Data & Privacy Policy
Last updated: 3rd October 2026
This policy explains what personal data rmndr collects when you use our app and website, why we collect it, who we share it with, how long we keep it, and the choices you have.
1. Who we are
rmndr is provided by RMNDR LTD, a company registered in England and Wales, with its registered office at 86-90 Paul Street, London, EC2A 4NE, United Kingdom.
We are the data controller for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO) under registration number ZC167900.
For any privacy question or request, email hello@thermndr.com.
2. What we collect, why, and our legal basis
2.1 Your account
What: your name and email address, plus either a password or Sign in with Apple. If you use Sign in with Apple, you can choose to share a private relay email address instead of your real one. Passwords are handled by our sign-in provider and stored in hashed form; we never see them in plain text.
Why: to create and run your account and provide the service.
Legal basis: contract — we need this to provide the service you signed up for (Article 6(1)(b) UK GDPR).
2.2 Your health information
What: the medications you add; your reminders (names, times and days); each dose you log; your adherence stats; your garden, which is worked out from your logged doses; dashboards you share; and PDF reports you create.
Why: to send your reminders, record your doses, show your progress, and let you share it with people you choose.
Legal basis: this is special category (health) data. We process it only with your explicit consent, which we ask for during sign-up, or for existing members when they first open the updated app (Article 9(2)(a) UK GDPR), alongside contract as our Article 6 basis.
Withdrawing consent: you can withdraw it at any time by deleting your profile (Profile → Delete profile) or by emailing us. rmndr can't remind you or track your doses without this information, so withdrawing consent means we'll delete your health information and you won't be able to keep using the app's reminder and tracking features. Withdrawal doesn't affect processing that happened before it.
2.3 Dose photos
What happens: when you photograph a dose, the app makes a downscaled copy and sends it to an AI service that checks a medication container is in the picture. Neither the app nor our servers store the photo.
Who processes it: Anthropic PBC, acting as our processor, in the United States. Under Anthropic's commercial terms, inputs are deleted from its systems within 30 days, or kept for up to 2 years if flagged as breaching its usage policy, or longer where the law requires. Anthropic does not use these photos to train its AI models. We may change provider; if we do, we'll update this policy.
Why: to confirm your dose check-in.
Legal basis: a photo of your medication can reveal health information, so it's covered by the same explicit consent as Section 2.2. Section 4 explains how the automatic check works.
2.4 Subscriptions and payments
App Store: Apple takes your payment. We receive your subscription status and transaction identifiers(including the original transaction ID and an account token that links your Apple purchase to your rmndr account), and Apple tells us about renewals, cancellations, refunds and billing problems.
Website members: if you subscribed through our website, Stripe takes your payment and gives us equivalent subscription and transaction records.
We never receive or store your full card details.
Legal basis: contract; and legal obligation for the billing records we must keep for tax purposes (Article 6(1)(c) UK GDPR).
2.5 Device information
your push notification token, so we can deliver your reminders (contract);
your app and system versions, so we can support your device and fix problems (legitimate interests);
device checks that protect against abuse (App Check), which confirm that requests come from a genuine copy of our app on a real device (legitimate interests in keeping the service secure);
the identifier our analytics uses — a random ID created when the app is installed, which is not linked to your account (see Section 3).
When the app connects to our servers, your IP address is necessarily visible to us and our providers. We don't use it to locate or profile you, and technical logs that may contain it are kept for up to 30 days.
2.6 Emails
We use an email service provider (currently Mailchimp) to send our emails. It receives your name and email address, including those of people who bought from our website, and sends onboarding emails such as our first-reminder emails.
Service emails (such as purchase confirmations, onboarding and important account or policy notices) are sent because they're part of providing the service (contract and legitimate interests).
Marketing emails are only sent if you've agreed to receive them (consent). Every marketing email has an unsubscribe link.
2.7 Optional demographics
What: if you choose to, your gender and age band (for example 25–34). We don't ask for your date of birth, and "Prefer not to say" is always available.
Why: to understand who uses rmndr, in aggregate.
Legal basis: consent. You can change or remove these at any time in the app.
2.8 Support
If you contact us, we keep your messages and anything you send with them (such as screenshots), so we can help you (legitimate interests).
We do not sell your personal data, use advertising identifiers, or track you across other companies' apps or websites.
3. Usage stats
What we collect
We collect usage stats: which screens you open, what you tap, and app events (for example, completing a step of sign-up). Usage stats never include your name, email, medications, reminder titles, or anything about when you take your doses.
They are tied to the random analytics identifier described in Section 2.5, not to your account, and we only look at overall patterns, not at individual people.
Why
To help develop the app, build new features and improve the overall member experience.
Our legal basis is legitimate interests (Article 6(1)(f) UK GDPR). UK law allows us to store and read this identifier on your device for statistics like these without asking first, as long as we explain it clearly and make it easy to switch off, which is what this section and the setting below are for.
How to turn it off
Usage stats are on by default. You can turn them off on the Welcome screen when you first open the app, or at any time in Profile → Permissions. Once off, the app stops sending usage stats from your device.
How our analytics provider uses it
Our analytics provider (Google Analytics for Firebase) processes usage stats only on our behalf. We don't use it for advertising, Google signals is switched off, and we don't allow Google to use the data for its own purposes.
How long we keep it
device-level data: up to 2 months in Google Analytics, and 35 days in our analytics export (Google BigQuery);
after that, we keep only anonymous weekly totals, which can't be linked back to any device or person, indefinitely.
4. Automatic photo checks
Dose photos are checked automatically by the AI service described in Section 2.3. The check only looks for a medication container in the picture. It doesn't identify you, doesn't check what or how much you took, and doesn't make any decision with legal or similarly significant effects on you.
If a photo is rejected (for example because the medication container isn't visible or the lighting is poor), the dose isn't logged. Doses can only be logged with a photo, so you'll need to take another one. Rejected photos are not stored by us either.
5. Who we share your data with
We only share what each provider needs to do its job, under contracts that require them to protect it:
Google (Firebase): sign-in, our database, server functions, notifications and analytics.
Anthropic: checking dose photos (Section 2.3). This provider may change.
Apple: App Store payments and subscription management; Stripe for website members.
Our email service provider: currently Mailchimp (Section 2.6). This provider may change.
People you invite to your dashboard: if you invite a family member, friend or healthcare professional, they can see your medication and adherence information. Invites are sent from your own phone, so we never receive the recipient's number. You can remove their access at any time in the app, but we can't recall anything they've already seen or saved. See our Dashboard Sharing Policy.
We may also disclose data where the law requires it, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of our business, in which case your data stays protected by this policy.
We may share aggregated insights (for example, by age band or gender) that cannot identify you.
6. Where your data is processed
Our main database is in London, UK.
Our analytics export is in Belgium, in the EU, which the UK recognises as providing adequate protection.
Our server functions, which handle things like reminders, subscriptions and photo checks, run in the United States.
Our photo-check and email providers are based in the United States. Apple and Stripe may also process data there.
For transfers to the US, we rely on the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge") where the provider is certified under it, and otherwise on the UK Addendum to the EU standard contractual clauses in the provider's data processing terms. You can ask us for details of these safeguards.
7. How long we keep your data
Account and health information: until you delete your account. When you delete your profile (Profile → Delete profile), your account and health information are deleted from our systems immediately.
Unfinished sign-ups: if you start signing up but don't finish, we delete that data after 30 days of inactivity.
Dose photos: not kept by us. Our photo-check provider keeps them as described in Section 2.3.
Usage stats: as described in Section 3. Because they aren't linked to your account, they can't be deleted with it; they age out on the schedule above.
Marketing: until you unsubscribe or withdraw consent.
Support messages: up to 3 years after the conversation ends.
Billing and tax records: 6 years, as HMRC requires, even if you delete your account.
Consent records (which version you agreed to, and when): 7 years after you withdraw consent or close your account, so we can show we acted lawfully.
8. Your rights
You have the right to:
Access the personal data we hold about you;
Correct anything inaccurate or incomplete;
Delete your data — you can do this yourself in Profile → Delete profile;
Restrict how we use your data;
Object to our use of your data, including turning off usage stats (Section 3);
Data portability — receive the data you gave us in a commonly used, machine-readable format;
Withdraw consent for health data (Section 2.2) or marketing at any time, without affecting earlier processing;
Complain to the ICO, the UK data protection regulator, at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to resolve your concern first.
In the app you can also edit or delete reminders, change notification settings, remove camera permission in your device settings (though you then won't be able to log doses), update your demographics, and remove anyone's access to your dashboard.
To exercise any right, email hello@thermndr.com. We'll respond within one month. As we don't keep dose photos, we can't provide copies of them.
9. Minimum age
You must be at least 16 to use rmndr, in line with our Terms of Service. We don't knowingly collect personal data from anyone under 16. If a parent or guardian uses rmndr on behalf of a dependent under 16, the account belongs to the parent or guardian. If you think we've collected data from a child under 16, please contact us and we'll delete it.
10. Security
We protect your data with encryption in transit and at rest, App Check device verification, and access limited to the people who need it. No system is completely secure; if a breach affects your data, we'll tell you and the ICO where the law requires.
11. Website cookies
Our website (thermndr.com) uses strictly necessary cookies, and analytics or marketing cookies only with your consent through our cookie banner. You can change your choice at any time through the banner or your browser settings. The app does not use cookies.
12. Changes to this policy
We'll post any update here with a new "Last updated" date. If we make a significant change, we'll tell you in the app or by email before it takes effect and, where needed, ask for your consent again.
13. Contact us
Email: hello@thermndr.com
Post: RMNDR LTD, 86-90 Paul Street, London, EC2A 4NE, United Kingdom