Privacy Policy

Remember4Me (“the app”) is provided by GramJee LLC (“we”, “us”). This policy explains what data the app handles, where it goes, and what control you have over it.

1. Who we are and how to contact us

GramJee LLC
701 South St., STE 100
Mountain Home, AR 72653
United States

Privacy contact: support@gramjee.com

2. Information we collect

2.1 Account information

When you sign in with Apple or Google, we receive:

When your email reaches us Only in two cases:

• Feedback. If you choose to add your email to feedback (Section 3.7).
• Deleting your account on the web. When you sign in on that page, Google sends us your email address. Apple may send your email address, or a private relay address if you chose Hide My Email. We show it to you once, so you can check you’re deleting the right account. We don’t save it or write it in our logs (Section 10).

How we use your account id We add the provider’s name in front of the identifier (for example, google:1234567890) to make your account id. It is the only thing our servers store that identifies your account. We use it for three things only:

• Backup. To store your encrypted backup and find it again when you sign in.
• Protecting the service. To limit how often one account can call our servers, which protects the service from abuse.
• Your requests. To find your account when you ask us to, for example to delete it. The short Account ID shown in the app is calculated from it for this purpose; see Section 10.

We don’t use it to track what you do in the app, and it doesn’t let us read your data.

We do not receive your Apple or Google password.

2.2 Content you create

Your memories, notes, tags, reminders, and categories are stored on your device in a database whose sensitive fields the app encrypts.

Document files you add (photos, PDFs, audio) and their preview images are kept in the app’s private storage on your device, protected by your phone’s built-in encryption, so please keep a passcode on your phone.

This content is not sent to us except through the specific features described in Section 3.

2.3 Technical and diagnostic information

When the app contacts our servers we process the request minimally for security and abuse prevention: your account id (for rate limiting), request timing, and outcome codes. We do not log the contents of your documents or notes.

Our hosting provider, Cloudflare, also processes your device’s IP address on every request, as any internet service must, to route traffic and to protect against denial-of-service attacks and abuse. IP addresses are used only for those two purposes. We don’t use them to track you or to build a profile of you. We also can’t connect them to what you save: your memories, documents, and notes are encrypted before they reach our servers, and we don’t have the key to read them.

If you submit feedback, we also receive your app version, build number, platform, and OS version, so we can reproduce the issue.

2.4 What we do NOT collect

• No advertising identifiers, no ad networks, no tracking across apps or websites.
• No third-party analytics SDKs. (Crash reports are sent only if you choose to; see Section 3.10.)
• No AI or machine-learning processing of your documents or notes.
• No location data.
• No contacts, calendar, or health data.

2.5 Device permissions, and what stays on your device

The app asks for a few device permissions. Each is used only for the feature named, and none of them sends data anywhere on its own:

Photos, scans, and recordings only ever leave your device through the features described in Section 3, and only if you enable them.

3. Features that send data off your device

This section is deliberately specific, because these are the only paths by which your information leaves your phone.

3.1 Encrypted cloud backup (our servers)

If you enable cloud backup, the app uploads an encrypted snapshot of your database and an encrypted (wrapped) copy of your master key to storage we operate on Cloudflare R2.

• Encryption is AES-256-GCM, performed on your device before upload.
• The key that protects your data is derived from your passphrase, which we never receive.
• We can see that an encrypted object exists for your account and how large it is. We don’t have the key to decrypt it.
• Your backup is only as strong as your passphrase. Anyone who obtained the encrypted backup could try to guess it, so use a long, unique passphrase.
• If you set up recovery, your answers are harder to attack: checking a guess needs our recovery service, which allows 5 wrong tries and then pauses for 24 hours. Someone who broke into both our backup storage and our recovery service could still try to guess your answers, so choose answers other people couldn’t find out.

If you set up recovery with security questions, the app also uploads:

• a second encrypted copy of your master key. Unlocking it needs both a key your device derives from your answers and a random code that our recovery service keeps for your account. Your answers never leave your device.
• a check value your device computes from your answers. We store only a one-way hash of it, which does not contain your answers. Our recovery service uses it to check your answers, and releases the random code only when they match.
• a small record of which questions you chose from the app’s built-in list, so the app can ask them again. This record is not encrypted by the app, but it contains no answers.

Our recovery service also keeps a count of recent wrong tries and, after 5, the time the 24-hour pause ends.

3.2 Your own Google Drive (optional)

If you connect Google Drive, individual document files are stored in your own Google Drive account, not ours. We request the drive.file scope, which limits the app to files it created. It cannot see the rest of your Drive.

For each document you choose whether the file is stored encrypted or readable (plaintext) in your Drive. Choosing readable means the file can be opened by you in Drive, and is subject to Google’s handling of your Drive data. The app asks you to confirm this explicitly before enabling it.

Google user data

What we receive If you sign in with Google: your Google account identifier and, if Google provides them, your email address and name. If you connect Google Drive: access only to the files the app creates.

How it’s used The identifier is used to create and find your account (see Section 2.1). Drive access is used only to store and retrieve your document files in your own Drive.

Where it’s stored Your email address and name stay on your device. Our servers store only your account id. Your Google Drive sign-in stays on your device; our servers never receive it. If you delete your account on the web, Google sends us your email address; we show it to you once and don’t save it.

Sharing We don’t sell, share, or transfer Google user data to anyone, and we don’t use it for advertising or to train AI.

Removing access To disconnect Google Drive, go to: Settings → Privacy → Cloud sync → Disconnect Google Drive Deleting your account (Section 10) also disconnects it. To remove Remember4Me’s access to your Google account completely, open your Google Account: Security → Third-party apps & services

Remember4Me’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3.3 AI features: not used in this version

Remember4Me does not use AI or machine-learning services. Your documents, images, and notes are never sent to an AI provider.

If we add AI features in a future version, we will update this policy and ask for your consent before any of your content is sent.

3.4 Tag popularity

To suggest commonly used tags, the app sends the text of tags you add or remove to our server, where it is added to a count per tag.

• Tag text is protected in transit (HTTPS) but is not end-to-end encrypted like your memories, documents, and notes; our server can read it.
• Your account id is never stored alongside a tag. It is used only transiently for rate limiting.
• Rarely used tags are never shown to other users: suggestions are limited to a built-in list, so a tag used by one person does not appear to anyone else.
• This cannot currently be turned off, so please don’t put personal, health, or financial details in tags. Use notes, which are encrypted.

3.5 Sharing a memory (“Send a copy”)

When you send a copy of a memory, including its documents, notes, and reminders, the app encrypts it on your device and uploads the encrypted bundle to our relay. The decryption key travels only in the QR code or share code you hand to the recipient. It is never sent to our servers, so we cannot read shared content.

Relay bundles are automatically deleted after 14 days, and the recipient’s app deletes the bundle after a successful import.

3.6 Device-to-device transfer

Transferring your data to a new device works the same way: the bundle is encrypted on the old device and relayed through our server; the key travels in the QR code only.

3.7 Feedback you submit

If you use the in-app feedback form, your message text is sent to our server and forwarded into a private Discord channel we monitor, along with your app version, build, platform, and OS version.

Attaching your email address is optional and off by default. If you opt in, that email is included so we can reply; otherwise the message is submitted as anonymous.

Discord is a third-party service that stores these messages under its own terms and privacy policy, on servers in the United States. If you’d rather your feedback not go through Discord, email support@gramjee.com instead.

3.8 Emails you send us

If you email support@gramjee.com or legal@gramjee.com, we receive your email address, your name if you include it, your message, and any attachments. These are stored with our email provider and used only to respond to you and to keep records.

Please don’t send us copies of sensitive personal documents. We don’t need them to help you.

3.9 Our website

Our website, remember4me.gramjee.com, including these legal and support pages, is hosted by Cloudflare Pages. Cloudflare processes visitors’ IP addresses to deliver the pages and to protect them from abuse. We don’t use cookies, analytics, or trackers on these pages.

The page for deleting your account on the web (Section 10) is served by our own server, the same one the app uses. It has no scripts, analytics, or trackers. It sets two security cookies that expire within 10 minutes and are used only to complete the deletion. To limit abuse, our server counts how many times your IP address uses that page each hour; this count isn’t linked to your account.

3.10 Crash reports (optional, off by default)

Crash reports help us find and fix problems. They are off by default, and nothing is sent unless you choose to send it, in one of two ways:

• Turn them on at: Settings → Privacy → Send crash reports The app then sends a report to us whenever it hits an error. You can turn this off at any time.
• Send a single report from the crash screen. If the app can’t start (for example, after a failed update), the crash screen offers a Send crash report button. That sends one report about that error: nothing else, and nothing after it.

A crash report contains the type of error, where in the app’s code it happened, the screens you visited just before it, the app version, and your device model and operating-system version. The text of the error is removed before sending.

A crash report never contains your memories, documents, notes, or passphrase, and it does not include your name, email address, or account ID. Sentry is set up not to store your IP address. We do not use crash reports to identify you or to track you.

Crash reports are processed for us by Sentry (Functional Software, Inc.), our crash-reporting provider.

4. Legal bases for processing (EEA/UK users)

5. Service providers (sub-processors)

Our service providers (Cloudflare, Sentry, and Google Workspace) process data only to provide their service to us, and are required to protect it at least as well as this policy describes.

Apple and Google handle sign-in, Google Drive, and payments under your own account with them and their own terms.

Discord stores feedback under its own terms and privacy policy (see Section 3.7). If you’d rather your feedback not go through Discord, email support@gramjee.com instead.

We do not sell personal information to any of these parties.

6. Security

• Your content is encrypted on your device with AES-256-GCM.
• Your master key is held in the device’s secure storage (iOS Keychain / Android Keystore), restricted to this device while unlocked.
• Backups are encrypted before they leave your device; your passphrase never reaches our servers.
• Sensitive actions (such as exporting an archive) require biometric or device-passcode confirmation.
• We never receive your biometric data. Face ID, Touch ID, and fingerprint matching are performed entirely by your device’s operating system, which tells the app only whether the check succeeded. Your biometric data never leaves your device and is never sent to us.

No system is perfectly secure. We designed this so that a breach of our servers would expose only encrypted data, not your readable content, because we do not hold the keys. How well that encrypted data resists guessing depends on the strength of your passphrase and recovery answers.

7. Important: the data-loss trade-off

Because we never hold your keys, we cannot recover your data for you. There is no password reset, no recovery link, and no support override.

The only fallback is optional recovery with three security questions, which you must set up in advance at: Settings → Privacy → Your security With it, you can restore your backup without your passphrase by signing in with the same Apple or Google account and answering your questions correctly. After 5 wrong tries, recovery pauses for 24 hours before you can try again.

If you lose access to your device and your passphrase, and you either did not set up recovery or cannot sign in to your account or answer your questions, your encrypted backup cannot be decrypted by anyone, including us.

This is a deliberate trade-off in favor of your privacy. Please store your passphrase somewhere safe, and set up recovery.

8. Data retention

9. Your rights

If you are in the EEA or UK, you have the right to access, correct, delete, restrict, object to, and port your personal data, and to lodge a complaint with your local supervisory authority. Where processing is based on consent, you may withdraw it at any time.

How to withdraw consent

• Crash reports: turn them off at: Settings → Privacy → Send crash reports
• Google Drive: disconnect it at: Settings → Privacy → Cloud sync → Disconnect Google Drive
• Feedback that included your email: email support@gramjee.com and we’ll delete it.
• Everything: delete your account (Section 10).

If you are a California resident (CCPA/CPRA), you have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, and we do not use it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights.

Note that for encrypted content we don’t have the key to read, the meaningful remedy is deletion (Section 10) or exporting from within the app, since we are unable to decrypt it for an access request.

We respond within one month for EEA/UK requests and within 45 days for California requests, and may extend these periods where the law allows.

Because our servers store no names or email addresses, we may ask you to confirm a request from within the app (for example, using the Account ID shown in the app’s Settings, where available) so that we act only for the account holder.

For most requests, the app is the fastest route. To get everything: Settings → Download my data To remove it: Settings → Delete account

What we can send you if you ask We hold very little about you, so this list is short:

• Your account id.
• Whether you have an encrypted backup with us, its size, and when it was saved.
• Whether you have recovery set up, and whether it is currently paused after wrong tries.
• Which three security questions you picked from the app’s list. We store only which questions, so the app can ask them if you need to recover. We never receive your answers.
• Any feedback or emails you sent us.

What we can’t send you The contents of your memories, documents, and notes. They are encrypted and we don’t have the key. To get a copy of those, use this in the app: Settings → Download my data

To make a request, contact support@gramjee.com.

10. Deleting your account and data

You can delete your account and its data inside the app: Settings → Delete account This:

• deletes your encrypted backup, wrapped key, and recovery data from our storage,
• disconnects Google Drive access,
• if you signed in with Apple, removes Remember4Me from your Apple ID,
• erases the local database and encryption key on your device.

If you no longer have the app, you can delete your account on the web at remember4me.gramjee.com/account/delete. Sign in with the same Apple or Google account you used in the app, check the Account ID shown, and type DELETE. This deletes your encrypted backup, wrapped key, and recovery data from our storage and, if you signed in with Apple, asks Apple to remove Remember4Me from your Apple ID. It can’t erase data on a device or disconnect Google Drive.

You can also reinstall the app, sign in with the same account, and use Delete account in Settings. Step-by-step instructions are on our Delete your account page.

Your backup is identified only by your Apple or Google sign-in, not by your email address, so an email address alone can’t locate it.

If you can’t sign in at all, email support@gramjee.com with your Account ID. You can find it in the app under: Settings → Privacy → Your security It looks like 7K3M-9QXA-B2RT (12 letters and numbers in three groups of four). With it, we can delete what we hold on our servers: your encrypted backup, wrapped key, and recovery data. We can’t erase the data on your device or disconnect Google Drive for you. Only Delete account in the app does all of that, so it is the route we recommend whenever you can sign in. Without your Account ID, we have no way to find your account.

If you delete on the web or by email while the app is still installed and signed in on a phone or tablet, that device keeps its data and may back it up to our servers again. Delete the app from every device first.

If you get stuck, email support@gramjee.com and we’ll help you through it.

Deletion is permanent and cannot be undone.

11. International transfers

We are based in the United States, and our service providers may process data in the United States and elsewhere. Where personal data is transferred out of the EEA or UK, we rely on the safeguards our providers offer, such as the European Commission’s Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.

12. Children

Remember4Me is for adults. You must be 18 or older to create an account (see our Terms of Service), and we do not knowingly allow anyone under 18 to use it. We do not knowingly collect personal information from children under 13.

Parents and guardians may store information about their children, such as birth certificates or school records, in their own account. That information is part of the account holder’s content and is protected the same way.

If you believe someone under 18 has created an account, contact us at support@gramjee.com. Because our servers don’t store names or email addresses, we can’t find an account from an email. The quickest way to remove it and its data is in the app, and we’ll help you through it: Settings → Delete account

13. Changes to this policy

We may update this policy. If we make a material change (for example, collecting a new type of data or sharing it with a new kind of provider), we will update the dates above and tell you in the app before the change takes effect. We will ask for your consent before using information we already hold in a materially different way, and wherever the law requires consent (for example, before any of your content is sent to an AI service; see Section 3.3). Previous versions of this policy are available on request.

14. Contact

GramJee LLC
701 South St., STE 100
Mountain Home, AR 72653
United States

support@gramjee.com