Privacy Policy

Who we are

Remade is run by WITH GATHER LTD, which is responsible for your personal data (the data controller). We are registered with the Information Commissioner's Office, registration number ZC079327.

Email: support@withremade.com

What we keep on our servers

• Your account: your name, your email address and, if you add one, your profile photo. Your password isn't stored on our servers: Amazon Web Services holds it, in a scrambled form, to handle sign-in for us.
• Your answers to the opening questions: when you are most tempted, whether you have tried to stop before, who you want to become, your answer about your faith, which Bible translation you want and when you want reminders.
• Your record of days: the days you check in, your longest stretch without a relapse, and the milestones you reach.
• Each relapse you record: the date and time, what you write about it afterwards, and what you tick as having led to it (called “pressures” in the app).
• Your reasons for doing this (called “Your why” in the app): the words you write and the captions on your photos. The photos themselves stay on your phone.
• The Bible verse you choose to keep close.
• Your blocking lists: their names, the websites on them and their schedules. If you choose “Make me wait 60 seconds, and notify my partner” under How hard to take a break, we also keep a record of each break you take, and of each time you change your blocking so it blocks less, such as switching a list off.
• What you read: the devotionals you open and when, the verses you save, the course sessions you finish, and any note you write after one.
• Your accountability partner: who you are paired with, the messages and encouragements you send each other, your requests for help or prayer, and the times you log talking together, with any note you add.
• Reports you make about a partner, including a copy of the message you reported.
• Your subscription, if you have one: your plan and the purchase records Apple or Google send us.
• Your notification settings and the code that lets us send notifications to your phone.
• Records of when you agreed to these policies, your sign-in sessions and a security log, including your IP address.

Some information about you comes from your partner: the messages they send you, the times they log talking together with any note they add, and any report they make about you.

What you write after a relapse, your notes on course sessions, the pressures you tick, your reasons, your answers to the opening questions (apart from your answer about your faith), the names and websites on your blocking lists, and the messages between you and your partner are encrypted before they are stored. The disks that hold the database and our backups are encrypted too. Everything else, including the dates and times of your relapses and your answer about your faith, is protected only by that disk encryption.

What stays on your phone

• On iPhone, the apps you choose to block. Apple's Screen Time gives Remade a code for each app instead of its name, and those codes stay on your phone.
• On Android, the apps you choose to block. Remade uses Usage Access to see which app is open, so it can show its own screen over a blocked app. It doesn't keep a record of the apps you open.
• The places you set, such as home, the reminder you write for each one, and when you arrive at one. If you type in an address, your phone sends it to Apple to find it on a map.
• The photos you add to your reasons, and your answers to the questions Remade asks in the evening.

Crash reports and usage data

When Remade crashes or hits an error, it sends a crash report to Sentry. A crash report is technical data about what went wrong: the error, where in the code it happened, your phone's model and software version, and the version of Remade. It doesn't include anything you write or record in Remade, your name, your email address or your account number. Our server sends Sentry the same kind of report when it has an error, with none of your content.

Remade also records how the app is used, so we know what to improve. You agree to this along with the Terms and this Privacy Policy: when you tap Begin on Remade's first screen, or when you create your account if you skip the questions. Remade sends PostHog a record when you reach each of the opening questions (which question, never your answer) and when you finish them, create your account, reach a setup screen, start a trial or subscribe, create a blocking list (with how many lists you have, never their names), invite or join a partner, or open a devotional, and the first time you open the app each day. It also records how you use help in a hard moment: which steps you reach and whether you close them or tap Done, whether your apps were blocked and your partner told, and whether you finished the puzzle (wherever you play it) and roughly how many rows you cleared; and how far you get putting your armour on (a short routine to prepare for a hard time), which kind of plan you chose (never its words) and whether lists went on. How you use help in a hard moment says something about your health and sex life, so it is sensitive information (see Sensitive information). Each record carries the time it was made, your screen size, whether it's a phone or a tablet, the version of Remade and of your phone's software, and a random code for that use of the app.

Each record is linked to a random code made on your phone, not to your account, your name or your email address. It never includes anything you write, the words of your plan, who your partner is, what you are stopping, any relapse, your faith, or the apps and sites you block. Signing out stops the records straight away and replaces the random code. Deleting the app stops them.

Remade doesn't use cookies, in the app or on our website.

Our website sends PostHog a record when a page is opened, how long it is open, how far down it is read, and whether a store badge is clicked; on pages with a video or an email address, whether the video is played and how much of it, and whether the address is clicked. When you follow a link to us from another website, the record names that website, but not the page. These records use no cookies and store nothing on your device, and they are not linked to anyone: the random code that ties one visit together is made fresh each time a page opens. They never include an invite code.

Advertising

We advertise Remade in search results on Apple's App Store. Remade itself shows no ads.

RevenueCat handles our subscriptions. On iPhone, once you have an account, RevenueCat asks Apple whether one of our ads led you to Remade. If you installed Remade within 30 days of tapping one of our ads, or within a day of seeing one, Apple tells RevenueCat which ad it was, whether you tapped it or only saw it, whether you'd had Remade before, the country or region of your App Store, and which of the search words we chose matched your search, if any did. Apple never sends the words you typed. RevenueCat keeps this with your account number.

A search word can say something about your sex life, so we treat all of this as sensitive information (see Sensitive information).

We use what Apple sends only to learn which ads lead people to start a trial or subscribe. It goes no further than RevenueCat and us, and we don't track you across other apps or websites.

What your partner can see

If you have an accountability partner, they can see:

• Your name, your profile photo if you add one, and when you connected.
• How many days you have checked in (a relapse doesn't lower this number). If you share your relapse dates, they also see your longest stretch. You can hide these under Settings › What your partner sees.
• The dates you relapsed in the last 90 days: the date only, never the time, what happened or why. This is on by default. You can turn it off in the same place.
• The messages and encouragements you send them, when you ask them for help or prayer, and the times you log talking together, with any note you add.

Your partner gets notifications on their phone when you send them something. These can show your first name, for example “A word from Sam”. When you ask for help, the notification says only “Someone needs you.”

If you choose “Make me wait 60 seconds, and notify my partner” under How hard to take a break, each time you take a break, or change your blocking so it blocks less, your partner gets a notification that says only “A message might help right now.” It doesn't show your name or say what you did, but if you're the only person they're a partner to, they'll know it's from you.

If you turn on “Let my partner know when I get here” for one of your places, each time you arrive there your partner gets a notification with your first name and the name you gave the place, for example “Sam got home.”, at most once every 3 hours. To send it, we keep the name of that place and the time the last one went, until you turn it off. We never receive where the place is, a map, or when you leave, and we keep no list of your arrivals.

Your partner never sees your email address, what you write after a relapse or after a course session, the pressures you tick, your reasons, your blocking lists, where your places are or your answers to the opening questions.

If someone invited you to be their partner, they see none of your days or relapses unless you choose to share them.

Sensitive information

UK data protection law gives extra protection to information about health, sex life and religious belief. Remade holds some of each: your relapse records are about your health and sexual behaviour, and your answer about your faith is about your religious belief.

We use this information to run Remade for you, to see how help in a hard moment is used (see Crash reports and usage data), and to learn which of our ads led you to Remade (see Advertising). You agree to all three when you create your account, and you can't use Remade without agreeing.

You can withdraw your consent at any time by deleting your account, or by emailing support@withremade.com. When you withdraw, we delete your account as described under How long we keep it. Usage data isn't linked to your account, so it's kept as described there. Withdrawing doesn't affect what we did before you withdrew.

Why we use your information

• To provide Remade, under our agreement with you: your account, your record of days, your blocking lists, your partner connection, notifications and your subscription.
• With your consent as well: the sensitive information described above.
• For our legitimate interests: keeping Remade secure, preventing abuse, reviewing reports about partners, and finding and fixing crashes and errors.
• With your consent, given on Remade's first screen or when you create your account: usage data.
• To meet our legal obligations.

Who else handles your data

These companies help us run Remade. They act only on our instructions and are not allowed to use your data for their own purposes.

• Amazon Web Services: runs our servers, database and backups, handles sign-in, and sends our emails, such as sign-in codes and alerts to our team about partner reports. Your data is stored in Ireland.
• Expo: passes notifications from our server to Apple or Google, who deliver them to your phone. Expo sees the words of each notification, what kind it is, and the code for your phone. It also delivers updates to the app, so it receives your phone's IP address each time Remade opens.
• RevenueCat: keeps track of your subscription. It receives your account number, your purchases from Apple or Google, and your IP address, which your phone sends whenever it connects. On iPhone, it also receives which of our ads led you to Remade, if one did. It never receives your name or email address.
• Sentry (Functional Software, Inc.): receives crash reports from the app and our server, as described under Crash reports and usage data, and stores them in the European Union. It sees the IP address each report is sent from but doesn't keep it.
• PostHog (PostHog, Inc.): receives usage data and stores it in the European Union. It doesn't keep your IP address.

Apple and Google take your payment if you subscribe and deliver notifications to your phone. Apple also finds the addresses you type in on a map. They do this under their own privacy policies, not on our instructions.

On Android, if you turn on website blocking, the names of the sites your phone looks up, apart from the ones you block, go to Cloudflare's DNS service, which finds them and, if the adult website filter is on, blocks adult sites. They are encrypted unless the network won't allow it, in which case the network you're on can see them too. Cloudflare does this under its own privacy policy and sees your phone's IP address. Remade doesn't keep a record of them, and they never reach our servers.

Expo and RevenueCat are based in the United States, so your data leaves the UK when they handle it. Sentry and PostHog store data in the European Union, but they are based in the United States and may access it from there. We rely on the UK–US data bridge, or on contract terms approved by the UK Information Commissioner.

We don't sell your data or share it with advertisers or data brokers.

How long we keep it

• Everything in your account is kept until you delete your account.
• When you delete your account, you have seven days to change your mind. After that, everything in it is permanently deleted within 24 hours, including your sign-in record with Amazon Web Services.
• We back up our database every night and keep each backup for up to 60 days. The database also keeps a record of changes to it for up to 30 days. Copies of your data are gone from both within 60 days of being deleted.
• If your partner reported you, we keep that report after you delete your account, to protect them.
• When your account is deleted, we also ask RevenueCat to delete its record of you. Apple or Google keep their own record of your purchase, under their own policies.
• Our server logs, which include IP addresses, are kept for 30 days.
• Sentry deletes crash reports after 90 days.
• PostHog keeps usage data for up to 7 years. It isn't linked to your account, so it isn't deleted with it, and once the random code is replaced nothing links it to you.

Your rights

Under UK and EU data protection law you can ask us to:

• give you a copy of your data
• correct data that is wrong
• delete your data
• restrict or object to how we use it
• give you your data in a format you can take elsewhere
• withdraw your consent, where we rely on it

Email support@withremade.com to ask. We will reply within one month. You can delete your account yourself at any time in the app, under Settings › Delete account.

No decision that significantly affects you is made by a computer alone.

You don't have to give us any information, but we need a name and an email address to create an account.

Complaints

If you are unhappy with how we have handled your data, please tell us first at support@withremade.com. You can also complain to the Information Commissioner's Office: ico.org.uk, or 0303 123 1113. If you live in the European Union, you can complain to your country's data protection authority as well.

Age

Remade is for people aged 18 and over, and we ask you to confirm your age when you create an account. We don't knowingly collect data from anyone younger. If you think someone under 18 is using Remade, email support@withremade.com and we will delete their account.

Changes to this policy

If we change this policy in a way that affects you, we will tell you by email before the change takes effect.