← Back to home

Privacy Policy

Last updated: October 8, 2026

1. Introduction

This privacy policy describes how Reminiscio, referred to as we, us, our or the Publisher, collects, uses and protects the personal data of users of the Reminiscio application, referred to as the Service, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

2. Data Controller

The controller of personal data is Telly D., publisher of the Reminiscio service as an individual acting in a non-professional capacity. For any question about your data, you can contact us at: privacy@reminiscio.com

2.1 Minor users

The Service is intended for people aged 16 or older. Use of the Service by a minor under 16 requires the consent of a legal representative. A legal representative may contact us for any question related to a minor's data or account.

3. Data Collected

3.1 Data provided directly

  • Identification data: name, first name or display name, email address, username, profile picture, login provider and information necessary to manage the account. This data may come from a third-party identity provider, including Google or Apple, or from email login.
  • User content: text, photos, audio, videos, captions, dates, comments, reactions, private messages and metadata associated with posts published or transmitted through the Service, including media format, dimensions, duration and file size where applicable.
  • Location data: places associated with posts, coordinates, accuracy, place label, city, region, country and location source, only when the user chooses to add or confirm a location. This information may come from manual entry, the device's current position, the photo library, EXIF metadata from a photo or geocoding services.
  • Media, camera, photo library and microphone: the application may access your device camera, photo library and microphone to let you create photo, audio or video posts, generate video preview images, choose a profile picture, retrieve certain useful metadata and, if you enable it, transcribe audio.
  • Social data: friend requests, friendships, post visibility, including the date a post was made public, the date on which you confirmed being 16 or older before first making a post public, notifications, presence or recent activity related to conversations, the list of users you have blocked, as well as information necessary to display profiles and interactions.
  • Report data: when you report a post, a comment or a user, we record your account, the reported item and user, the reason you choose, any optional details you add, a short text excerpt of the reported item, the date, the handling status and the handling date. Notices of unlawful content sent by email are kept with the information they contain.
  • Sharing data: temporary public links created by the user, expiration date, revocation status and data necessary to display the shared post.

3.2 Data collected automatically

  • Technical data: device type, operating system, browser, application and SDK versions, compatibility information, technical logs and errors necessary for the proper operation and security of the Service.
  • Error and performance monitoring data: when Sentry is enabled, the Service may send error messages, stack traces, sampled navigation and performance traces, requested URLs, and technical application, browser or device context. The mobile application also sends identifiers and technical information about the installed Expo update. Default transmission of user identity data is disabled, and we do not enable session replay or attach post media to Sentry events. URLs, error messages or stack traces may nevertheless contain data related to your use of the Service.
  • Mobile purchase infrastructure data: the mobile application initializes RevenueCat with a random anonymous SDK identifier and may transmit limited application, device and network information, including a country inferred from the request IP address. The current implementation does not send a Reminiscio account identifier or custom user attributes to RevenueCat and does not currently offer paid subscriptions. Transaction data would be processed only if a purchase feature were offered and used.
  • Connection data: IP address, login date and time, session identifier
  • Notification data: push notification token when the user enables notifications
  • Email messaging data: email address and information strictly necessary to send login links, service messages and administrative notifications. When an account is created, an internal notification may be sent to the Publisher with essential information about the new user in order to monitor Service activity.

4. Purposes and Legal Bases

  • Provision of the Service (performance of a contract): account creation, storage and display of posts, timeline features, profile, public profile, Discover feed, friends, comments, reactions, private messages, notifications, blocking, sharing links and audio transcription requested by the user.
  • Service improvement (legitimate interest): internal functional statistics, sampled error and performance diagnosis through Sentry, and improvement of features and user experience.
  • Security (legitimate interest): fraud detection and protection against unauthorized access
  • Mobile purchase infrastructure (legitimate interest): technical initialization and verification of the RevenueCat integration using an anonymous SDK identifier. No paid subscription is currently offered by the Service.
  • Moderation and abuse prevention (legitimate interest and, for handling notices of unlawful content and informing the persons concerned of moderation decisions, legal obligation): review of published or uploaded content, notably photos and videos, handling of reports and notices, and informing the users concerned of moderation decisions, to prevent unlawful, abusive or fraudulent content, or content that violates the Terms of Use.
  • Communications (performance of a contract, legitimate interest or consent depending on the case): email login links, service messages, notifications related to interactions, important updates and push notifications when the user enables them.
  • Compliance with legal obligations (legal obligation): retention of certain information when required by law or in the event of a request from a competent authority.

4.1 Manual content moderation

To prevent abuse and protect the Service, photos, videos and other content published or uploaded may be manually reviewed by the Publisher. This review is limited to content necessary for moderation, Service security, handling a report, user support or compliance with a legal obligation.

This review is not intended to use your content for commercial, advertising or other purposes unrelated to the operation, security and moderation of the Service.

5. Retention Period

Your personal data is kept for the duration of your account use. If an account is deleted, account data and associated content are deleted as soon as technically possible and no later than 30 days, except where legal retention obligations apply or where technical constraints related to backups, security logs and traces necessary to prevent abuse require otherwise. Public sharing links expire automatically after a limited period, currently 24 hours, and may be revoked by the user. Email login links expire after a short period.

When you remove a post from the public audience or delete it, it immediately disappears from the Discover feed and your public profile. Media access links issued for public display expire no later than one hour after they are issued. We cannot delete copies, screenshots or recordings made by third parties while the post was public.

Reports you submit, blocks that concern you and the date of your age confirmation are deleted with your account. A handled or dismissed report is automatically deleted 12 months after it was handled; until then, it may be kept with its reason and excerpt, even if the reported content or account has been deleted, as part of the traces necessary to prevent abuse. A pending report is kept until it is handled.

6. Data Sharing

We never sell your personal data. Your data may be shared with:

  • Technical processors: website hosting (Vercel), database and file storage (Supabase), authentication services (Google and Apple), email sending (Resend), web map tiles (OpenStreetMap), location, geocoding and place autocomplete services (Google Maps/Places), audio transcription when requested by the user (OpenAI), push notifications and app updates (Expo, Apple and Google), error and performance monitoring (Sentry), and mobile purchase infrastructure (RevenueCat), only to the extent necessary to provide, secure and maintain the Service. Sentry receives the diagnostic data described above. RevenueCat receives the anonymous SDK identifier and limited technical data described above; it may process transaction data only if a purchase feature is offered and used.
  • Other users: some content may be visible to your friends, to members of a group or to users with whom you interact, depending on visibility settings and features used. When you react to a post, its author can see your name, username, profile picture and reaction.
  • All signed-in users: your public profile, which only shows your name, username, profile picture and public posts, can be viewed by any user signed in to a Reminiscio account. When you choose the "Public" audience, which is never applied by default, the post is visible to these users, including people who are not your friends, in the Discover feed and on your public profile. They see the media, text, caption, the date associated with the post, city and country, your name, username and profile picture, and the number of reactions, but not the coordinates, the place label, the associated journey or the comments. Public posts cannot be accessed without an account and are not indexed by search engines, and an audio post cannot be public. Users you have blocked, or who have blocked you, do not see your posts in the Discover feed and cannot view your profile.
  • Recipients of a public link: when you voluntarily create a temporary sharing link, anyone with that link can view the shared content during its validity period. A link to an individual post cannot be created for an audio post. A journey sharing link may contain audio and video posts.
  • Publisher and Service administration: necessary data may be accessed by the Publisher to manage the Service, provide support, manually review content for moderation purposes, handle reports, notices and deletions and protect user security. Each report is sent by email to the Publisher with the name, email address and identifier of its author, the reason, the details and the excerpt of the reported item. The Service does not disclose the identity of the reporter to the reported user. The Publisher uses your email address to inform you of a moderation decision concerning you or of the outcome of a notice you sent.
  • Competent authorities: in the event of a legal obligation or judicial request

7. Data Transfers

Some data may be processed outside the European Union by our processors. In that case, we ensure that appropriate safeguards are in place, such as European Commission standard contractual clauses or an adequacy decision.

8. Cookies

The Reminiscio website uses only cookies strictly necessary for the Service to operate, such as session and authentication cookies. No advertising or third-party tracking cookie is used.

9. Your Rights

Under the GDPR, you have the following rights over your data:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure: request deletion of your data
  • Right to portability: receive your data in a structured and readable format
  • Right to object: object to the processing of your data on legitimate grounds
  • Right to restriction: request restriction of processing in certain cases

To exercise these rights, contact us at: privacy@reminiscio.com

You also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or alteration. This includes encryption of data in transit (HTTPS/TLS), strict access control and system monitoring.

11. Minors

The Service is intended for people aged 16 or older. Use of the Service by a minor under 16 requires the consent of a legal representative. The legal representative may exercise rights related to the minor's data by contacting us at the address indicated on this page.

12. Changes

We reserve the right to modify this privacy policy. In the event of a substantial change, we will inform you by notification in the application. The last updated date is shown at the top of this page.

13. Contact

For any question about this privacy policy or your personal data: privacy@reminiscio.com