Privacy statement

Remind helps users gain insight into their brain health through short measurements and analyses. We highly value your privacy and briefly explain below how we handle your data.

1. What data do we collect?

Account details: email address. If you choose to log in using Google or Apple, we also receive an identification code from that provider, and your name if the provider shares it. If you use Apple’s ‘Hide my email’ option, we may also ask you for a contact address so we can reach you regarding your account.

Voice recordings: short audio fragments via the microphone (max. 1 minute).

Typing behaviour: speed, rhythm, pressure, and timing while typing, never the content of what you type. This data is collected via the NeuroKeys app from our partner Neurocast B.V., which you install separately. For activation, you will receive a personal access code from Remind. During the installation of NeuroKeys, you will be asked for permission to access the keyboard, sensors, and location data required to analyse typing behaviour. The raw data is processed on the secure servers of Neurocast; only aggregated analysis results are sent back to Remind. Those results include an indication of brain age, a general indication of cognitive performance, and a brain health score.

Questionnaires: answers regarding lifestyle, memory, mood, and daily functioning.

Profile information: age, gender, education, language, cultural background, daily activities, family history, and any neurological or psychiatric diagnosis (optional).

Usage and analysis data: data about the use of our website and app, such as visited pages, interactions in the app, error messages, crash reports, and general usage patterns. On the website, this data is not linked to your account. In the app, it is linked to your account as soon as you log in, and remains anonymous before you log in. This data is collected via analysis tools (Google Analytics for the website, and Firebase Analytics, Firebase Crashlytics, and PostHog for the app) and does not contain the content of measurements or medical data.

Session recordings: recordings of how the app is used, in which all text and images are masked. See section 5.

Rémi’s memory: short facts that Rémi, the AI coach in the app, remembers from your conversations with your permission. See section 6.

Install measurement on Android: the Android version of the app contains software from Meta that uses the device’s advertising ID to measure which campaign led to the app being installed. No health data is shared in the process. This does not happen on iOS.

2. What do we use this data for?

The data is used to show you personal insights into your brain health and to analyse trends at a group level for product improvement.

Analyses are carried out via our technology partners:

• Canary Speech (speech)
• Neurocast / NeuroKeys (typing behaviour)
• MemoryLab Health (memory)

The app does not make medical diagnoses and only uses data with your consent.

In addition, we use analysis data and session recordings to understand the use and functioning of our website and app, so that we can improve performance, resolve errors, and improve the user experience. These analyses are not intended for advertising purposes.

We may use your email address to inform you about your account, measurements, progress, and results in the app. These are so-called service- and content-oriented emails, for example when a measurement is completed, when something has gone wrong, or when new insights are available.

3. Who do we share data with?

We only share data with carefully selected processors who make the app possible and who act on behalf of Remind under data processing agreements:

• Neurocast B.V. / NeuroKeys: collects typing behaviour via the keyboard and performs analyses.
• Canary Speech Inc.: processes voice recordings.
• MemoryLab Health B.V.: processes memory analyses.
• PostHog: provides product analytics and session recordings (session replay). This data is stored within the European Union.
• Google (Firebase Analytics and Firebase Crashlytics): provides usage statistics and crash reports for the app, and Google Analytics for the website.
• Amazon Web Services (AWS): provides the language-model answers of Rémi, exclusively on servers within the European Union, and does not keep the content of conversations. See section 6.
• Apple and Google: confirm your identity when you log in with your Apple or Google account. We never receive your password.
• RevenueCat: manages subscriptions and determines if your Remind+ subscription is active. RevenueCat receives your account identification code and information about your purchase, not your health data.
• Intuit Mailchimp: sends emails on our behalf. See section 9.
• Hosting and analysis providers: ensure secure storage, error resolution, and performance monitoring.

These parties may not use the data for their own purposes.

No data is sold. Apart from the install measurement described in section 1, we do not share anything with third parties for marketing purposes.

4. How you log in

You can log in using a link sent to your email address, with your Google account, or with your Apple account.

If you log in with Google or Apple, that provider confirms to us that you are who you say you are. We receive an identification code, your email address, and your name if the provider shares it. Apple only shares your name the first time. We never receive your password. We keep the identification code so we can recognise you next time you log in.

If you use Apple’s ‘Hide my email’ option, Apple gives us a forwarding address instead of your actual email address. We may then ask you for a contact address so we can reach you about your account. Providing that address is your choice.

If you delete your account and are logged in with Apple, we will also ask Apple to unlink your Apple account from Remind.

5. Session recordings

To understand how the app is used, we record how people navigate through the app: which screens are opened, in what order, and where people experience difficulties. These recordings are made via PostHog and stored in the European Union.

All text and all images in these recordings are masked. We see the structure of a screen and where you tapped, but not what is on it. Your answers, your results, and your conversations with Rémi are not readable in a recording.

We do not record every session. Approximately one in five sessions is recorded, and very short sessions (less than two seconds) are not recorded at all. Recordings are automatically deleted after 30 days.

We also do not store your full IP address: it is anonymised upon entry.

6. Rémi, your AI coach

Rémi is the coach in the app: a chatbot based on artificial intelligence that you can talk to about habits, lifestyle and your own results.

Your conversations with Rémi are not stored on our servers. They sit encrypted on your device and disappear as soon as you log out.

Rémi only uses your data with your explicit permission. The app asks for two separate permissions, which you can give independently and withdraw at any time in the settings:

• Profile and measurement results. Rémi may see your first name, age, sex at birth, first language and education level, your measurement results as you see them in the app yourself, and which brain games you play, roughly how often and when you last played. Never your surname, email address, date of birth or the scores of games.
• Remembering. Rémi may keep short facts from your conversations, such as your goal or your home situation. A few answers to health questions from the onboarding are then also copied once as such facts, so Rémi does not have to ask about them again. In the app you can see exactly what Rémi remembers, edit or delete any fact, or erase everything at once. If you withdraw this permission, everything Rémi has remembered is erased immediately, including your goal and your daily check-in. When you delete your account, Rémi’s memory is always erased, under both deletion options in section 7.

Without these permissions Rémi still works, just without that data.

Rémi’s answers are generated by a language model that runs via Amazon Web Services exclusively on servers within the European Union. AWS acts as a processor and does not keep the content of the conversations. Anthropic, the maker of the language model, has no access to the content. Conversations are never used to train the model.

7. How long we keep data, and deleting your account

Your data is kept for as long as your account is active. You can delete your account at any time via the app, and you can choose from two options.

Complete deletion. Your account and your data will be deleted. There is a 30-day recovery period first, so that accidental deletion can be undone. If you log in again within those 30 days, the deletion will be cancelled. After 30 days, your account, your measurements, and your results will be permanently deleted, we will ask Apple to unlink your Apple account, and we will remove you from our mailing list.

Remove personal data, keep results for research. Your name, email address, contact address, and links to your Apple or Google account will be erased. Your measurements and results will be kept, as well as your date of birth, gender, native language, and education level, because these are needed to interpret the measurements.

Since those background details are kept, the result of that second option is not fully anonymous. It is what the law calls pseudonymised: the data can no longer be traced directly to you by name, but re-identification based on a combination of characteristics cannot be ruled out in principle. We therefore continue to treat this data as personal data and protect it as such, and you can still ask us to delete it completely.

Pseudonymised research data is kept for as long as it is needed for that research. We assess at least once a year whether longer retention is justified.

Session recordings are automatically deleted after 30 days.

8. Cookies and analysis

On our website, we use analytical cookies to gain insight into the use of the site. We use Google Analytics for this. These cookies help us understand how visitors use the website, so we can improve its performance and content. We do not use this data for advertising purposes.

In the Remind app, we use Firebase Analytics, Firebase Crashlytics, and PostHog to analyse the performance and use of the app, such as stability, performance, crash reports, and general usage patterns. PostHog also creates the session recordings described in section 5.

Where legally required, we ask for consent to use analytical cookies. You can adjust your cookie settings through your browser settings.

9. Email communication

When you create an account, we may send you emails about using Remind. These are mainly informative and service-oriented emails, such as updates about your measurements or results, or notifications when something went wrong.

In addition, we may send emails to users of the free version with information about additional features or the paid subscription. These emails may have a limited marketing character.

For sending emails, we use Mailchimp as a processor. You can unsubscribe from non-essential emails at any time via the unsubscribe link in the email itself. Service-oriented emails necessary for using the app cannot be disabled as long as you have an account.

10. Security

All data is encrypted during transmission and storage.

Only authorised employees and processors have access.

11. Your rights

You have the right to access, correction, deletion, and the withdrawal of consent. You also have the right to object to or request restriction of processing, and to receive your data in a portable format. If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Please contact us at privacy@remindbrainhealth.com.

12. Contact information

Remind B.V. Netherlands KvK (Chamber of Commerce): 97661317 Email: privacy@remindbrainhealth.com