1. Scope
This Privacy Policy applies to the Remy iOS and Android mobile apps, notification service extension, share extension, and services, websites, and support channels operated by GULF SHORES MANAGEMENT ADVISORS LTD. and directly associated with Remy (collectively, the “Service”). The Service is offered outside mainland China.
This Policy does not apply to third-party websites you access through Remy, information independently processed by other users, or information independently processed by Apple or other third parties under their own policies.
2. Controller and contact information
The operator and controller of personal information for the Service is:
We do not currently provide telephone support. For account security, contact us through the in-app support entry or the email address above.
3. Information we process
Account and identity
Random or service-generated account identifiers, Remy ID, device registration information, authentication credentials, recovery-code status, and account security status. You should retain your recovery code; support will never ask for the complete code.
Optional recovery channels
When available and voluntarily enabled, we process a phone number or email address for verification, account recovery, or security notifications. Some binding channels may not yet be available in the current version.
Profile and social information
Your selected display name, avatar, username, bio, group information, contact cards, stories, and information you choose to publish or send to other users.
Communications
Supported messages, voice notes, photos, video, files, locations, and calls sent to other users are end-to-end encrypted before transmission. Servers may temporarily hold encrypted content and attachments to complete delivery.
Contacts
With permission, the app reads contacts on-device to display or invite contacts and discover registered users. We do not store your complete address book in plaintext on our servers. Contact discovery may process protected representations of numbers or other minimum query data.
Device and network data
IP address, device and OS type, app version, language and time zone, push token, Bundle ID, connection times, delivery state, and anti-abuse or security events needed to operate the Service.
Diagnostics and support
Only when you submit or export them, we process issue descriptions, device model, iOS and app versions, locale, call-quality feedback, and debug logs. Production self-hosted mode does not automatically upload logs to the upstream debug-log service.
Purchases and subscriptions
If Apple-managed purchases or subscriptions are enabled in the future, we receive product, transaction-status, and receipt-validation information. Apple processes full payment-card details; we do not store them.
No advertising use: We do not sell personal information, share it for cross-context behavioral advertising, use third-party ad networks, or include third-party tracking or ad SDKs such as Firebase Analytics, Crashlytics, or Mixpanel in the current iOS project.
Translation and AI assistant information
When you submit content for translation or give Remy a task, we process the text, speech, images or documents you send, language choices, task requirements and necessary account identifiers. AI phone tasks also involve the recipient number you select, call status, conversation transcripts, your decisions and a result summary. Business search processes the location, requirements and search terms you provide. Recent valid phone numbers are stored on your device per account and can be removed from the number history.
These features process content you submit or authorize for the task. Opening a translation or assistant page does not automatically upload unrelated chat history, your address book or microphone audio. Recording still requires your action and operating-system permission.
4. How we use information
- Create, verify, secure, and recover accounts; connect devices; and send necessary service notifications.
- Deliver messages and attachments; connect voice or video calls; synchronize profile information; and provide group, story, sharing, and backup features.
- Prevent spam, fraud, abuse, unauthorized access, and other security threats.
- Diagnose failures, answer support requests, and improve reliability and call quality; voluntarily submitted logs are used only for relevant support and improvement.
- Comply with applicable law and valid legal process, and protect the rights and safety of users, GULF SHORES MANAGEMENT ADVISORS LTD., or the public.
In the EEA, UK, and similar jurisdictions, our legal bases may include performance of our contract with you, our legitimate interests, your consent, and compliance with legal obligations. You may withdraw consent-based permissions at any time without affecting earlier lawful processing.
At your request we also transcribe, translate and read content aloud, interpret attachments and task requirements, search public business information, and communicate by AI phone call after your call confirmation. AI output may be inaccurate. Submitting a task does not itself authorize payment, new charges or establish that a recipient has completed a booking.
5. End-to-end encryption and content visibility
Remy uses end-to-end encryption to protect supported private chats, group chats, and calls so content is intended to be readable or audible only by senders and intended recipients. Message history is primarily stored on your devices. Offline messages may remain queued in encrypted form, and attachments may remain encrypted in content-delivery or storage systems.
End-to-end encryption cannot prevent a recipient from taking a screenshot, copying, forwarding, or separately saving content, and it cannot protect an unlocked or compromised device. Keep your device, recovery code, and credentials secure.
Translation and AI calling are separate processing: Content you submit is sent over encrypted connections to our servers and the processors below in a form they can process. This is not an end-to-end encrypted chat readable only by you and a chat recipient. Ordinary telephone calls also expose call content to the recipient and telephony providers. Share only what the task needs.
6. Device permissions
| Permission or capability | Purpose | Your control |
|---|
| Contacts | Display and invite contacts and discover registered users. | Grant or revoke in iOS Settings. You can still connect through an Remy ID, username, or link. |
| Camera and photos | Capture, choose, send, or save media; scan QR codes; and set an avatar. | Requested when a feature needs it; revocable in iOS Settings. |
| Microphone and audio | Voice messages, voice/video calls, translation or assistant speech input you initiate, and media playback. | Requested when a feature needs it; revocable in iOS Settings. |
| Location | Share your current location or a place when you choose. | Granted while using the app; a shared location is treated as message content you chose to send. |
| Notifications and APNs | Receive calls, messages, and security notifications. | Apple creates the push token; notifications can be disabled in iOS Settings. |
| Face ID / device authentication | Protect the app or sensitive actions on-device. | iOS performs verification; we do not receive or store your biometric template. |
| Local network | Discover a nearby device only when you initiate direct account transfer. | Revocable in iOS Settings. |
| Apple Music | Play related media attachments when you use that functionality. | Used only when needed and authorized through Apple. |
7. Sharing, service providers, and legal disclosure
We share information or appoint processors only as needed to provide the Service:
- Apple: App Store distribution, Apple Push Notification service, encrypted credential synchronization through iCloud, device authentication, maps, and system media capabilities. Apple processes relevant data under its own terms.
- Infrastructure providers: Hosting, bandwidth, encrypted attachment storage, call relay, email, and security providers may process minimum necessary data only on our instructions and under contractual confidentiality and security obligations.
- Other users: Profile information and content you send, publish, or share after joining a group is made available to recipients you select or permit.
- Law and safety: We may disclose limited information when we believe in good faith it is necessary to comply with valid legal process, protect safety, investigate abuse, or preserve Service integrity. We cannot provide plaintext for end-to-end encrypted content we cannot decrypt.
- Business transactions: Information may transfer as part of a merger, financing, reorganization, or asset transfer, subject to continued protection under this Policy or equivalent obligations.
Providers processing personal information for us must provide protection equivalent to this Policy and applicable law. We do not sell personal information or share it for targeted advertising.
Translation and assistant processors
- Google Cloud: Processes submitted translation text and speech for transcription, translation, reverse checks and speech synthesis. It also provides speech recognition and some speech synthesis for AI calls.
- OpenRouter and OpenAI: Remy currently sends task understanding, attachment analysis, dialogue review and summaries through OpenRouter to the configured OpenAI model. Necessary input includes the task, submitted attachments or extracted content, relevant dialogue and authorization conditions. Providers process data under their applicable terms. A request not to store a model response does not mean providers retain no security or billing records.
- Twilio and telephone carriers: After you confirm a call, they process phone numbers, audio, call routing and status. Speech synthesis uses Google Cloud, with Amazon Polly in some telephone language paths. Remy communicates as the user’s assistant and answers honestly if the recipient explicitly asks whether it is AI.
- Google Maps: Business search processes business categories, search regions and query terms to return public listings. A search result does not establish confirmed availability, opening hours or a booking.
Using these features does not automatically share unrelated private chats. You may choose not to use translation or the AI assistant. Closing a page cannot retract information already delivered to a call recipient or records a processor must lawfully retain.
8. Retention and deletion
- Account information: Kept while the account is active, then deleted or de-identified from active systems after account deletion, except limited records required for law, security, or dispute resolution.
- Encrypted messages: Pending messages are generally removed from the queue after delivery or expiration. Message history is primarily held on user devices. Disappearing-message timers are applied by participating devices.
- Encrypted attachments, profile data, and backups: Kept while needed for the feature. After deletion, they enter cleanup processes. Residual backup copies are ordinarily overwritten or removed within up to 90 days.
- Network and security logs: Ordinarily kept for no more than 90 days, unless longer retention is necessary to investigate an incident, prevent fraud, or meet a legal obligation.
- Support records: Ordinarily kept for up to 24 months after closure for recurring issues, quality review, and legal obligations. You may request earlier deletion when the record is no longer needed.
Delete your account in the app
Open Settings → Account & Security → Delete Account, then confirm. Remy sends an account-deletion request to the service and clears local app data. Deletion normally begins immediately and active-system cleanup is completed within no more than 30 days; residual backups follow the schedule above. Deleting the app alone does not delete the server-side account.
Messages already stored on recipients’ devices or content another user has re-shared may remain under that user’s control. Information required by law is deleted when the required period expires.
Translation and AI task retention
The translation server processes requests in temporary memory and does not write raw audio or text into chat history. Current AI tasks, relevant transcripts, attachment summaries and results are held in temporary server memory, normally for up to six hours from task creation; active calls may be retained longer to finish or safely end the task. A server restart may remove this temporary history. Raw attachments are used for processing and are not written into task history, although extracted information and filenames may remain in the task.
Call metadata held by telephony providers, provider security or billing records, and content you or the call recipient save follow their applicable rules, not this six-hour period. If a deletion request concerns assistant tasks or call records, tell support. Account deletion does not promise automatic removal of every third-party record.
9. Your privacy rights
Depending on local law, you may have rights to know, access, correct, delete, or receive a copy of personal information; restrict or object to processing; withdraw consent; and complain to a local data-protection authority. California residents may also ask for the categories of personal information collected, used, and disclosed in the preceding 12 months. We do not sell or share personal information for cross-context behavioral advertising, so no sale/share opt-out is required.
Manage profile information, permissions, and account deletion in the app, or email roderickl@gsmadvisors.homes with the subject “Remy Privacy Request” and the request type. We may verify your identity through a registered device, account credentials, or another reasonable method. We respond within the time required by applicable law and, where GDPR applies, generally within one month.
10. International processing and transfers
To serve users outside mainland China, information may be processed in the United States and in other countries where we or our service providers operate. Their data-protection rules may differ from those in your jurisdiction.
Where required, we use contractual protections, data minimization, encryption, and other lawful transfer mechanisms while preserving your applicable rights.
Current chat infrastructure includes deployment in Hong Kong, while the Remy AI assistant service is deployed in Japan. Relevant task content may also be processed in the regions used by Google Cloud, OpenRouter, OpenAI, Twilio and other providers. A Japan-based server does not mean all provider processing stays in Japan.
11. Security
We use measures including end-to-end encryption, transport encryption, an encrypted on-device database, access controls, key separation, log redaction, and least-privilege access. No system can guarantee absolute security. If an incident may affect you, we will respond and notify as required by applicable law.
Never send anyone your complete recovery code, verification code, or device-unlock credential. Remy support will not initiate a chat asking for these secrets.
12. Age requirement
Remy is only for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, contact us so we can verify the report and delete the information or take other appropriate action.
13. Changes to this Policy
We may update this Policy for product, technical, legal, or operational changes. We will provide notice of material changes through the app, website, or another reasonable method and update the effective date above. Where law requires consent, we will request it separately.
