RemoodPrivacy Policy
Last updated: November 10, 2026
What you share with Remood is often personal: stress, a fear, a wish to change something. This policy explains, in plain words, which data we use, why, and how you stay in control.
1. Who is responsible for your data?
228 Litros SL, a company registered in Spain Tax ID (NIF): B75843011 Registered office: Ctra Apartaments 1, 08860 Castelldefels (Barcelona), Spain Registered with the Registro Mercantil of Barcelona, volume (tomo) 1000443017450 (I.R.U.S.), folio 1, sheet (hoja) B-629395 Contact: [email protected]
The app is distributed on the App Store by Tatooine SAS, which has no access to your personal data. Payments are handled by Apple.
2. What data we use, and why
| Data | Why | Legal basis |
|---|---|---|
| Email address | Create your account and send your sign-in code | Performance of the contract |
| Confirmation that you are 18 or older | Keep the service for adults only | Legal obligation and legitimate interest |
| Your preferences (voice, background sound, language, usual bedtime) | Adapt the app and your sessions | Performance of the contract |
| What you write to create a session (your situation, your answers to the questions) | Write your personalised session | Your explicit consent |
| Your sessions (text, audio, date, length, session type, short summary of the topic) | Let you replay them, and suggest an existing session when you have the same need again | Performance of the contract |
| Referrals (your code, who invited you, rewards) | Run the referral programme and prevent fraud | Performance of the contract and legitimate interest |
| Signed-in devices | Limit an account to two devices | Legitimate interest (preventing account sharing) |
| Subscription status | Know whether you have access to unlimited sessions | Performance of the contract |
| Technical data (error logs, IP address) | Security and reliability | Legitimate interest |
What you write may relate to your wellbeing or health. That is why we ask for your explicit consent before using it. You can withdraw it at any time by deleting your sessions or your account.
What we never do:
- Your answers to the questions are not kept once your session is created: only the session itself and a short summary of its topic are stored.
- Your calendar is read only on your phone, to suggest a session at the right moment. No event is ever sent to our servers.
- Notifications are scheduled by your phone.
- We do not sell your data, we do not use it for targeted advertising, and it is not used to train artificial intelligence models.
3. Who else processes your data?
Remood relies on service providers who are bound by contract and may only use your data on our behalf:
| Provider | Role | Location |
|---|---|---|
| Supabase | Hosting of your account and sessions | European Union (Frankfurt) |
| OpenRouter and the AI model used (OpenAI) | Writing the text of your session | United States — texts are not retained |
| ElevenLabs | Creating the voice from the session text | United States |
| Railway | Audio editing | European Union (Amsterdam, Netherlands) |
| RevenueCat | Subscription status (anonymous identifier, without your email) | United States |
| Resend | Sending sign-in emails | European Union (Dublin, Ireland) |
| Apple | Payments and app distribution | According to Apple's terms |
When data is transferred outside the European Union, the transfer is covered by the safeguards required by the GDPR (European Commission standard contractual clauses or Data Privacy Framework certification).
4. How long we keep your data
- Account and sessions: as long as your account exists. If your account is inactive for 24 months, we delete it after notifying you.
- Answers to the questions: not kept after the session is created.
- Sign-in codes: a few minutes.
- Technical logs: 30 days at most.
- When you delete a session or your account, everything is permanently erased. We keep only a fully anonymous record (the type of session, with no link to you) to improve the service.
5. Your rights
At any time, you can:
- Download your data: Profile → Download my data;
- Delete a session or delete your account: in the app, Profile → Delete my account;
- Access, correct, restrict or object to processing, and withdraw your consent: write to [email protected].
We reply within one month at most. If you are not satisfied with our answer, you can lodge a complaint with the Agencia Española de Protección de Datos (aepd.es) or with the data protection authority of your country.
6. Adults only
Remood is for people aged 18 and over. If we learn that an account belongs to a minor, we delete it.
7. Security
Your data is encrypted in transit and stored with established providers. Access is limited to what is strictly necessary.
8. Changes
If we make significant changes to this policy, we will let you know in the app before they apply.
9. Contact
For any question: [email protected]
10. Additional information depending on where you live
United States
- We do not sell or share your personal information for cross-context behavioral advertising, and we do not use it for targeted advertising.
- California (CCPA/CPRA) and other US states with privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon): you have the right to know what personal information we collect and why, to access it, to correct it, to delete it, to get a copy (Profile → Download my data), and to opt out of any sale, sharing or targeted advertising. We will not treat you differently for exercising these rights. Categories collected: identifiers (email), account preferences, the text you write to create a session (which may be sensitive information related to wellbeing or health, used only to create your session), session content, device and technical data. Retention: see section 4.
- Consumer health data (Washington My Health My Data Act, Nevada SB 370 and similar laws): what you write to create a session may be considered consumer health data. We collect it only with your consent, use it only to create your session, never sell it, and you can delete it at any time. Our sub-processors are listed in section 3.
- To exercise your rights, write to [email protected]. You may use an authorized agent. We may verify your identity through the email linked to your account. If we decline your request, you can appeal by replying to our answer; if the appeal is denied, you can contact your state Attorney General.
United Kingdom
Your data is protected by the UK GDPR and the Data Protection Act 2018. Your rights are the same as in section 5. You can complain to the Information Commissioner's Office (ico.org.uk).
United Arab Emirates
Your data is processed in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. You have the right to access, correct, delete and restrict the processing of your data, and to withdraw your consent, by writing to [email protected]. Transfers outside the UAE are made to providers offering an adequate level of protection, as described in section 3.
Other countries
Wherever you live, you can exercise the rights in section 5 by writing to [email protected]. Where your local law gives you more rights, we apply them.