Privacy Policy

What we collect

Your account: name, email address, profile picture and a unique Google account ID from Google Sign-In; your timezone, sign-off name and tone preferences.

Your people: the names, email addresses, relationships, dates and facts you enter about them. These people have not signed up for anything, so we treat their data as yours and never contact them except to deliver the email you scheduled.

Sending: a copy of every email we generate and send, its status, and the Gmail message ID, so you can see exactly what went out.

Session and device info: IP address, browser, operating system and approximate location (country), so you can see and revoke your active sessions in Settings.

Billing (Plus plan only): handled entirely by Stripe. We store your subscription status, not your card details.

What Google user data we access

Profile data, via Sign in with Google (openid, email, profile scopes): your name, email address, profile picture and Google account ID. We use this to create and identify your account.

Gmail send access, via the gmail.send scope only: the ability to compose and send a message from your Gmail address. This scope cannot read, search, list, modify or delete anything already in your mailbox, and we never request broader Gmail or Google Workspace access.

We do not access your Google Contacts, Calendar, Drive, or any other Google product or data type. We only ever request the minimum scopes above.

How we use Google user data

To create and sign you into your DontRemember account, and to show your name and picture in the app.

To send the emails you schedule, at the time you chose, from your own Gmail address, through the Gmail API, using the gmail.send scope. Every email you schedule is generated first and, if you have the heads-up notification on, shown to you before it goes out.

To send you DontRemember's own account emails (welcome, heads-up, sent/failed confirmations) to the address on your Google account.

We never use Google user data for advertising, to build advertising profiles, or to train general-purpose or generalized AI/ML models. We never use it for any purpose unrelated to operating DontRemember, and never for marketing to the people you add as recipients.

Who we share, transfer or disclose Google user data with

We do not sell, rent, or share Google user data with any third party for their own marketing, advertising, or independent use, and we never share it with the recipients you add.

We share the minimum necessary data with a small number of service providers who process it on our behalf, under contract, solely to operate DontRemember: our database and hosting infrastructure (to store your account, encrypted at rest); OpenAI, via the Vercel AI SDK (to draft the wording of your scheduled emails from the facts and dates you provide — this does not include your Gmail token, profile picture, or Google account ID, and providers are contractually barred from training their models on this data); Stripe (your name and email only, and only if you upgrade to Plus, to process billing); and Amazon SES (to deliver DontRemember's own account emails to your address). None of these providers may use Google user data for their own purposes.

We may disclose Google user data if required by law, subpoena, or court order, to protect the rights, property or safety of DontRemember or our users, or if DontRemember is involved in a merger, acquisition or asset sale — in which case we will notify you and the new entity remains bound by this policy.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. See the Google API disclosure page for the full scope-by-scope breakdown.

How we protect Google user data and other sensitive data

We never see or store your Google password: sign-in and Gmail access both use OAuth, handled entirely by Google.

Gmail OAuth refresh tokens are encrypted at rest with AES-256-GCM and decrypted only in memory, at the moment we send an email you scheduled. They are never logged, never exposed to the browser, and never included in exports.

All data in transit between your device, DontRemember and Google travels over HTTPS/TLS.

Access to production data is restricted to the engineers who operate DontRemember, on a need-to-know basis, and is never shared with anyone else inside or outside the company beyond the service providers listed above.

Session tokens are revocable: signing out, or removing a device in Settings, immediately invalidates that session.

Retention and deletion of Google user data

Your Gmail refresh token is retained only for as long as Gmail stays connected. Disconnecting Gmail in Settings, or revoking access at myaccount.google.com/permissions, deletes the token from our database immediately and stops all sending right away.

Your Google profile data (name, email, picture, account ID) is retained for as long as your account is active, so we can identify you and keep the app working.

Deleting a person removes their facts, dates and unsent drafts immediately. Sent emails are kept in your history unless you delete them.

Deleting your account permanently erases your profile data, your people, your drafts and history, and your Gmail refresh token, within 30 days, and revokes our Gmail access with Google immediately. Emails already sent stay in your Gmail Sent folder, because you sent them from your own address; we don't control your mailbox.

What we never do

Sell or rent your data, including Google user data. Share the people you add with anyone. Train AI models on your emails or your Google profile data. Send an email you did not schedule.

Your rights

You can view, export or delete your data, disconnect Gmail, or revoke Google access from Settings at any time, or email us and we will do it within 7 days.