RemoirPrivacy
Privacy Policy
Effective September 5, 2026
This page is the public record of what Remoir collects, who can see it, and how to take it back. Google and other sign-in providers ask for this URL. It lives at remoir.me/privacy.
Who we are
Remoir is a living memoir at remoir.me. This policy covers the marketing site, the signed-in app, and the companion that reads your transcripts.
What we collect
When you create an account we store the email and identity Clerk gives us. If you continue with Google, that includes the name, email, and profile identifier Google shares for the account. When you record we store the media you upload, a compact audio derivative, the transcript, extracted memory, tags, and any people you name. Optional billing fields go to Stripe. Optional contact emails you add are stored only for shares you start. Camera and photo-library permission stay on the device until you choose to upload.
Private by default
Nothing is shareable until you make it so. An addressed log is still private. Addressing records who you meant it for. It never emails them, never invites them, never opens a door.
Honest about AI access
The companion reads your transcripts. That is the product. Media and data are encrypted at rest and in transit. v1 is not end-to-end encrypted. End-to-end would blind the companion, and we will not sell you a memory product that cannot remember.
Who processes data for us
Clerk holds sign-in, including Google if you choose it. Convex holds the database and files. OpenAI and Anthropic receive transcripts and derived text so the companion can work. Exa receives search queries, never transcripts. Stripe handles payment. PostHog receives product events tied to your account id. We use zero-retention or no-training API tiers where the provider offers them.
Export everything
Your media, transcripts, and extracted memory are yours to download in open formats. If Remoir disappeared tomorrow, you should leave with a life, not a login.
Delete means delete
Deleting an entry removes its media, transcript, embeddings, and derived memory objects. Deleting the account repeats that cascade for everything. Shared links die with the share. We do not keep a souvenir.
Care without surveillance
A private journal will hear grief and crisis. The companion never plays therapist, never moralizes, and never reports you. When an entry signals acute crisis, the reflection stays warm and brief, and the UI offers a quiet, dismissible resources footer. Remoir is 18 and older at launch.
What we measure
We said we would tell you here if this changed, and it has. Remoir now records product analytics through PostHog. Those events name screens and features, tied to your account id. They never include your transcripts, your media, your extracted memory, or anything you said. Event names like 'paywall viewed' are the entire vocabulary.
Children
Remoir is for people 18 and older. We do not store an email on a contact marked as a child.
Beta
Recording stays open during beta. Living Archive is the paid companion. If you stop paying, your logs stay yours and exportable. The companion goes quiet until you come back. Early beta users are grandfathered.
Changes
If this policy changes we will update the date on this page. Material changes to what we measure will stay named here, as they did when we added PostHog.
Contact
Questions about this policy can be sent from the email on your Remoir account. We reply to that address. The homepage for this app is remoir.me.
Read it. Then start a log.