GDPR Compliance

Last update

October 24th, 2023

Where are your servers located?

Remember Your People is hosted on a DigitalOcean server in Frankfurt, Germany.

What kind of data are you storing?

From the personal data, we are storing your first and last names, email, and notification settings.

The Web App stores the notes on people you want to remember securely encrypted. The information is kept private for you and the people you share the notes with.

For compliance with GDPR cookie law, we are also storing your device's anonymized IP address, your browser's User-Agent string, and cookie consent preferences, which can be linked to your account.

Can I see what information you are storing about me?

If you want to get a list of all the data that is stored about you on Remember Your People, you can ask for it in the feedback form and we will respond within 2 working days.

Is my information on Remember Your People kept private?

All your profile information is kept private and not exposed to third parties. The notes are private between you and the people you share them with.

Can my information be ported?

Account information is not portable. The notes will be exportable to other formats if there are enough paying users who request this feature.

What security measures do you have for data storing and transfer?

All website data is transferred to and from the server using the SSL certificate.

No plain passwords are saved in the database. Instead, we store their hashes, where we can check the password's validity, but we cannot find out what your password was.

The notes on people are encrypted using the AES-128 algorithm based on your password and our secret key and are not revealable by anybody until you log in with your password. Password reset is only possible with the recovery code you will receive per email during signup.

Payments are done through our reseller and Merchant of Record who takes care of more secure measurements. No credit card, banking, or billing information is saved on our servers.

We do daily backups and should be able to recover the lost database within 24 hours. We keep daily backups for 7 days.

Do you inform about security breaches?

If we notice any security breach where the personal data could be exposed to third parties, we are going to inform you by email within 3 days.

Do you offer your users an opt-out?

At any time you can delete your account together with the notes you created. Just request that per email from the email address you signed up with.

Contact Us

If you have any questions about GDPR compliance, please contact us.