← Back to Home

Privacy Policy

Last updated: September 26, 2026

1. Introduction

Remi Inc. (“we,” “us,” or “our”) operates the Remi mobile application (“App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. AI data sharing requires your separate, explicit permission in the App. Using Remi or purchasing a subscription does not grant that permission.

2. Information We Collect

2.1 Information You Provide

  • Voice Input: When you use voice-to-text features, your speech is processed to extract expense data (amount, vendor, category). Voice audio is processed in real-time and is not stored on our servers.
  • Expense Data: The amounts, categories, vendors, and notes associated with your logged expenses.
  • Spending Questions: Questions you type or dictate in Ask your spending.
  • Receipts: Photos you choose to scan and text extracted from them on your device. Receipts may contain purchases, prices, dates, merchant details, names, addresses, loyalty numbers, or payment details.
  • Account Information: If you create an account, we may collect your email address and display name.

2.2 Information Collected Automatically

  • Device Information: Device type, operating system version, and unique device identifiers for analytics and crash reporting.
  • Usage Data: How you interact with the App (features used, session duration) to improve the user experience.
  • AI Usage Limits: When you use an authorized AI feature, our proxy receives an app-generated identifier, subscription status, and your network IP address to enforce usage limits and prevent abuse.
  • Product Analytics: App opens, onboarding steps, expense-save counts and entry methods, paywall interactions, and operational failure codes. These events use a random installation identifier and include app and device information. They do not include expense amounts, merchants, descriptions, transcripts, recordings, receipt images, names, or email addresses.
  • Subscription Events: Trial starts, subscription payments and renewals, refunds, expiration, and renewal status. These may include the subscription product, price, currency, and purchase dates. Apple returns an app account token that links purchases made through this version of Remi to the same random analytics identifier.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the App
  • With your permission, use OpenAI to categorize expense transcripts, interpret spending questions, and itemize receipts
  • Generate spending summaries and insights
  • Improve and personalize your experience
  • Communicate with you about updates, features, or support
  • Detect and prevent fraud or abuse

4. Data Storage and Security

Remi is designed with a privacy-first approach. Your expense data is stored locally on your device using Apple’s SwiftData framework. We do not maintain a centralized database of your financial information.

AI sharing is off until you select “Allow sharing with OpenAI” after reading the in-app disclosure. Text permission covers the expense descriptions you dictate and the spending questions you type or dictate. Remi sends this text through its server hosted by Vercel to OpenAI to categorize expenses or interpret questions. Text may include amounts, merchants, dates, and any personal details you include. Remi does not attach your account name or email, send voice recordings to OpenAI, or upload your stored expense history to answer questions. Spending totals are calculated on your device.

Receipt scanning requires separate permission. Remi first extracts receipt text on your device and sends that text through its Vercel server to OpenAI to itemize and categorize the purchase. If on-device text recognition is insufficient, Remi sends the receipt photo instead. Personal information visible in the receipt can be included; it is not automatically removed. Camera access alone does not authorize AI sharing.

You can decline either permission or withdraw it in Settings under AI Usage. Without text permission, expense parsing and spending-question interpretation use on-device fallbacks. Without receipt permission, receipt scanning does not send text or photos. Manual entry remains available. Withdrawing permission stops future sharing, but cannot recall information already sent.

We implement industry-standard security measures to protect any information transmitted to or from the App, including encryption in transit via TLS/SSL.

5. Third-Party Services

The App may use the following third-party services:

  • Apple Speech Framework: For voice transcription with microphone and speech-recognition permission. Remi requests on-device recognition where supported; otherwise Apple may process speech on its servers. Remi does not send voice audio to OpenAI.
  • PostHog: For product and subscription analytics, hosted in the United States. We use selected events to understand onboarding, reliability, and paid conversion. Session recording and automatic screen or interaction capture are disabled. We disable IP-based location enrichment and do not send advertising identifiers. Analytics is not used for cross-app advertising tracking.
  • OpenAI: Receives the expense transcripts, spending questions, and separately authorized receipt text or photos described above. OpenAI’s API data is not used to train its models by default. Its standard abuse-monitoring logs may retain content for up to 30 days, with longer retention for legal or safety reasons. See OpenAI’s API data controls for retention details and exceptions.
  • Vercel and Upstash: Vercel hosts Remi’s AI proxy, which processes authorized request content and forwards it to OpenAI. The proxy uses an app-generated identifier, subscription status, and your network IP address to enforce usage limits and prevent abuse. Upstash stores identifier-based usage counters for 35 days and IP-address-based counters for 24 hours after the last successful request updates the corresponding counter. The app identifier and client IP address are not included in the AI prompts sent to OpenAI.

We require third-party providers that process user data to provide the same or equal protection as described in this policy, including confidentiality, restricted use, and appropriate security measures. OpenAI’s Data Processing Addendum describes its processing, security, and data-subject protections. The provider-specific purposes and retention limits above apply to the information shared with each service.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

  • With your explicit consent
  • With the service providers described above to operate the app and measure its usage and subscriptions
  • To comply with legal obligations or respond to lawful requests
  • To protect our rights, privacy, safety, or property
  • In connection with a merger, acquisition, or sale of assets (with prior notice)

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent for data processing
  • Export your data in a portable format

Since your expense data is stored locally on your device, you can delete it at any time by deleting the App or clearing its data through your device settings.

8. Children’s Privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will take steps to delete that information.

9. Data Retention

Your expense data is stored locally and retained until you delete it. Account information, if applicable, is retained for as long as your account is active. If you request account deletion, we will delete your account data within 30 days. AI request content is also subject to OpenAI’s retention terms described in Section 5; deleting local data or withdrawing permission does not immediately delete copies already retained by that provider.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy within the App or on our website. Material changes to AI sharing require a new in-app permission before sharing resumes.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

Remi Inc.
Email: privacy@remiapp.com