Privacy Policy

Last updated: October 6, 2026

BeReminded (“BeReminded,” “we,” “us,” or “our”) operates the recurring-reminder service at bereminded.app (the “Service”). This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. This Policy applies when you use the Service. If you do not agree with it, please do not use the Service.

The short version

  • We collect your email to sign you in, and — only if you choose text reminders — your mobile number.
  • We store the reminders you write and send them back to you. That’s what the app does.
  • We never sell your data, and we never send marketing texts.
  • We use a small set of service providers (database, email, SMS, analytics, payments) to run the app. We list every one below.
  • You can delete everything by emailing [email protected].

This summary is for convenience; the full Policy below governs.

1. Definitions

  • “Personal Information” means information that identifies, relates to, or could reasonably be linked to you, such as your email address, mobile phone number, or the text of a reminder you write.
  • “Reminder Text” means the free-form sentence you write to describe a reminder — for example, “change the smoke detector batteries.” Reminder Text is limited to 280 characters. It is the content we deliver back to you by email or text message.
  • “Subprocessor” means a third-party company that processes Personal Information on our behalf to help us operate the Service.
  • “SMS” means a text message sent to your mobile phone.

2. Scope

This Policy applies to Personal Information we collect through the Service: our website, our web application, and the email and SMS messages we send you.

The Service is operated from, and intended for users located in, the United States (see Section 12). This Policy does not cover any third-party website, service, or application that we link to but do not operate. Third parties have their own privacy practices, described in their own policies.

3. Information We Collect

We collect only the information we need to run the Service. We itemize every field below. We do not collect your name, your street address, or your date of birth, and our application code does not log your IP address or browser user-agent (but see Section 6 for network-layer and analytics collection by our infrastructure and analytics providers).

3.1 Information you provide

  • Email address. Required to create an account. We use email-based magic links and one-time codes for sign-in. We do not use or store passwords.
  • Mobile number. Optional. You provide a number with the +1 country code only if you choose to receive reminders by text message. We store it in standard E.164 format. If you never opt in to SMS, we do not collect a phone number. See Section 10 for how we handle your number.
  • Reminder Text. The sentence you write for each reminder. Please read this carefully: because Reminder Text is free-form, it may contain sensitive details if you choose to write them — for example, notes about your health, finances, household, or personal life. We store your Reminder Text and send it back to you in the body of the email or SMS reminder. We do not require or ask you to include sensitive information, and we recommend you keep reminders brief. You control what you write.
  • Postal code. Optional. You may provide a postal (ZIP) code to enable seasonal or region-aware reminders. We collect the postal code only. The Service is designed to refuse full street addresses, and we do not collect them.
  • Onboarding answers. During setup you may select reminder categories from a fixed catalog (for example, home or car). These are menu selections, not free text.

3.2 Information collected automatically

  • Time zone. When you create your first reminder, we derive your time zone from your browser so reminders arrive at the right local time. We store the resulting time-zone value (for example, “America/New_York”) — we do not store your GPS location or street address.
  • Analytics and network data. Our analytics provider and our network provider receive limited technical data, including your IP address and browser user-agent. From these, our analytics provider derives approximate location (such as city or region) and device and browser characteristics. Our own application code does not log your IP address or user-agent. Reminder Text is not sent to our analytics provider. See Section 6 for detail.

3.3 Authentication information

We authenticate you using email magic links and one-time passcodes (OTP) provided through our authentication subprocessor. We do not store passwords and we do not use third-party social logins (such as “Sign in with Google”).

3.4 Subscription and billing information

If you purchase BeReminded Plus (our paid plan, priced at $24 per year), our payment processor handles your payment. We do not collect or store your full payment card number. We store billing metadata such as your payment-processor customer ID, subscription ID, and plan status. See Section 5 for details on our payment processor.

4. How We Use Your Information

We use Personal Information only for the purposes below.

  • To provide the Service. To create and manage your account, store your reminders, and calculate when each reminder is due.
  • To deliver reminders. To send your Reminder Text to you by email or, if you opted in, by SMS, on the schedule you set.
  • To authenticate you. To send magic-link and one-time-passcode sign-in messages and keep you signed in.
  • To process payments. To start, manage, renew, and cancel a BeReminded Plus subscription.
  • To send service and lifecycle email. To send transactional and account messages, such as sign-in emails, receipts, and important notices about the Service.
  • To send marketing email (email only, with opt-out). We may send occasional product or marketing email. Every marketing email includes a one-click unsubscribe link. We do not send marketing or promotional messages by SMS (see Section 10).
  • To understand and improve the Service. To analyze aggregate, event-level usage — such as how many reminders are created and which delivery channel is used — using the privacy-limited analytics described in Section 6.
  • To secure and maintain the Service. To detect, prevent, and respond to fraud, abuse, security incidents, and technical problems.
  • To comply with law. To meet legal obligations and respond to lawful requests (see Section 5).

We do not use your Reminder Text to build advertising profiles, and we do not sell your Personal Information (see Section 5).

5. How We Share Your Information

We do not sell your Personal Information, and we do not share it for cross-context behavioral advertising — that is, we do not share it so that other companies can target ads to you across different websites and apps. We share Personal Information only in the limited circumstances below.

5.1 Subprocessors

We rely on the third-party providers below to operate the Service. Each processes Personal Information primarily to provide its service to us, and each is subject to its own privacy policy (linked below). We share only the data each provider needs for its function, and we do not authorize any of them to sell your Personal Information or use it to market to you on their own behalf.

SubprocessorPurposeData sharedPrivacy policy
Supabase (self-hosted)Primary database, authentication, and sign-in emailEmail, mobile number, Reminder Text, postal code, time zone, plan status, payment-processor IDssupabase.com/privacy
TwilioSMS deliveryMobile phone number, Reminder Texttwilio.com/legal/privacy
ResendEmail delivery (reminders, lifecycle, and marketing email)Email address, Reminder Textresend.com/legal/privacy-policy
PostHog (US cloud)Product analyticsUser ID, email address, sign-up date, plan, and event metadata (reminder IDs, delivery channel, counts); IP address at ingestion. Reminder Text is not sent.posthog.com/privacy
StripePayment processingEmail address and user ID at checkout; stores customer and subscription IDsstripe.com/privacy
CloudflareNetwork ingress / traffic routingInbound network traffic and IP addressescloudflare.com/privacypolicy

5.2 Legal process and safety

We may disclose Personal Information if we reasonably believe it is required to comply with a law, regulation, subpoena, court order, or other lawful government request, or to protect the rights, property, or safety of BeReminded, our users, or the public.

5.3 Business transfers

If BeReminded is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its assets, Personal Information may be transferred as part of that transaction. We will seek to require the successor to honor this Policy or to provide notice before your Personal Information becomes subject to a materially different policy, and we will notify you (for example, by email or a notice on the Service) of any change in who controls your Personal Information.

5.4 What we do not do

We do not sell your Personal Information. We do not rent, trade, or disclose your Personal Information to third parties for their own marketing. We do not share mobile numbers or SMS consent with third parties or lead generators for their own marketing. Necessary service providers process this data to provide the Service (see Section 10).

6. Cookies & Analytics

We keep tracking to a minimum. We do not run a general advertising network. We do not currently display a cookie-consent banner; because the Service is operated for U.S. users and is not subject to laws that mandate one (see Sections 9 and 12), we instead disclose our limited use of cookies and analytics plainly below.

6.1 Cookies and local storage we use

  • Authentication and session cookies (essential). Set by our authentication subprocessor to keep you signed in. The Service does not function without these.
  • bm_anon_id (first-party analytics identifier). A random, first-party cookie that expires after 90 days. It contains a random identifier only — no Personal Information — and is used to associate anonymous usage before sign-up with your account after you sign up.
  • Analytics cookies and local storage. Our analytics provider (PostHog) sets first-party cookies and local-storage values, such as an analytics identifier and your opt-out state.

6.2 What our analytics does and does not capture

Our analytics is deliberately narrow:

  • Session replay is turned off across the entire Service.
  • Autocapture is turned off — we do not automatically record clicks or page interactions.
  • Reminder Text is masked and is not sent to our analytics provider. Analytics events carry identifiers and counts (such as reminder IDs, delivery channel, and totals), not the content of your reminders.
  • Our analytics provider does receive your user ID, email address, sign-up date, plan, and IP address at the time events are recorded.

6.3 Your analytics choices

We want to be straightforward about the controls that exist today:

  • There is no in-app analytics opt-out toggle, and we do not currently honor browser Do-Not-Track (DNT) signals for general users. We are disclosing this plainly rather than implying a control that does not exist.
  • You can request analytics exclusion by email. If you email [email protected] and ask to be excluded from analytics, we will exclude you from analytics capture.
  • Browser-level controls may apply. You can block or delete cookies through your browser settings, and our analytics provider (PostHog) offers its own opt-out. These are controls offered by your browser or the analytics provider, not an in-app setting we provide. We do not currently detect or act on Do-Not-Track (DNT) or Global Privacy Control (GPC) signals ourselves.

7. Data Retention

We keep Personal Information for as long as we need it to provide the Service, and no longer than the criteria below allow.

  • Active accounts. We retain your account information, reminders (including Reminder Text), phone number, postal code, time zone, and subscription metadata for as long as your account is active or as needed to provide the Service to you.
  • Deletion on request. When you ask us to delete your account (see Sections 9 and 14), we delete your account and associated Personal Information.
  • Residual copies. After deletion, limited residual copies may persist for a reasonable period in our backups, and we may retain a minimal record where we are required to for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes (for example, payment records). Backups are overwritten or expire on a rolling basis in the ordinary course.

8. Data Security

We use reasonable administrative and technical safeguards designed to protect Personal Information, including:

  • Row-level security on our database, so records are access-controlled at the row level.
  • Encryption in transit (HTTPS/TLS) for data moving between your browser, the Service, and our subprocessors.
  • Access controls limiting who can reach production systems and data.

No method of transmission over the internet or method of electronic storage is 100% secure. While we work to protect your Personal Information, we cannot guarantee absolute security, and you use the Service at your own risk. If we become aware of a security incident affecting your Personal Information, we will notify you and any regulators where required by applicable law, and otherwise where we determine notice is appropriate.

9. Your Privacy Rights

We are a small U.S. operation and are almost certainly not subject to the California Consumer Privacy Act (as amended by the CPRA), other U.S. state privacy laws, or the EU/UK General Data Protection Regulation. We do not claim to be “compliant with” or “subject to” those laws. Even so, we voluntarily extend the following rights to all users as a matter of good practice:

  • Access. You may ask what Personal Information we hold about you.
  • Correction. You may ask us to correct inaccurate Personal Information. You can also edit most fields directly in your account.
  • Deletion. You may ask us to delete your account and associated Personal Information (see Section 7 for what deletion covers).
  • Portability. You may ask for a copy of your Personal Information in a portable format.
  • Opt-out of marketing. You may unsubscribe from marketing email at any time (see Section 4) and stop SMS at any time by replying STOP (see Section 10).

9.1 How to exercise your rights

Send a request to [email protected]. Because the Service has no in-app deletion or data-export button, we handle these requests manually. We aim to acknowledge your request within 10 business days, and respond within 45 days. If we need more time, we will tell you why and how much longer we expect to take. We may need to verify your identity — usually by confirming you control the email address on the account — before we act on a request.

9.2 Authorized agents

You may use an authorized agent to submit a request on your behalf. We may ask the agent for proof that you authorized them to act for you, and we may still ask you to verify your own identity.

9.3 No discrimination

We will not deny you the Service, charge you a different price, or provide a different quality of service because you exercised any of the rights described in this Section.

9.4 Browser-based signals

We do not currently detect or act on browser opt-out signals such as Global Privacy Control (GPC) or Do-Not-Track (DNT) ourselves, and we do not offer an in-app analytics toggle. Your browser, or our analytics provider, may independently offer such controls; those are provided by them, not by us. To be excluded from our analytics, email [email protected] (see Section 6.3).

10. SMS / Text Messaging

This Section describes our optional SMS reminder program. See our separate SMS Terms.

  • Opt-in is required and separate. SMS is entirely optional. You receive text messages only if you provide a mobile number and give explicit consent by checking an initially unchecked consent box when saving your first text reminder. You do not need to send a text to enroll. The workflow records the consent timestamp, disclosure version, exact text, program, sender and a hashed destination. Web consent does not independently verify possession of your number. Stopping texts or removing the saved phone closes that record with the revocation time and reason; it does not turn historical consent into permission to send. Account deletion removes the associated consent history. The delivery workflow also keeps the destination number, reminder text, scheduled occurrence, consent snapshot, attempt state and provider message identifier so it can avoid duplicate sends and review uncertain outcomes. These operational records are private and are removed with the account.
  • Consent is not a condition of purchase. You are not required to agree to receive text messages in order to create an account, use the Service, or make a purchase. Email delivery is available without SMS consent.
  • What we send. We send recurring automated reminder texts for the reminders you set up, at the number on your account. Each text maps to a reminder you created. We do not send marketing or promotional texts through this program.
  • The consent disclosure you agree to. “By checking this box you agree to receive recurring automated reminder texts from BeReminded at the number on your account. Message frequency depends on the reminders you set. Message and data rates may apply. Reply STOP to cancel, HELP for help. Consent is optional and is not a condition of creating an account, using email reminders, or making a purchase. By opting in, you agree to the SMS Terms.”
  • Frequency. Message frequency depends on the reminders you set. Some people receive one text a year; others receive a few a month.
  • Cost. Message and data rates may apply. Your carrier sets those rates, not us.
  • How to stop. Reply STOP to any text to cancel; STOP prevents new reminder texts from being authorized. A provider may send an opt-out confirmation. Fresh consent is required to opt back in; texts remain paused until any provider opt-out block is resolved. Reply HELP for help. You can also switch any reminder back to email, or remove it, from your account. A text already authorized for processing may still arrive after STOP; an accepted message cannot be recalled.
  • No sale or third-party marketing. We use your mobile number to deliver the reminders you asked for. We do not sell your number or share your number or SMS consent with third parties or lead generators for their own marketing. We share your number only with our SMS delivery subprocessor, Twilio, solely to deliver the reminders you requested (see Section 5). The only other circumstances in which your number may be disclosed are those that apply to all Personal Information — a disclosure required by law and a business transfer — as described in Sections 5.2 and 5.3. In no case do we share your number with third parties for their own marketing.

11. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect Personal Information from children under 13. The Service has no age-gating mechanism, so we rely on this notice and on parents and guardians. If you are a parent or guardian and believe your child under 13 has provided us Personal Information, please contact us at [email protected] and we will delete it promptly.

12. International Users

The Service is intended for users located in the United States, and Personal Information is stored and processed in the United States. If you access the Service from outside the United States, you understand that your Personal Information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your location. We do not target the Service to users in the European Union, the United Kingdom, or other regions, and we make no representation that the Service complies with the GDPR or other non-U.S. privacy laws.

13. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date at the top. If we make material changes, we will provide notice before they take effect — by email to the address on your account, or by a prominent notice on the Service — so you have a chance to review them. Your continued use of the Service after an update takes effect means you accept the revised Policy.

Change history

  • October 6, 2026 — Clarified optional SMS consent, number handling, and service-provider processing.
  • July 13, 2026 — Initial publication.

14. Contact Us

If you have questions about this Policy or want to exercise a privacy right, contact us:

Privacy Policy — BeReminded.app