Privacy Policy

1. Who We Are and What This Policy Covers

This Privacy Policy explains how Remea, LLC ("Remea," "we," "us") collects, uses, shares, and protects information through the Remea Ecosystem website, its subdomains, our mobile apps, and related services (the "Service"). Remea is a family legacy platform, so much of what it holds is personal to you and your family; we have tried to explain plainly what happens to it. The Service is currently in Beta, and this policy will be updated as it grows.

2. Information We Collect

Information you give us:

• Account information: Your name, email address, date of birth, and password. Your password is managed by our authentication provider and is never stored in readable form.
• Profile information: Anything you choose to add, such as your photo, biography, hometown, location, education, military history, career milestones, credentials, important dates, links to other websites, and featured photos.
• Family and relationship information: Your Generational Tree, including names and relationships of family members, whether or not they use Remea, and your connections with other users.
• Memories and media: Posts, photos, documents, audio, and captions you add to your Dashboard, Archive, memorials, calendar, and Weave storybooks.
• Details stored inside your photos: Many photos carry the date they were taken, the device used and, if your camera records it, the location. When you add a photo to a memory, we save those details with it so features like Moments and Memory Book maps can work. The location saved with a photo travels with any Memory Book that uses it, so people you share that book with, including a guest narrator, can receive it. If you don't want a photo's location included, remove the location from the photo before uploading it.
• Information about others that you add: Information about Dependents (minors you care for), deceased loved ones in Memorials, and relatives in your tree. Please see our Terms of Service about adding information about other people.
• Vault Dispatches: Encrypted messages and attachments you send (see Section 8 for what we can and can't see).
• Communications: Messages you send us, bug reports, and, if you delete your account, any feedback you choose to give about why.

Information other users provide about you: Other users may add you to their family tree, tag you or a memorial in a memory, send you a Vault Dispatch, invite you as a co-custodian, co-guardian, or storybook narrator, or name you as their legacy contact.

Information collected automatically: When you use the Service, our hosting providers' servers record standard technical information, such as your IP address, browser and device type, and the date and time of requests. We use this to operate, secure, and troubleshoot the Service. We do not use analytics, advertising, or tracking tools.

Payment information: Payments are processed by Stripe or, for in-app purchases on iOS, by Apple. They handle your card details; we receive only a record of the purchase (such as the plan, amount, and status), never your full card number.

3. How We Use Information

• To provide the Service: building your tree and profile, storing your Archive, delivering Vault Dispatches, syncing birthdays and anniversaries, and running the features you choose to use.
• To share your information with the people you choose, as described in Section 5.
• To run AI features when you use them, as described in Section 4.
• To process payments and manage subscriptions.
• To keep the Service secure: preventing fraud and abuse, enforcing our Terms, and recovering information if something goes wrong.
• To communicate with you about your account, security, and changes to the Service.
• To comply with legal obligations.

What we don't do: We do not sell your personal information. We do not use it for targeted or behavioral advertising. We do not train our own AI models on your content.

4. AI Features

Several optional features use AI to generate content for you. When you use one, the information needed for that request is sent to our automation provider (Make.com) and to the AI model provider(s) it connects to, only to produce the result you asked for:

• Biography generation ("Ren" / Architect Dossier): Your profile details and family information.
• Memory prompts ("Lura"): General information used to suggest a memory to write about.
• AI companion conversations: Your messages, along with relevant profile, memory, and relationship information about the person or memorial the companion represents. Conversations are stored so the companion can refer back to them.
• Weave storybooks and illustrations: Story details, and — if a parent or guardian chooses to create an illustrated avatar — a photo of the child. Guest narrators' voice recordings are stored so the family can play them back.

AI features only run when you (or, for a Dependent, their parent or guardian) choose to use them. AI-generated content can be inaccurate; please review it before relying on it.

5. Who Can See Your Information

Remea is designed for sharing with family, but you control who sees what:

• Your connections: People you have accepted as connections can see your profile and the information you choose to share with your ecosystem, such as shared birthdays and anniversaries, memories you share rather than mark "Private," and — depending on your sharing settings — family members you have linked in your tree.
• Private items: Memories marked "Private," your Archive, and the contents of Vault Dispatches are not visible to your connections.
• Dependents: A Dependent's information is visible to your connections only if you turn on sharing for that Dependent. Co-guardians you invite can see and help manage that Dependent, and set their own sharing choices for their own connections.
• Memorials: A memorial's co-custodians can view and edit it. If a memorial is shared with the ecosystem, family connections of its custodians can view it and tag it in memories; friend connections cannot.
• Finding you: There is no search of all Remea members. Members who already share an accepted connection with you can find you by name, or see you suggested as someone they may know, so that they can send you a connection request. They see only your name and profile photo. This is on by default; you can turn it off at any time under Settings → Ecosystem Privacy by choosing Strictly Private.
• People you are not connected to: A signed-in member who is not one of your accepted connections can see only your name and profile photo.
• Blocking: Blocked users cannot send you requests or find you in search.
• Legacy contacts: After your legacy is activated (see Section 10), your designated legacy contacts may access your Vault and Archive content.

6. Service Providers

We share information with vendors that help us run the Service, under contracts or terms that restrict how they may use it:

• Supabase: Database, authentication, and file storage (hosting in the United States).
• Stripe and Apple: Payment processing.
• Make.com and AI model providers: Running the AI features described in Section 4.
• Website hosting and content delivery: Serving the website and app.
• OpenStreetMap (Nominatim): Looking up places for the maps in a Memory Book. When you search for a place while designing a book, the words you type are sent to OpenStreetMap. When you add a map from a photo, that photo's location coordinates (if the photo has them) are sent so the place can be named. Your name, account, and the photo itself are not sent. Like any website, OpenStreetMap receives your IP address and browser information with these requests.
• Google Fonts, jsDelivr, unpkg, and Tailwind: Loading fonts and software libraries used to display the Service. Like any website, these providers receive your IP address and browser information when your browser requests those files.

7. Other Disclosures

• Legal requirements: We may disclose information if required by law, subpoena, or court order, or when we believe in good faith it is necessary to protect the safety, rights, or property of our users, the public, or Remea.
• Business transfers: If Remea is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
• With your consent: We may share information in other ways when you direct us to.

8. Security and Encryption

• In transit and at rest: Information is encrypted in transit (HTTPS) and encrypted at rest by our infrastructure provider using industry-standard 256-bit AES encryption.
• End-to-end encrypted Vault Dispatches: Dispatch messages, attachments, and attachment file names are encrypted on the sender's device (RSA-OAEP 2048 with AES-GCM 256) so that only the recipient's key can open them. Remea cannot read them. We can see limited information needed to deliver them, such as who sent a dispatch, who it's for, and when it unlocks.
• Your encryption keys: Your Vault private key is stored in your browser. A backup copy is stored on our servers only in locked form, protected by your password and by your recovery code — never in a form we can open.
• Optional Archive encryption: Files you mark "Encrypt this file" are encrypted on your device with a key protected by your password before they are uploaded.
• No system is perfectly secure. We work to protect your information but cannot guarantee absolute security. If a breach affects your personal information, we will notify you as required by law.

9. Children's Privacy (COPPA)

Remea accounts are for adults 18 and older. We do not knowingly collect personal information directly from children, and children may not use the Service.

• Dependent profiles: A parent or legal guardian may add information about their child — such as name, date of birth or due date, and photos — through a Dependent profile. All information about a minor comes from their parent or guardian acting on the child's behalf.
• How it's used: To display the child in the family tree, show birthdays to connections if the parent turns on sharing, and power optional features the parent chooses, such as Weave storybooks. If the parent chooses to create an illustrated avatar, the child's photo is processed by our AI providers for that purpose (see Section 4).
• Parental rights: A parent or guardian can review, edit, stop sharing, or delete their child's information at any time in the app or by emailing support@remeaeco.com.
• If we learn otherwise: If we learn that a child has provided personal information directly, we will delete it.

10. Deceased Users, Memorials, and Legacy Contacts

As a digital legacy platform, preserving information after a person's death is a core purpose of the Service.

• Legacy contacts: You may designate a primary and secondary legacy contact. After your passing, only a designated legacy contact may ask us to activate your legacy, and each request must include proof of passing, which we review before anything changes.
• After activation: Your account becomes a memorial, and your legacy contacts may be given access to your Vault and Archive content, including encrypted items, through a locked copy of your encryption key held for them. Please choose your legacy contacts carefully.
• Memorials created by others: Family members may create memorials for loved ones. If you are a family member of someone memorialized on Remea and have concerns, contact us.
• Documentation: We may request official documentation, such as a death certificate or Letters Testamentary, consistent with the Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) and similar laws.

11. Data Retention and Account Deletion

We keep your information for as long as your account is active and as needed to provide the Service. We keep earlier versions of your profile for a limited period so that we can recover information if something goes wrong.

A lapsed or canceled subscription is not account deletion. If a paid subscription ends, your account simply returns to the free Foundation tier — your data is never deleted, hidden, or made permanently inaccessible as a result, regardless of how long the account remains on the free tier. See our Terms of Service for the specific grace period and data-export details that apply in this situation.

How to delete your account:

• In-App: Go to Settings > Account Settings > Delete Account and confirm.
• By Email: Contact support@remeaeco.com with the subject line "Account Deletion Request." We will verify your identity before acting on an email request.

What happens when you delete your account: Deletion is permanent. Your account, profile, family tree, Archive files, uploaded media, AI companion conversations, and encryption keys are removed from our active systems, and any active subscription is canceled. Please export anything you want to keep first.

• Backups: Copies may remain in our backup systems for up to 30 days before they are overwritten.
• Entangled Data: Information that has become part of other users' experience may remain without your personal identity attached. For example, photos you added to a shared memorial stay on that memorial, and other people's family trees keep your name as they entered it, but no longer link to your account.
• Vault Dispatches you sent: Dispatches you sent, including their attachments, may no longer be available to recipients after you delete your account. Recipients should download anything they want to keep.
• Deletion feedback: If you choose to tell us why you are leaving, we keep that feedback, along with your name and email as they were at the time, to improve the Service.
• Legal obligations: We may keep limited information where required for legal, tax, fraud-prevention, or dispute purposes.

12. Your Rights and Choices

• Access and export: You can view and download your Archive files and Vault Dispatches from Account Settings at any time, on any plan.
• Correction: You can edit your profile, tree, and other information in the app.
• Deletion: You can delete individual items or your entire account, as described in Section 11.
• Sharing controls: You can choose what to share with your ecosystem, whether connections of your connections can find you by name, and whom to block or disconnect from.
• State privacy rights: Depending on where you live (for example, California, Colorado, Connecticut, Virginia, and other states with consumer privacy laws), you may have the right to know what personal information we have about you, to access, correct, or delete it, to obtain a portable copy, and to opt out of the sale of personal information or targeted advertising (we do neither). To make a request, email support@remeaeco.com. We will verify your identity and respond within the time required by law (generally 45 days). You may use an authorized agent, and you may appeal a decision by replying to our response. We will not discriminate against you for exercising these rights.

13. Browser Storage, Cookies, and Tracking

We do not use advertising cookies, analytics, or tracking pixels. The Service uses your browser's storage only for things it needs to work: keeping you signed in, holding your Vault encryption key on your device, and remembering small settings (such as whether you dismissed a notice). Because we don't track you across websites, we treat "Do Not Track" and Global Privacy Control signals as already satisfied.

14. Where Information Is Stored

Remea is operated from the United States, and your information is stored and processed in the United States. The Service is intended for users in the United States.

15. Changes to This Policy

We may update this policy from time to time. If we make a material change, we will notify you in the Service or by email before it takes effect, and update the "Last Updated" date above.