Privacy Policy

Last updated: June 2026

1. Information We Collect

We collect the following categories of data:

Account Information

• Mobile phone number (used as your unique identifier)
• Password (stored as a one-way bcrypt hash — we never store your plain password)

Profile Information (optional)

• First name, middle name, last name
• Date of birth
• Occupation and city
• Email address (for communication, optional)
• Preferred language (English, Hindi, or Marathi)

Reminder Data

• Reminder titles, descriptions, types, and frequencies
• Scheduled dates and times
• Early reminder preferences
• Reminder delivery history and status

Usage Data

• Login timestamps and session activity
• API request logs (for debugging and security)

2. How We Use Your Information

• To create and manage your account
• To send OTP verification messages via SMS
• To deliver scheduled reminders via WhatsApp
• To personalise the app in your preferred language
• To improve the Service and troubleshoot issues
• To send service-related communications (subscription changes, policy updates)

We do not use your data for advertising or sell it to third parties.

3. WhatsApp Integration

Remyndar uses the WhatsApp Business Platform to deliver reminders to your registered mobile number. When a reminder is triggered, we send your reminder message through Meta's WhatsApp Business API.

By registering, you consent to receiving automated WhatsApp messages from Remyndar on the mobile number you provided. Meta's data handling is governed by WhatsApp's Privacy Policy.

You can opt out of WhatsApp reminders at any time by deactivating or deleting your reminders, or by requesting account deletion.

4. SMS (OTP)

We use a third-party SMS provider to send One-Time Passwords (OTPs) for account verification and password reset. Your mobile number is shared with this provider solely for OTP delivery and is not retained by them beyond message delivery.

5. Data Storage and Security

• All data is stored on servers located in India.
• Database connections are encrypted (TLS).
• Passwords are hashed using bcrypt and never stored in plain text.
• API access is secured with short-lived JWT tokens (24-hour expiry).
• We perform regular security reviews and follow OWASP best practices.

6. Data Retention

We retain your account and reminder data for as long as your account is active. If you request deletion, we will permanently delete your data within 30 days. Anonymised aggregate analytics (no personally identifiable information) may be retained indefinitely.

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access — request a copy of the data we hold about you
• Correction — update your profile information at any time in the app
• Deletion — request permanent deletion of your account and all associated data
• Portability — request an export of your reminder data
• Withdraw consent — stop receiving WhatsApp messages by deleting your account

To exercise any of these rights, visit our Data Deletion page or email privacy@remyndar.com.

8. Cookies and Local Storage

Remyndar does not use cookies. We use browser localStorage to store your authentication token and UI language preference. This data stays on your device and is cleared when you log out.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us at privacy@remyndar.com and we will delete the account promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via WhatsApp or email. Your continued use of the Service after notification constitutes acceptance of the updated Policy.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@remyndar.com.