remind2us
Privacy Policy
remind2us is a shared reminder app for two people. This policy explains what the app and its backend store, why, who else touches it, and how to get it back or get it deleted. It covers the iOS app and this website.
The service is operated by Kadir Osman Üst ("we", "us"), who is the data controller for the purposes of the GDPR and the veri sorumlusu under Türkiye's KVKK (Law No. 6698).
What we collect
Only what the app needs to work. There is no advertising, no ad identifiers, no tracking across other apps or sites, and nothing is sold.
| Category | What it is | Why |
|---|---|---|
| Account | Email address, name, username, and a password stored only as an Argon2 hash. If you use Sign in with Apple, the identifier Apple returns. | To create your account and sign you in. |
| Reminders | Title, description, date and time, time zone, repeat rule, status, completion and snooze times. | This is the content of the product. |
| Connections | Who you share a reminder with, invitation status, and nudges sent between you. | Shared reminders need two people. |
| Preferences | Notification and friend-activity toggles, quiet hours, language, appearance. | To respect your settings, including not pinging you at night. |
| Devices | A device identifier, platform, device model and name, OS version, app version and build number, push token, and when the device was last active. | To deliver notifications to the right device and to support older app versions correctly. |
| Delivery logs | Records of reminders and notifications sent, and nudges delivered. | So a missed or duplicated notification can be diagnosed. |
| Subscription | Whether a premium entitlement is active. Payment card details never reach us. | To unlock paid features. |
Why we are allowed to process it
- Performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) — your account, your reminders, sharing them, and delivering notifications.
- Legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) — keeping the service running and secure, preventing abuse, and diagnosing faults.
- Consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)) — push notifications, which iOS asks you for separately and which you can withdraw at any time in system settings or in the app.
Who else processes it
We use a small number of providers, each acting on our instructions and only for the purpose listed:
| Provider | What they handle | Where |
|---|---|---|
| Contabo GmbH | Hosting for the application servers and the database. | France (EU) |
| Expo (Expo Application Services) | Delivering push notifications to your device. | United States |
| Apple | App Store purchases and, if you use it, Sign in with Apple. | Per Apple's own terms |
| RevenueCat | Recording whether your subscription is active. | United States |
| New Relic | Application performance monitoring — request timings and error traces. | EU region |
Your reminders and account data live in the European Union. Transfers to providers outside the EU rely on the European Commission's Standard Contractual Clauses. Under KVKK, transfers abroad rest on your explicit consent or the applicable exception in Art. 9.
How long we keep it
- Account and reminder data: for as long as your account exists.
- Delivery logs: kept only as long as they are useful for diagnosing faults, then removed.
- After you delete your account, your data is removed from the live database. Encrypted backups may still hold it briefly until they rotate out.
Your rights
Under the GDPR (Art. 15–22) and KVKK (Art. 11) you can ask us to give you a copy of your data, correct it, delete it, hand it over in a portable format, restrict what we do with it, or object to processing based on legitimate interests. Where processing rests on consent, you can withdraw it at any time without affecting what came before.
Write to [email protected]. We answer within 30 days. If you are not satisfied you can complain to your local data protection authority in the EU, or to the Kişisel Verileri Koruma Kurumu (KVKK) in Türkiye.
Security
Passwords are stored only as Argon2 hashes and are never recoverable, by us or anyone else. Traffic between the app and our servers is encrypted with TLS. Access to the production database is restricted to the operator. No system is perfectly secure, but we do not store card details, and we do not keep data we do not need.
Children
remind2us is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.
Changes
If this policy changes materially we will update the date at the top of this page and, where the change affects how your data is used, tell you in the app before it takes effect.
Contact
Kadir Osman Üst — [email protected]