Privacy Policy

Last updated: 7 October 2026.

RemDo is an early-stage project under active development. This Privacy Policy explains how personal data is handled when you use the RemDo service operated at remdo.com.

The service is currently operated by Piotr Lewalski, a private individual based in Poland, who is the controller of personal data described in this policy.

For privacy questions or requests, contact piotr@remdo.com.

Information we process

Depending on how you use RemDo, we process:

• Account information, such as your email address, name, account identifier and authentication information.
• Product update requests, such as the email address you submit through “Keep me posted,” when you requested updates, and any later confirmation or withdrawal.
• Information from an authentication provider if you choose to sign in through a third-party service. This can include an account identifier, name, email address or profile information, depending on the provider and permissions involved.
• Content you provide to RemDo, such as documents, notes and other information you choose to store or share.
• Technical and security information, such as IP address, browser or device information, authentication events and server logs needed to operate, secure and troubleshoot the service.
• Usage statistics, such as page views, features used, and the browser, device type and country of visits, linked to your account's internal identifier while you are signed in.
• Information you provide when contacting us, for example when requesting support or providing feedback.

Why we process information

The purposes and legal bases for processing are:

• Creating and managing your account; authenticating you; storing and synchronizing your content; providing sharing, collaboration and integrations that you request; and sending necessary account or service communications. Legal basis: performance of our agreement with you to provide RemDo.
• Operating and protecting the service, maintaining reliability, diagnosing failures, preventing abuse and investigating security incidents. Legal basis: our legitimate interests in operating a secure, reliable service and protecting RemDo and its users.
• Responding to support requests and feedback. Legal basis: performance of the service where the request relates to your account or use of RemDo, and otherwise our legitimate interest in communicating with users and improving the service.
• Usage statistics to understand how RemDo is used, whether people come back, and to improve it. Legal basis: our legitimate interests in improving the service. You can turn them off at any time.
• Recording your request for occasional RemDo product updates and managing any later confirmation or withdrawal. Legal basis: your consent. Requesting updates is optional and does not create an account.
• Processing required to comply with applicable law or binding legal requirements. Legal basis: legal obligation.

Where processing is based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Information required to use RemDo

You are not legally required to provide personal data to RemDo.

However, some information is necessary to provide particular features. For example, account information is required to create and maintain an account, and information from an authentication provider is required if you choose that method of signing in.

Content, integrations and other information are provided when you choose to use the corresponding RemDo features.

Usage statistics are not required to use the core RemDo service, and you can turn them off.

Product updates

“Keep me posted” stores your email address and request time for occasional RemDo product updates. The form currently collects requests only; it sends no email. Requests are stored separately from accounts and remain unconfirmed until subscription confirmation is introduced. An existing account's verified email does not confirm a request submitted through this public form.

You can withdraw your request or ask us to delete it by contacting piotr@remdo.com. A recorded withdrawal excludes your address from future contact, and submitting that address through the public form again does not undo the withdrawal. Deleting an account alone does not delete a separate update request; a request to delete all your personal data includes both.

Usage statistics

RemDo uses Umami Cloud on remdo.com to count how people find and use the product, so we can see which pages and features are useful and whether people come back. Umami's tracking code does not use cookies.

Umami receives basic usage information such as page views, referrer URLs, browser, operating system, device type and country. RemDo also sends a small set of explicit product events: opening the signed-in app, creating or importing a document, editing a document and using search. It does not send document or note contents, document titles or identifiers, filenames, or search text. Document routes are reduced to a generic route before the statistics are sent.

While you are signed in, RemDo also sends your account's internal user identifier as a pseudonymous ID, so that visits on different days can be connected. It is not sent when you are signed out and it is not your name or email address.

You can turn the statistics off at any time through Privacy settings in the RemDo footer, and RemDo respects your browser's Do Not Track setting. Turning them off does not prevent you from using the core RemDo service. Data already collected stays until it expires; to have it deleted sooner, contact us.

RemDo does not use personal data for advertising and does not use the contents of your documents for advertising.

Cookies and browser storage

RemDo uses browser storage needed to provide the service.

This includes local browser storage used for account-related state and IndexedDB and local storage used for local and offline document functionality. Locally persisted document data is encrypted by RemDo before being stored in the browser.

Authentication methods may also use cookies or similar browser mechanisms necessary to keep you signed in and secure your session.

These technologies are used where necessary to provide functionality you request.

If you turn usage statistics off, your browser stores that choice in local storage so that it applies to later visits.

Authentication

RemDo can support authentication using an email address and password, a one-time code sent to your email address, or third-party authentication providers.

If you choose a third-party provider, RemDo receives information needed to identify your account, such as an account identifier, name or email address, depending on that provider and the permissions involved.

The authentication provider separately processes information under its own privacy policy.

Passwords used directly with RemDo are not stored in readable form.

Your content and third-party integrations

RemDo processes content you provide so that it can provide the functionality you request.

You can also choose to give another service or application access to information in RemDo, for example through an integration, API or MCP connection.

When you deliberately authorize such an integration, RemDo can provide information requested through that connection to the service you authorized. How that third party subsequently processes the information is governed by its own terms and privacy practices.

RemDo does not provide your document content to third-party integrations unless the functionality you use requires it or you authorize the connection.

When you deliberately share or collaborate on content through RemDo, information associated with that content or collaboration may be visible to the people you share it with.

Service providers and other recipients

We use third-party providers where necessary to operate RemDo. These can include providers of:

• infrastructure, hosting and databases;
• authentication;
• email delivery;
• monitoring, security and error reporting;
• usage statistics, where enabled.

These providers process personal data only to the extent relevant to the services they provide.

Personal data can also be disclosed:

• to people with whom you deliberately share or collaborate;
• to services you choose to connect to RemDo;
• where disclosure is required by law; or
• where reasonably necessary to protect users, RemDo or the security and integrity of the service.

We do not sell personal data.

International processing

Some service providers can process personal data outside Poland or the European Economic Area.

Where GDPR requires safeguards for such a transfer, we rely on an applicable transfer mechanism, such as an adequacy decision or appropriate contractual safeguards.

You can contact piotr@remdo.com for information about safeguards applicable to transfers of your personal data and, where applicable, how to obtain a copy of them.

How long we keep information

We keep personal data only for as long as needed for the purposes for which it is processed.

In particular:

• Account information and stored content are generally kept while your account or the relevant content exists. If an account or content is deleted, it is removed from active processing unless continued retention is required for another lawful purpose.
• Authentication and session information is kept for as long as needed to maintain or secure the relevant session or account.
• Technical and security logs are kept for the period needed to troubleshoot the service, protect it against abuse and investigate security events. Information connected to a specific incident can be retained longer while that incident is being investigated or related claims or legal obligations remain relevant.
• Support correspondence and feedback are kept for as long as needed to handle the communication and, where appropriate, maintain a reasonable record of the issue.
• Product update requests are kept while needed for the updates you requested. Withdrawn requests are excluded from contact; we retain only the address and request or withdrawal information needed to respect your choice unless you ask us to delete it. Requests are removed when they are no longer needed for this purpose.
• Usage statistics are retained for up to six months.
• Backup copies can temporarily contain information that has already been deleted from active systems. Such copies disappear as backups are replaced according to the applicable backup rotation process.

Information can be retained for longer where required by law or where necessary to establish, exercise or defend legal claims.

Security

We take reasonable technical and organizational measures to protect personal data.

RemDo is, however, an early-stage service under active development. No online service can guarantee absolute security, so you should consider the sensitivity of the information you choose to store in it.

Automated decision-making

RemDo does not currently use solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

Product experiments such as assigning users to different versions of a feature do not make decisions of this kind.

Your rights

Under the GDPR, depending on the circumstances, you may have the right to:

• access your personal data;
• correct inaccurate personal data;
• request deletion of your personal data;
• restrict certain processing;
• receive certain data in a portable form;
• object to processing based on legitimate interests;
• withdraw consent at any time where processing is based on consent.

To exercise these rights or ask a privacy-related question, contact piotr@remdo.com.

You also have the right to lodge a complaint with a data protection supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Self-hosted RemDo

This Privacy Policy applies to the RemDo service operated at remdo.com.

If you run RemDo yourself or use an instance operated by somebody else, that operator determines how information on its instance is processed. This Privacy Policy does not describe the practices of independently operated RemDo instances.

Changes to this policy

RemDo is under active development, so this Privacy Policy will change as the service evolves.

Minor changes, clarifications or corrections can be published by updating this page.

If a change materially affects how we process existing users' personal data, we will provide appropriate notice before or when the change takes effect where required by applicable law.

The current version and its last-updated date are shown at the top of this page.