temporary guest invitations, flexible walking plans, weigh-in schedules, Growth charts, document scans or shopping-list controls. Supported management of existing trips, invitations and care obligations remains subject to household permissions. Removing a creation screen does not delete existing records or automatically cancel care or access.

Who can see shared care

Household members can see the records shared within their household. Owner, member and viewer roles control who can manage access and make changes. Guest links expose the pet-care information allowed by the invitation, for the invitation's active dates. Medication access is a separate choice.

Anyone who receives an active guest link may be able to use it. Share links only with the intended carer, review the permissions, and revoke access when it is no longer needed. Do not upload information about other people unless you have permission to share it.

Service providers

• Cloudflare hosts the service and stores account/care records in D1 and uploaded files in R2. Requests pass through its infrastructure.
• Resend delivers account verification and beta invitation emails. It receives the recipient's email address and message contents, and processes delivery information.
• Google Cloud Document AI receives the selected document when you request Scan text through a supported website feature. Remie saves the returned text for your review. Uploading a document alone does not request a scan; the public iOS app does not offer new scans.
• Google Firebase Cloud Messaging and Apple Push Notification service deliver optional iPhone notifications. They process messaging/installation identifiers, message contents (including pet names, care types and reminder timing) and technical delivery information. Firebase may also process service diagnostics. Google Analytics is not included or enabled in the app.
• Google handles optional Google sign-in on the website and in the iOS app. Apple handles optional Apple sign-in in the iOS app. Remie verifies their sign-in proofs and stores the account associations and protected revocation material needed for the supported account lifecycle. Email-code sign-in does not require a Google or Apple account.

These providers may process information outside your country. Document scans currently use Google's Australia Southeast region; this does not mean all Remie data stays in Australia. When you open a retailer website, use another app to share a link, or email support, that service also applies its own privacy practices.

On your device

The iOS app stores its sign-in credential and a separate installation identity in iOS Keychain. Appearance preferences and notification opt-out and cleanup flags are stored on the device. Pet photos and a recent Home snapshot can be cached for display if refreshing fails. The snapshot is scoped to the signed-in session and is accepted for display for up to 24 hours; invalid or expired snapshots are removed when checked. Cached content does not authorise offline saves. Website sign-in uses a secure session cookie. Selecting a file shares that selected file with Remie; it does not give Remie access to your whole photo library.

A pending scheduled-walk save also has a small persistent recovery record in device-only, non-synchronising Keychain. It holds the account, household, pet and routine identifiers, occurrence date, original request identifier and creation time, not a raw sign-in token. It is bound to the verified session and household and can survive closing and reopening the app so you can check the original request. Reopening does not by itself resend the save. The app attempts to remove the record after confirmed resolution and requests scoped cleanup on sign-out, account deletion, loss of access or household change. If secure-storage cleanup fails, a retry can be required; there is no fixed automatic deletion deadline for an unresolved record. Other loaded records and unfinished forms may remain while the app is running.

Retention and deletion

Account information remains while your account exists. Household care history, documents and photos remain until removed or the household is deleted. Signing out or uninstalling the app does not delete server records.

Start at More → Delete account in the iOS app. If you have not created or joined a household, choose Delete account on the Your household setup screen. You can also visit your account on the website. Follow the verification prompts and review the household choices before confirming. If verification cannot be completed, contact info@heyremie.com about the error; a failed verification is not account deletion. The deletion screen explains which households will be deleted and which will remain with other members. On confirmed deletion, your account details, sign-in sessions, identities and memberships are removed. Your sole-member households and their care records are deleted; their photos and documents are queued for storage removal, with retries if removal is delayed.

Shared or transferred households retain their care records, documents and historical contributor names for the remaining members. A hashed marker for a previously linked platform identity is retained to prevent an old platform sign-in from recreating a deleted account.

For linked native Google or Apple identities, confirmed account deletion queues provider-credential revocation. Encrypted revocation material remains while failed requests are retried and is cleared after successful processing. Provider-deletion security markers and operation receipts have separate cleanup lifecycles. Remie also retains saved-request recovery information to resolve uncertain operations and prevent late duplicate saves; this does not establish a fixed deletion deadline for every recovery record.

Verification codes are valid for up to 10 minutes. Sign-in sessions expire after 30 days. Expiry ends their validity; expired server records are cleaned up during later sign-in activity, rather than at a guaranteed deletion time. Completed deletion receipts become eligible for cleanup after one day.

Security records, support correspondence and provider-held logs or backups may remain after account deletion. We have not established a fixed deletion deadline for all of these copies. Contact info@heyremie.com for retention details or a removal request.

Care Plan notifications

Reminders are off by default. Choose More → Notifications in the iPhone app to opt in or turn them off for this installation. You can also change notification permission in iPhone Settings. Turning them off stops new reminder registration and requests token cleanup; an alert already accepted by the delivery provider may still arrive. Reminder delivery records become eligible for cleanup after seven days. Disabled installation identities may remain until their session expires and the scheduled cleanup runs. Explicit sign-out disables delivery for that installation and revokes its server session when the request succeeds. After signing back in, check More → Notifications and enable the reminders you want; sign-in alone is not a promise that delivery is enabled. A sign-out or cleanup failure can require a retry.

Your choices and requests

You can edit care information, remove uploaded documents, manage household/guest access and request account deletion. Email info@heyremie.com to request access, a copy, correction or removal of your personal information, or to raise a privacy concern. We may need to verify your identity before acting. Tell us if shared records contain personal information you want reviewed.

Changes to this notice

We will update this page when data practices change. The date above identifies the current notice. Contact us if a change is unclear.