Clear about what RYMVI handles.

1. Who we are

RYMVI is operated by OUROPT LTD. Questions about this policy or data handling can be sent to privacy@rymvi.com.

OUROPT LTD is registered with the UK Information Commissioner's Office as a data-protection fee payer under registration reference ZC231186.

2. Information stored on your device and in RYMVI Cloud

RYMVI is designed around a local library. Memories, organization data and supported local media or files are stored on your device, where RYMVI encrypts them with a key kept on that device. Readable copies made before on-device encryption was introduced are kept on the device as recovery copies until you remove them in the app.

If RYMVI Cloud is available on your account and you turn it on, a copy of your library — memory records, categories and your original photos, videos and files — is stored on RYMVI's cloud servers (Google Cloud / Firebase, in the United States) so it can sync between your devices and be restored. RYMVI Cloud is being introduced gradually and may not yet be available to you. You can choose end-to-end encryption for your cloud library: it is then encrypted on your device with a key RYMVI does not have, so RYMVI and its providers cannot read its content. Until you finish setting that up, and for readable copies made before it, the cloud copy is protected by Google Cloud's storage encryption but is not end-to-end encrypted.

3. Content you choose to save

RYMVI can handle content you choose to save, including videos, social posts, photos, websites, app links, places, ideas and supported files. Depending on the memory, this can include titles, notes, URLs, source metadata, custom categories, optional location and local media files.

4. AI processing

When you use AI-assisted features, RYMVI may send the information necessary for that feature to RYMVI backend services and external AI providers. Depending on the feature, this may include text, titles, URLs, descriptions, metadata, images or thumbnails, user questions, or video-derived information where supported.

AI features only run after you allow them in the app. Text, titles, notes, links, downscaled photos and, for a video, extracted still frames and audio are processed by OpenAI. A whole video clip, including its audio, may instead be processed by Google (Vertex AI) through a United States endpoint. A video you analyse is uploaded to temporary storage and deleted as soon as its analysis finishes; if processing is interrupted, an automatic clean-up that runs every 30 minutes removes a leftover uploaded video after 2 hours and a leftover analysis result after 24 hours. A deleted file can remain recoverable by our storage provider for up to 7 days before final removal. This temporary-file clean-up is separate from the cloud-sync clean-up steps described in section 10, which are currently paused.

Link previews are a separate choice. When they are on, the address of a link you save is sent to RYMVI's server, which fetches the page's public title, description and preview image.

Reporting AI content is also a separate choice. The app’s Report option is not yet connected to RYMVI’s servers, so reports sent from current versions of the app are not received or stored; until it is, you can report a problem to support@rymvi.com. Once it is connected: if you report an AI answer or summary from the app, RYMVI receives the kind of content, the reason you chose and any note you write; the AI text itself is included only if you tick that option, and is then sent readable. Reports are stored without your account ID — but what you write or include may still identify you — and are deleted automatically 90 days after they are sent (the database removes expired reports, usually within a day; the cloud database that stores reports has no backup copies or point-in-time recovery switched on, and deleted records stay recoverable inside it for up to one hour). They are not sent to the AI providers.

RYMVI does not promise that every social-media video can be fully accessed or analyzed. Where a platform restricts access, analysis may use public metadata or previews instead, and the app says which was used.

5. Location

Location is optional. RYMVI requests current-location access only when you choose the current-location action. You can also enter a place or address manually where supported. RYMVI does not require continuous background location tracking for normal use.

6. Backups and exports

RYMVI lets you export selected memories or create fuller .rymvi backups. A backup can contain your saved content, organization data and supported local media needed to restore the selected library data. You control where exported files are stored or shared after export.

7. Authentication and backend services

RYMVI uses Firebase services, including authentication and Cloud Functions, to support backend features. You can use RYMVI with an anonymous account or sign in with an email address or with Google. To protect its services, the app proves it is a genuine copy running on a real device (Firebase App Check, using Google Play Integrity on Android and Apple App Attest on iPhone). RYMVI's servers keep your account's plan, AI credit balance and a history of AI actions (the type of action and when it ran, not the content). If you buy a plan or AI credits in the app, the payment is made to Google Play (or, on iPhone, the App Store); RYMVI never receives your card or bank details. RYMVI's servers receive and keep the purchase details needed to give you what you bought and to handle renewals, cancellations and refunds: which plan or credit pack, the store's order and purchase identifiers, purchase and renewal dates, its status, whether it was a store test purchase, and which RYMVI account it belongs to. If a purchase can't be activated for your account, RYMVI keeps a record of it (including the order identifier) so it can be refunded. Signing in gives you back your account; it does not by itself give access to an end-to-end-encrypted cloud library, which needs your recovery phrase or a device that already holds its key. The optional app lock uses your phone’s own Face ID, Touch ID, fingerprint or passcode check through the operating system; RYMVI only learns whether the check succeeded and never receives biometric data or your passcode.

You can also sign in to your account on this website, at rymvi.com/account, to see your plan, AI credits and cloud storage, sign out of all devices or delete your account. It uses the same Firebase sign-in; your sign-in is kept in your browser’s session storage until you sign out or close the tab, and you’re signed out automatically after 15 minutes without activity. To protect sign-in from automated abuse, the account page uses Google reCAPTCHA Enterprise, which collects information about your browser and device and sends it to Google for that purpose. The account page shows no memories, media, chats, encryption keys or recovery phrases, and has no analytics.

8. Analytics and promotion

The RYMVI app contains no analytics or advertising tools, and analytics is switched off on this website. If website analytics (Google Analytics) is introduced later, it will only run after the relevant consent is given. Analytics is intentionally separated from memory content.

RYMVI memory content is not sent to Google Analytics. This includes saved memory titles, notes, saved URLs, photos, videos, documents, custom category names, AI conversations and precise GPS coordinates.

Advertising or remarketing features, if introduced, must use appropriate consent controls and must not use the contents of your RYMVI memories as targeting data.

9. Third-party services

RYMVI currently uses platform and infrastructure providers needed to operate app features, including Apple platform services, Google Play services (Play Integrity) and Google sign-in, Google reCAPTCHA Enterprise (on this website’s account page), Firebase/Google Cloud services, OpenAI (AI processing) and Google Vertex AI (video analysis). These providers process information under their own terms and privacy commitments. RYMVI does not make retention promises on their behalf that are not contractually verified.

10. Deletion and control

You can manage and delete memories in the app. Deleted memories move to Recently Deleted for 30 days before permanent removal from your device. If you use RYMVI Cloud, a permanent deletion also removes photos, videos and files that no other memory uses from RYMVI's cloud servers. Two follow-up clean-up steps are currently paused while we check them — retrying a file removal that was interrupted, and removing a deleted memory's chat history from the servers — so that data remains on the servers (encrypted, if you use end-to-end encryption) until they resume or you delete your account. Deleting your account removes your RYMVI Cloud data and account records from RYMVI's servers; deleted storage objects can remain recoverable by our storage provider for up to 7 days before final removal. Records of App Store or Google Play purchases (transaction and billing-event identifiers, and records of purchases that couldn't be activated) are kept so that one purchase cannot be credited twice and refunds can be handled. Deleting the app may also remove local app data from the device. Exported backups remain wherever you chose to store them until you delete them there.

If you use end-to-end encryption and lose both your recovery phrase and every device that holds your key, nobody — including RYMVI — can decrypt your cloud library. RYMVI support can help you regain access to your account, but cannot recover encrypted content.

11. Changes to this policy

We may update this policy as RYMVI changes. The date at the top of this page shows the current published version.

12. Contact

Privacy questions: privacy@rymvi.com
Product support: support@rymvi.com