Privacy statement

Remind helps users gain insight into their brain health through short measurements and analyses. We highly value your privacy and briefly explain below how we handle your data.

1. What data do we collect?

Account details: email address. If you choose to log in using Google or Apple, we also receive an identification code from that provider, and your name if the provider shares it. If you use Apple’s ‘Hide my email’ option, we may also ask you for a contact address so we can reach you regarding your account.

Voice recordings: short audio fragments via the microphone (max. 1 minute).

Typing behaviour: speed, rhythm, pressure, and timing while typing, never the content of what you type. This data is collected via the NeuroKeys app from our partner Neurocast B.V., which you install separately. For activation, you will receive a personal access code from Remind. During the installation of NeuroKeys, you will be asked for permission to access the keyboard, sensors, and location data required to analyse typing behaviour. The raw data is processed on the secure servers of Neurocast; only aggregated analysis results are sent back to Remind. Those results include an indication of brain age, a general indication of cognitive performance, and a brain health score.

Questionnaires: answers regarding lifestyle, memory, mood, and daily functioning.

Profile information: age, gender, education, language, cultural background, daily activities, family history, and any neurological or psychiatric diagnosis (optional).

Usage and analysis data: data about the use of our website and app, such as visited pages, interactions in the app, error messages, crash reports, and general usage patterns. On the website, this data is not linked to your account. In the app, it is linked to your account as soon as you log in, and remains anonymous before you log in. This data is collected via analysis tools (Google Analytics for the website, and Firebase Analytics, Firebase Crashlytics, and PostHog for the app) and does not contain the content of measurements or medical data.

Session recordings: recordings of how the app is used, in which all text and images are masked. See section 5.

Rémi’s memory: short facts that Rémi, the AI coach in the app, remembers from your conversations with your permission. See section 6.

Install measurement: the app contains software from Meta that uses the device’s advertising ID to measure which campaign led to the app being installed. This happens on Android and on iPhone, and only if you give permission for it in the app. We ask for that permission separately and you can withdraw it at any time in the settings. On iPhone, Apple then asks for permission once more of its own. With the same permission, we also let Google measure through Firebase which advert led to the install. If you do not give permission, Meta measures nothing and Firebase’s advertising signals stay off. No measurement results or health data are shared in the process. See section 8.

Advertising audiences: we may upload the email addresses of registered users to Meta (Facebook and Instagram). Meta encrypts those addresses and uses them to see which of its users also use Remind. That lets us exclude this group from install ads, and lets Meta look for people who resemble our users. We share only the email address in the process. Never your measurement results, your answers or any other data about your health.

2. What do we use this data for?

The data is used to show you personal insights into your brain health and to analyse trends at a group level for product improvement.

Analyses are carried out via our technology partners:

Canary Speech (speech)
Neurocast / NeuroKeys (typing behaviour)
MemoryLab Health (memory)

The app does not make medical diagnoses and only uses data with your consent.

In addition, we use analysis data and session recordings to understand the use and functioning of our website and app, so that we can improve performance, resolve errors, and improve the user experience. These analyses are not intended for advertising purposes.

We may use your email address to inform you about your account, measurements, progress, and results in the app. These are so-called service- and content-oriented emails, for example when a measurement is completed, when something has gone wrong, or when new insights are available.

We only share data with carefully selected processors who make the app possible and who act on behalf of Remind under data processing agreements:

Neurocast B.V. / NeuroKeys: collects typing behaviour via the keyboard and performs analyses.
Canary Speech Inc.: processes voice recordings.
MemoryLab Health B.V.: processes memory analyses.
PostHog: provides product analytics and session recordings (session replay). This data is stored within the European Union.
Google (Firebase Analytics and Firebase Crashlytics): provides usage statistics and crash reports for the app, and Google Analytics for the website.
Amazon Web Services (AWS): provides the language-model answers of Rémi, exclusively on servers within the European Union, and does not keep the content of conversations. See section 6. AWS also sends our emails about your account, from servers in Ireland. See section 9.
Apple and Google: confirm your identity when you log in with your Apple or Google account. We never receive your password.
RevenueCat: manages subscriptions and determines if your Remind+ subscription is active. RevenueCat receives your account identification code and information about your purchase, not your health data.
Intuit Mailchimp: sends our newsletter. See section 9.
Hosting and analysis providers: ensure secure storage, error resolution, and performance monitoring.

These parties may not use the data for their own purposes.

Meta (Facebook and Instagram). For advertising we upload email addresses to Meta, as described in section 1, and Meta’s software in the app measures installs if you give permission for it. Meta is not a processor here. Remind and Meta Platforms Ireland are joint controllers for collecting and transmitting this data (Article 26 GDPR); what Meta does with the data afterwards is Meta’s own responsibility. Read how Meta handles data in Meta’s privacy policy (opent in een nieuw venster).

Google Ads. To measure our adverts, Google receives data from our website and app, as described in section 8. Google acts as an independent controller for this. If you would rather we did not, let us know at privacy@remindbrainhealth.com and we will remove you from these audiences.

No data is sold. Apart from the install measurement and the advertising audiences described in section 1 and the advert measurement described in section 8, we do not share anything with third parties for marketing purposes.

4. How you log in

You can log in using a link sent to your email address, with your Google account, or with your Apple account.

If you log in with Google or Apple, that provider confirms to us that you are who you say you are. We receive an identification code, your email address, and your name if the provider shares it. Apple only shares your name the first time. We never receive your password. We keep the identification code so we can recognise you next time you log in.

If you use Apple’s ‘Hide my email’ option, Apple gives us a forwarding address instead of your actual email address. We may then ask you for a contact address so we can reach you about your account. Providing that address is your choice.

If you delete your account and are logged in with Apple, we will also ask Apple to unlink your Apple account from Remind.

5. Session recordings

To understand how the app is used, we record how people navigate through the app: which screens are opened, in what order, and where people experience difficulties. These recordings are made via PostHog and stored in the European Union.

All text and all images in these recordings are masked. We see the structure of a screen and where you tapped, but not what is on it. Your answers, your results, and your conversations with Rémi are not readable in a recording.

We do not record every session. Approximately one in five sessions is recorded, and very short sessions (less than two seconds) are not recorded at all. Recordings are automatically deleted after 30 days.

We also do not store your full IP address: it is anonymised upon entry.

6. Rémi, your AI coach

Rémi is the coach in the app: a chatbot based on artificial intelligence that you can talk to about habits, lifestyle and your own results.

Your conversations with Rémi are not stored on our servers. They sit encrypted on your device and disappear as soon as you log out.

Rémi only uses your data with your explicit permission. The app asks for two separate permissions, which you can give independently and withdraw at any time in the settings:

Profile and measurement results. Rémi may see your first name, age, sex at birth, first language and education level, your measurement results as you see them in the app yourself, and which brain games you play, roughly how often and when you last played. Never your surname, email address, date of birth or the scores of games.
Remembering. Rémi may keep short facts from your conversations, such as your goal or your home situation. A few answers to health questions from the onboarding are then also copied once as such facts, so Rémi does not have to ask about them again. In the app you can see exactly what Rémi remembers, edit or delete any fact, or erase everything at once. If you withdraw this permission, everything Rémi has remembered is erased immediately, including your goal and your daily check-in. When you delete your account, Rémi’s memory is always erased, under both deletion options in section 7.

Without these permissions Rémi still works, just without that data.

Rémi’s answers are generated by a language model that runs via Amazon Web Services exclusively on servers within the European Union. AWS acts as a processor and does not keep the content of the conversations. Anthropic, the maker of the language model, has no access to the content. Conversations are never used to train the model.

7. How long we keep data, and deleting your account

Your data is kept for as long as your account is active. You can delete your account at any time via the app, and you can choose from two options.

Complete deletion. Your account and your data will be deleted. There is a 30-day recovery period first, so that accidental deletion can be undone. If you log in again within those 30 days, the deletion will be cancelled. After 30 days, your account, your measurements, and your results will be permanently deleted, we will ask Apple to unlink your Apple account, and we will remove you from our mailing list.

Remove personal data, keep results for research. Your name, email address, contact address, and links to your Apple or Google account will be erased. Your measurements and results will be kept, as well as your date of birth, gender, native language, and education level, because these are needed to interpret the measurements.

Since those background details are kept, the result of that second option is not fully anonymous. It is what the law calls pseudonymised: the data can no longer be traced directly to you by name, but re-identification based on a combination of characteristics cannot be ruled out in principle. We therefore continue to treat this data as personal data and protect it as such, and you can still ask us to delete it completely.

Pseudonymised research data is kept for as long as it is needed for that research. We assess at least once a year whether longer retention is justified.

Session recordings are automatically deleted after 30 days.

8. Cookies, analysis and advertising

How Google uses your data. On the website and in the app, we use Google services to measure how our adverts perform. Google uses the data it receives from us under its own rules. Read how Google does this at business.safety.google/privacy (opent in een nieuw venster).

Measurement only, no personalised adverts. We use this data to see which adverts lead to a visit, a sign-up or an install. We never give Google or Meta permission to show you personalised adverts based on it.

On the website. We use Google Analytics to understand how visitors use the website, so we can improve its performance and content. If you click Accept in the cookie notice, we set analytical cookies and cookies from Google Ads and Meta that measure how our adverts perform. If you click Reject or do nothing, we do not set those cookies. Google then only receives a signal without cookies, which it uses to estimate how many adverts lead to a visit. Rejecting changes nothing about how the website works. You can change your choice at any time through Cookie preferences at the bottom of every page.

In the app. The app asks separately whether we may tell Google and Meta that you installed Remind (see section 1). If you say yes, Firebase’s advertising signals are switched on and Meta’s software measures the install. If you say no, those signals stay off and Meta’s software is never started. Saying no changes nothing else about the app. You can change your choice at any time in the app’s privacy settings.

In the Remind app, we use Firebase Analytics, Firebase Crashlytics, and PostHog to analyse the performance and use of the app, such as stability, performance, crash reports, and general usage patterns. PostHog also creates the session recordings described in section 5.

You can also delete or block cookies through your browser settings.

9. Email communication

When you create an account, we send you emails about using Remind: a welcome email, an explanation of the first result of a measurement, a reminder when you can take a measurement again, a short series of articles about lifestyle, a confirmation when you turn NeuroKeys on or off, and messages about your Remind+ subscription. These emails never contain your scores or results. You only see those in the app.

If you use the free version, we may also occasionally send you an email about Remind+, the paid subscription. There are at least two weeks between two such emails.

We send these emails ourselves, through Amazon Web Services on servers in Ireland, from hello@remindbrainhealth.com. We keep track of which email we sent and when, so you never get anything twice or too often. If an email cannot be delivered because the address does not exist, or if someone marks an email as spam, we send nothing more to that address. To do that we keep a one-way code of the address instead of the address itself, also after an account has been deleted.

These emails contain an invisible image. When your email app loads it, we can see that the email was opened. That tells us which emails people read, so we can rewrite or drop the ones that add little. For each email we keep only when the image was first loaded, and whether that happened through Apple, through Gmail or directly. We do not keep your IP address. The email with your sign-in link does not contain this image. If you would rather we didn’t, turn off loading images in your email app, or turn the emails off as described below.

You can turn all of these emails off at once with the link at the bottom of every email, or in the app under Settings, at Emails from Remind. Only the email with your sign-in link keeps coming, because you cannot sign in without it.

We send our newsletter through Intuit Mailchimp. Every newsletter also has an unsubscribe link at the bottom.

10. Security

All data is encrypted during transmission and storage.

Only authorised employees and processors have access.

11. Your rights

You have the right to access, correction, deletion, and the withdrawal of consent. You also have the right to object to or request restriction of processing, and to receive your data in a portable format. If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Please contact us at privacy@remindbrainhealth.com.

12. Contact information

Remind B.V. Netherlands KvK (Chamber of Commerce): 97661317 Email: privacy@remindbrainhealth.com