Legal Notice

Privacy Policy for rmbrme

Last updated: July 27, 2026 • Effective: July 27, 2026

The short version

rmbrme keeps your notes on your device. You don't need an account to use it. If you choose to turn on sync, your notes are stored on our servers so they can reach your other devices. We don't sell your data, we don't show ads, and we don't read your notes.

1. Who we are

rmbrme ("the app") is published by Pitch 15 Solutions Inc. ("we", "us"), located at 2701 N Thanksgiving Way, Suite 100, Lehi, UT 84043, USA.

Questions about this policy: privacy@pitch15.solutions

2. What the app stores

On your device

Everything you create in rmbrme is stored locally on your device using Apple's SwiftData framework:

  • People — names, categories, and an optional link to a contact in your address book
  • Rmbrs — titles, notes, categories, timing, and flags such as Ask next time, Discussed, and Sensitive
  • Alerts — the dates and lead times you set for reminders
  • Settings — appearance, custom categories, and app preferences

If you never sign in, this information never leaves your device. We cannot see it, retrieve it, or restore it.

On our servers, only if you enable sync

If you create an account and turn on sync, the information above is transmitted to and stored on our infrastructure, provided by Supabase, so it can be synchronized across your devices. We also store:

  • Your email address
  • Authentication credentials, handled by our authentication provider — we do not store your password in readable form
  • Timestamps needed to resolve which version of a record is current

Sync is optional and off by default. The app is fully functional without it.

Contacts

If you link a person in rmbrme to a contact in your address book, the app reads that contact's name, phone number, and photo so it can display them and offer Call and Text buttons.

  • Contacts access is requested only when you tap to link a contact, and only with your permission
  • The app reads only the contacts you specifically select — it does not upload, scan, index, or transmit your address book
  • Linked contact details are used on your device to render the profile and place calls or messages
  • You can revoke Contacts access at any time in iOS Settings; the app continues to work without it

Notifications

Alerts you set are delivered as local notifications scheduled on your device. They are not sent through a push server and their content is not transmitted to us.

Notification previews for rmbrs marked Sensitive are generic and do not include the note's contents.

3. What we do not collect

  • We do not sell or rent your personal information to anyone
  • We do not share your notes with advertisers or data brokers
  • We do not show ads in the app
  • We do not build advertising profiles or use your content to train machine learning models
  • We do not read the contents of your rmbrs

4. Analytics and diagnostics

Apple-provided only: If you have opted in to share analytics with app developers in iOS Settings, Apple provides us with aggregated, anonymized crash reports and performance metrics. This data is governed by Apple's privacy policy and is not linked to your identity by us. We use no third-party analytics SDKs.

5. Legal bases for processing (EEA and UK users)

Where the GDPR applies, we process personal data on these bases:

  • Contract — providing sync and account features you have signed up for
  • Legitimate interests — keeping the service secure, preventing abuse, and fixing defects
  • Consent — access to your Contacts, and notification permissions, each of which you may withdraw at any time

6. Information about other people

rmbrme exists so you can keep notes about other people. Those people have not agreed to this policy and, in most cases, don't know the notes exist.

  • You are responsible for what you record about others. Record only what you would be comfortable being seen, and only what you have a legitimate personal reason to keep.
  • Keep it personal. rmbrme is designed for personal and household use. Data protection laws including the GDPR generally exempt purely personal or household activity, but that exemption does not extend to commercial, professional, or organizational use. If you use rmbrme to track people for business purposes, you may become a data controller with your own legal obligations, and you are solely responsible for meeting them.
  • Requests from third parties. If someone asks us to delete information you have recorded about them, we generally cannot identify or access it — notes are yours, and when sync is off they are not in our possession at all. We will direct such requests to you where we can.

7. Sharing and disclosure

We share information only in these circumstances:

  • Service providers — Supabase provides database, authentication, and hosting for sync. They process data on our instructions under contract and may not use it for their own purposes.
  • Legal requirements — if required by valid legal process, and only to the extent required. When sync is off, we hold nothing to produce.
  • Business transfer — if the app or company is acquired, data may transfer to the acquirer, subject to this policy. We will notify you before your information becomes subject to a materially different policy.

8. Data retention

  • Local data stays on your device until you delete it or delete the app. Deleting the app removes local data permanently and irreversibly.
  • Synced data is retained while your account is active. When you delete your account, we delete your synced content within 30 days, except where retention is legally required. Backups are purged on a rolling 30-day cycle.

9. Your rights and choices

Regardless of where you live, you can:

  • Access and export your data using the export feature in Settings
  • Correct anything by editing it in the app
  • Delete individual rmbrs, individual people, or the app entirely
  • Delete your account and all synced data from Settings, or by writing to privacy@pitch15.solutions
  • Turn sync off at any time, which stops further transmission
  • Withdraw permissions for Contacts and notifications in iOS Settings

If you are in the EEA, UK, California, or another jurisdiction with statutory privacy rights, you additionally have the right to request a copy of your data in portable form, to object to or restrict processing, and to lodge a complaint with your supervisory authority. California residents have the rights described under the CCPA/CPRA, including the right to know, delete, correct, and to opt out of sale or sharing — we do not sell or share personal information as those terms are defined.

We do not discriminate against you for exercising any of these rights.

10. Security

Synced data is encrypted in transit using TLS and encrypted at rest by our infrastructure provider. Local data is protected by your device's own encryption and passcode.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any required regulator as the law requires.

11. International transfers

Our infrastructure servers are hosted in North America (AWS US West Region via Supabase). If you use sync from outside that region, your information will be transferred and processed there. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism.

12. Children

rmbrme is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact privacy@pitch15.solutions and we will delete it.

13. Changes to this policy

We may update this policy. If changes are material, we will notify you in the app before they take effect and update the date at the top. Continued use after changes take effect means you accept the updated policy.

14. Contact

Pitch 15 Solutions Inc.
2701 N Thanksgiving Way, Suite 100
Lehi, UT 84043, USA
Email: privacy@pitch15.solutions