Privacy Policy

Last updated: 2026-03-06

1. Who we are

Remindly ("Remindly", "we", "our", or "us") operates the website https://remindly.xyz and provides a cloud-based clinic management platform for healthcare teams (the "Service"). We are responsible for the personal data we collect and process. For any privacy-related questions, contact us at contact@filipmanole.com.

2. What data we collect

We collect the following categories of personal data:

Account data: name, email address, and password (stored in hashed form) when you register.
Usage data: pages visited, features used, timestamps, and device/browser information collected automatically via server logs and analytics.
Clinical content: appointment details, patient records, reminder text, and scheduling data you enter into the Service.
Billing data: subscription tier and payment confirmation. Card details are handled directly by our payment processor (Stripe) and are never stored on our servers.
Communications: any messages you send to us via email or support channels.

3. How we use your data

We use your data to:

Create and manage your account and workspace.
Deliver the Service, including sending appointment reminders on your behalf.
Process payments and manage your subscription.
Send transactional emails (e.g. verification, password reset, billing receipts).
Analyse usage to improve and develop the Service.
Respond to support requests and enquiries.
Comply with legal obligations.

We do not sell your personal data to third parties and we do not use it for advertising.

4. Legal basis for processing

We process your personal data on the following legal bases under the GDPR:

Contract performance: processing necessary to provide the Service you have subscribed to.
Legitimate interests: fraud prevention, Service security, and analytics to improve the product.
Legal obligation: where we are required to retain or share data by law.
Consent: where you have explicitly opted in (e.g. marketing communications).

5. Data sharing

We share personal data only with:

Stripe: our payment processor, for billing purposes.
Amazon Web Services (AWS): our cloud infrastructure provider. Data is stored in the eu-central-1 (Frankfurt) region.
Resend: our transactional email provider, for sending system emails.
Law enforcement or regulatory bodies when required by applicable law.

All sub-processors are bound by data processing agreements and appropriate safeguards.

6. Data retention

We retain your personal data for as long as your account is active, plus a reasonable period thereafter to comply with legal obligations and resolve disputes. When you delete your account, your data is deleted within 30 days, except where retention is required by law.

7. Your rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten").
Object to or restrict certain processing.
Data portability — receive your data in a machine-readable format.
Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, email us at contact@filipmanole.com. We will respond within 30 days.

8. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Cookies

We use only essential cookies required to operate the Service (e.g. authentication sessions). We do not use tracking or advertising cookies.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the application. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

For any questions or concerns about this policy or our data practices, contact us at contact@filipmanole.com.