Privacy Policy · Rimembra

Rimembra is building AI that learns how a person thinks. What people will one day entrust to us is deeply personal, so we want to be clear about privacy from the very first email address.

This policy explains what we collect through rimembra.ai, our blog, our waitlist and our emails, why we collect it, who helps us process it, and the choices and rights you have.

The short version

We collect very little: your email address if you join the waitlist or subscribe, and the basic technical information any website needs to work and stay secure.
We use your email address only to send you launch updates, new articles and your invitation when access opens. You can unsubscribe at any time.
We don't sell your information, we don't use it for advertising, and we don't use advertising or tracking cookies.
A few trusted providers help us run the site and send email. They process information on our behalf and under our instructions.
You can ask to see, correct or delete your information at any time by writing to privacy@rimembra.ai.
Rimembra itself (the interviews and your Persona) isn't available yet. Before anyone shares that kind of material with us, we'll publish a separate privacy notice and ask for explicit consent.

1. Who we are

"Rimembra", "we", "us" and "our" mean Rimembra, operating from the United Arab Emirates. We decide how and why your personal information is processed through this website, which makes us the data controller (in UAE law, the "controller") of that information.

You can contact us about privacy at privacy@rimembra.ai. For anything else, write to hello@rimembra.ai.

2. What this policy covers

This policy covers:

the website at rimembra.ai, including the blog;
the waitlist and newsletter sign-up forms;
the emails we send, and any messages you send us.

It doesn't cover the Rimembra product itself, because it isn't open yet. See section 12.

3. What we collect

Information you give us

Your email address, when you join the waitlist or subscribe to the blog.
Which form you used (for example, the home page or a blog post), so we understand what brought you here.
What you choose to tell us when you reply to an email or write to us, such as your name and the content of your message.

Please don't send us sensitive information, such as health details, by email. We don't need it at this stage.

Information collected automatically

Technical request data. Like every website, ours receives standard information from your browser when you visit: your IP address, browser and device type, the page you asked for, the page that referred you, and the date and time. Our hosting provider, Cloudflare, processes this to deliver the site and protect it from abuse.
Aggregate visit statistics. We use Cloudflare Web Analytics to see things like how many people visit and which pages they read. It doesn't use cookies, doesn't follow you across other websites and doesn't build a profile of you. We only see totals.
Email engagement. Our email provider records whether our emails are delivered, opened and clicked, so we can keep the list healthy and understand which updates are useful. You can avoid open tracking by not loading images in your email client.

Information we don't collect

We don't use advertising or tracking cookies, and we don't set any cookies of our own.
We don't buy personal information from other companies or combine your email address with information from other sources.
We don't ask for sensitive information through this website.

4. How we use your information, and why we're allowed to

Sending you updates. We confirm your sign-up (double opt-in) and send you launch updates, new articles and your invitation when access opens. Uses: your email address, the sign-up form and email engagement. Legal basis: your consent, which you can withdraw at any time.
Replying to you. When you write to us, we use your email and message to answer. Legal basis: our legitimate interest in responding, or taking steps you've asked for.
Running and protecting the site. We use technical request data to deliver the site, keep it secure and prevent abuse, such as spam sign-ups. Legal basis: our legitimate interest in a working, secure website.
Improving the site. We look at aggregate visit statistics to understand how the site is used. Legal basis: our legitimate interest in improving the site.
Meeting legal obligations. We use whatever is needed to comply with the law or to establish, exercise or defend legal claims. Legal basis: legal obligation, or our legitimate interest in protecting our rights.

Where we rely on legitimate interests, we have weighed them against your rights and kept the information we use to a minimum. You can object at any time (see section 9).

We don't use your information to make decisions about you by automated means, and we don't use it to train AI models.

5. Cookies and similar technologies

We don't set any cookies of our own, and we don't use advertising, social media or cross-site tracking technologies.

Cloudflare may set strictly necessary security cookies to tell people from automated traffic and to protect the site. They don't track you for advertising.
Cloudflare Web Analytics works without cookies.
Google Fonts supplies the site's typefaces. When a page loads, your browser requests the fonts from Google, which receives your IP address as part of that request.

Because we only use what is strictly necessary, we don't show a cookie banner. If that ever changes, we'll ask first.

We share information only with providers who help us run Rimembra, and only what they need to do their job. They process it on our behalf, under contract and under our instructions.

Cloudflare, Inc. provides hosting, content delivery, security, sign-up handling and aggregate analytics. It processes technical request data, and your email address as it passes to our email provider.
Kit (ConvertKit LLC) stores the waitlist and sends our emails. It processes your email address, the sign-up form and email engagement.
Google (Google Fonts) delivers the site's typefaces. It receives the IP address and browser information your browser sends when it requests the fonts.

We may also share information:

if the law requires it, or to respond to a valid request from a court or public authority;
to protect the rights, safety and property of Rimembra, our users or others;
as part of a merger, acquisition or sale of all or part of our business. In that case the information would stay protected by this policy, and we would tell you before it became subject to a different one.

We never sell your personal information or share it for advertising.

7. International transfers

We operate from the UAE, and our providers process information in other countries, including the United States and wherever Cloudflare runs its global network. When information leaves the country where it was collected, we rely on safeguards recognised by the applicable law. Examples include the European Commission's Standard Contractual Clauses, adequacy decisions, or the providers' own data-transfer commitments. You can ask us for more detail about these safeguards.

8. How long we keep it

Waitlist and newsletter: until you unsubscribe or ask us to delete your information. If you don't confirm your sign-up, we delete your address within 90 days.
Messages you send us: for up to two years after our last exchange, unless we need them longer to resolve a question or meet a legal obligation.
Technical request data: kept by Cloudflare for a limited period under its own retention policies, to run and secure the network.
Aggregate statistics: kept as totals that don't identify you.

After you unsubscribe, we may keep your address on a suppression list so that we don't email you again by mistake.

9. Your rights

Depending on where you live, you may have the right to:

access the personal information we hold about you and get a copy;
correct information that is inaccurate or incomplete;
delete your information;
restrict or object to how we use it, including our use based on legitimate interests;
receive your information in a portable format;
withdraw your consent at any time, without affecting what we did before you withdrew it. The easiest way is the unsubscribe link in any of our emails.

These rights come from laws such as the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), the EU General Data Protection Regulation and the UK GDPR. We extend them to everyone, wherever you live.

To use any of these rights, write to privacy@rimembra.ai. We may need to confirm your identity first. We'll reply within 30 days, and tell you if we need longer and why. Using your rights is free.

If you're unhappy with how we've handled your information, please tell us first so we can try to put it right. You can also complain to a data protection authority. In the UAE that is the UAE Data Office; in the EU or UK, it is the authority where you live or work.

10. Security

We protect information with measures suited to what we hold:

the whole site is served over encrypted connections (HTTPS);
access keys for our providers are stored as secrets and never sent to your browser;
we collect as little as we can and limit who can access it.

No method of transmission or storage is completely secure. If a breach affects your personal information in a way that puts you at risk, we'll tell you and the relevant authorities as the law requires.

11. Children

Our website and waitlist are intended for adults aged 18 or over. We don't knowingly collect personal information from anyone younger. If you think a child has given us their details, contact us and we'll delete them.

12. When Rimembra opens

Rimembra will ask people to share some of the most personal information there is: their life stories, relationships, values, beliefs and the reasoning behind their choices. Some of it may be special-category or sensitive data under data protection law.

That is not covered by this policy. Before anyone shares interview material with us, we'll publish a separate privacy notice for the product that explains what is collected and how it is protected, and we'll ask for explicit consent. These principles will guide that notice:

your identity belongs to you;
you decide what is shared, what stays private and who may use it;
we won't sell what you share or use it for advertising;
we are designing for export and permanent deletion.

13. Changes to this policy

We'll update this policy as Rimembra develops. When we do, we'll change the date at the top. If a change materially affects how we use information we already hold, we'll tell you by email before it takes effect.

14. Contact us

Privacy questions and requests: privacy@rimembra.ai
Everything else: hello@rimembra.ai

Rimembra, United Arab Emirates.