Privacy Policy
Last updated: 2 November 2026
This Privacy Policy applies to Plan Post / Post Planner, also listed as “Creators app for social share” (App Store ID 6451217515), and its related support and AI services. The service is operated by Remione LTD, 75 Leontiou Machaira, Centre, Office 102, Limassol 3025, Cyprus. Alexey Strokin is the App Store publisher acting on behalf of Remione LTD. Remione LTD is the controller of the processing described here, except where a provider separately determines its own processing.
For privacy questions, access or deletion requests, email info@remione.ltd. App support is also available at support.team@hermeschat.app. Please identify the app as Plan Post or Post Planner.
The app helps you draft and organize social posts, associate photos with drafts, set reminders, and generate or rewrite text using AI. It does not require a separate registered account. An installation identifier, an Apple Account and a subscription profile are not the same thing. The absence of registration does not mean that no personal data is processed.
App-version differences: The updated app described below includes Settings → AI data sharing and an Open email draft support flow. Older installed versions may not yet include these controls. The version-specific notes below explain the differences; publishing this policy does not update an installed app.
1. Information processed and its purposes
- Drafts and planning information: post text, selected social network, planned dates and times, references to selected photo-library assets, preferences, and saved AI requests and results are stored locally to provide the planner and history features. Some app data may be included in device backups according to your Apple settings. We do not provide a dedicated cross-device cloud synchronization service for these drafts.
- AI input and output: when you invoke generation or rewriting, the relevant text, instructions, selected language and social-network context are sent through our backend to OpenAI. A pseudonymous installation identifier is also included. The response returns through our backend to the app. In the updated app, these requests are blocked until you explicitly allow AI data sharing. See section 2 for consent and older-version information.
- Installation, device and network information: the app and service providers process installation or SDK identifiers, device and operating-system information, app version, language, connection information such as IP address, and advertising identifiers when available under platform permissions. These support service delivery, diagnostics, analytics, purchase administration and attribution. An IP address may also indicate a general region; the app does not request GPS/location permission.
- Usage and diagnostics: app launches, sessions, screens, feature interactions, selected planning dates or times, network choices, AI action types, paywall and purchase events, permission choices, notification interactions, errors, crashes and technical logs help us understand use, troubleshoot failures and improve reliability. Events are associated with installation or SDK identifiers; we do not describe them as anonymous merely because they omit your name.
- Purchases: Apple and RevenueCat process product and transaction identifiers, receipts or transaction information, subscription status, trial and renewal information, and entitlement history. RevenueCat associates these records with the app's installation identifier and may receive Firebase or attribution identifiers for measurement and reconciliation. We do not receive your full payment-card details from Apple.
- Notifications: Apple and Firebase process device or notification tokens and delivery-related information for push notifications. Planned-post reminders are also scheduled locally on your device. Notification text and interaction events may appear in diagnostics or analytics.
- Support: if you email us, we receive your email address, message and any attachments you choose to send. In the updated app, the contact form opens an email draft addressed to support. Opening the draft passes its text to your chosen email app; your email provider may process drafts under its own settings and privacy policy. You review and send the email yourself. We receive the email when you send it. Analytics may record that the contact screen or email draft was opened, but the updated support flow does not include the message text in analytics events. If email cannot be opened, the text remains in the form and you can choose to copy it and contact us yourself. Do not include passwords, payment details or other sensitive information in support messages.
- Security records: our backend processes request identifiers, route, status and timing information, and rate-limit counters associated with a hashed network address, to operate the service and prevent abuse. Hashing does not necessarily make an identifier anonymous.
Support in older versions: the previous fallback contact form sent the message text as an analytics event. If your installed app does not offer the email-draft flow, use the support email address above instead of that form. Removing this collection from the updated app does not automatically erase records collected by older versions; the retention and deletion provisions in section 6 still apply.
2. AI processing and sharing
The text-generation service uses OpenAI's API through our Google Firebase/Google Cloud backend. The submitted text can contain personal data if you include it. Generation and rewriting send the text relevant to that action, app instructions, generation settings and the installation identifier; they do not require access to your social-network password or account. Selecting photos for a planned post does not itself send those photos to OpenAI in the current text-generation workflow.
Explicit AI permission: before the updated app makes its first generation or rewriting request, it explains that your text, instructions, language and social-network settings, and installation identifier will be shared through Remione LTD with OpenAI. No AI request is sent unless you choose Allow AI sharing. Choosing Not now or opening the Privacy Policy does not grant permission. Your choice is saved on your device and applies to subsequent AI requests you initiate, until you turn it off or the app requests a new choice.
You can withdraw this permission at any time in Settings → AI data sharing → Turn off AI sharing. Future AI requests are then blocked until you explicitly allow sharing again. Declining or withdrawing permission leaves local drafting and planning available. Withdrawal cannot recall requests already sent and does not itself delete data previously processed by us or OpenAI; use the deletion process in section 6 for such requests.
Do not submit sensitive personal information, confidential material, or another person's personal data unless you have an appropriate right and reason to do so. Reading this policy, installing the app or accepting the Terms is not, by itself, consent to optional processing. AI-sharing permission does not authorize advertising tracking or other unrelated processing.
AI in older versions: earlier app versions may send text when you invoke an AI action without displaying this separate permission screen. If your version has no AI data-sharing control and you do not want text sent to OpenAI, do not invoke generation or rewriting; you can continue local drafting and planning and install an update with these controls when available.
Our text backend handles requests and returns results; it does not maintain a server-side conversation-history database for Planner. Its application request logs record operational metadata rather than prompt or response bodies. This does not mean that AI requests never leave the device or have zero retention: OpenAI and infrastructure providers have their own processing and retention described below.
OpenAI states that API data is not used to train its models by default unless the API customer opts in. Its standard abuse-monitoring logs may include input and output and are generally retained for up to 30 days, with exceptions such as legal requirements; additional feature-specific retention can apply. These are provider terms, not a promise of zero retention for this app. See OpenAI API data controls and OpenAI's Privacy Policy.
3. Service providers and other recipients
Depending on the feature, app version and applicable permissions, data is processed by the following services:
- Apple: App Store purchases, transaction restoration, push notifications, device permissions and backups — Apple Privacy Policy.
- Google Firebase / Google Cloud: backend hosting, technical request processing, rate-limit storage, Remote Config, Analytics, Crashlytics and Cloud Messaging — Firebase privacy and security information and Google Cloud Privacy Notice.
- OpenAI: generation and rewriting of text — the policies and API data controls linked in section 2.
- RevenueCat: subscription and entitlement administration, purchase restoration and purchase-related measurement — RevenueCat Privacy Policy.
- Amplitude: product events, sessions and usage analysis — Amplitude Privacy Notice.
- AppMetrica: product events, installation/device statistics, diagnostics and attribution — Yandex Privacy Policy and AppMetrica data-protection information.
- Meta / Facebook: app events and advertising attribution or measurement — Meta Privacy Policy.
- Adjust, where activated in a release: installation and campaign attribution. An Adjust integration is included in the app, but collection depends on its release configuration — Adjust Privacy Policy.
We require providers receiving data on our behalf to restrict processing to the agreed purposes, apply appropriate confidentiality and security measures, and provide protection at least equivalent to this policy and applicable Apple requirements. Provider notices explain their services and any independent processing; they do not remove our responsibility for the app's disclosures and choices.
We may disclose necessary data to authorities where legally required, professional advisers, or parties to a business transfer subject to applicable safeguards and notice requirements. We do not publish your private drafts or support messages. If you copy a post and open a social app or website, any content you then submit is processed under that service's terms and privacy policy.
4. Purposes and legal bases
Where GDPR or similar law applies, we rely on performance of a contract or steps you request for necessary service delivery, purchase administration and support; legitimate interests for proportionate security, abuse prevention, troubleshooting and service reliability, subject to your rights; and legal obligations for required records and responses to lawful requests. Where consent is required for analytics, device access, advertising/tracking or AI sharing, it must be obtained for the relevant purpose and can be withdrawn. A contractual term or legitimate interest does not override a consent requirement.
AI output is offered as writing assistance. We do not use it to make solely automated decisions about you that produce legal or similarly significant effects. You decide whether and where to use or publish the result.
5. Permissions, tracking and your choices
- Photos: allow only the photo access you want to use for draft attachments. Change access in iOS Settings. Removing a draft or its photo reference does not delete the original photo from your library.
- Notifications: you may decline notifications or change them in iOS Settings. Local reminder delivery depends on your device and settings; reminders may expose their content on the lock screen.
- Tracking: you can allow or deny Apple's App Tracking Transparency request and change it under Settings → Privacy & Security → Tracking. Tracking across other companies' apps or websites and access to the advertising identifier require Apple's permission where applicable. Denying tracking must not prevent use of purchased features.
- Analytics and consent: ATT is a tracking permission, not a switch for every diagnostic or analytics service. The current app does not provide a single in-app switch that disables all analytics providers. Contact info@remione.ltd to exercise applicable objection, withdrawal or deletion rights. This contact route does not replace any separate consent or technical control that the law or platform requires before collection.
- AI sharing: in the updated app, use Settings → AI data sharing to review or withdraw your permission. This controls generation and rewriting requests; it is separate from ATT and does not switch off all analytics. See section 2 for the consent screen, the effect of withdrawal and older-version behavior.
- External sharing: the app does not automatically publish posts to your social accounts. Copying a post places its text on the system clipboard, and opening a social app or website is separate from submitting it there. The support form likewise opens a draft for you to review and send in your email app.
We do not sell personal data for money. Disclosures for advertising measurement may nevertheless qualify as a “sale” or “sharing” under some privacy laws. Where those laws apply, you may request the applicable opt-out through the contact above, without unlawful discrimination. A privacy request does not cancel an App Store subscription.
6. Retention and deletion
- Local content: saved posts remain until you delete them or remove the app's local data. Saved generation history and preferences may remain for the life of the local installation where there is no individual delete control. Uninstalling normally removes the app's local container; offloading the app can retain it. Apple backups and content copied elsewhere have separate controls.
- Installation identifier: the app stores its identifier in device storage and Keychain. Keychain values can survive reinstallation. Uninstalling is therefore not a reliable request to erase server, analytics or subscription records.
- AI consent preference: the updated app stores its AI-sharing permission on your device. Turning off AI sharing removes that permission for future requests and requires a new explicit choice before AI use can resume. This local preference is separate from the retention of requests and results already processed.
- Backend operational logs: the ordinary Google Cloud log bucket is configured for 30-day retention. Infrastructure audit logs, records preserved for security investigations or legal obligations, and providers' separate records can have different retention.
- Rate limiting: counters have an expiry timestamp approximately one day after the short rate-limit window. Database expiry cleanup is asynchronous, so this is not a guarantee of deletion at an exact hour.
- AI provider records: OpenAI retention is described in section 2. Removing a local result does not itself erase provider records.
- Analytics, diagnostics and support: retention depends on the relevant provider configuration and the period needed to analyze use, investigate failures or resolve a request. We assess whether continued retention remains necessary, delete or de-identify data when it is no longer needed, and apply valid deletion or withdrawal requests. We do not claim that every SDK record is removed after the backend's 30-day period.
- Purchase and legal records: information needed to administer entitlements, restore purchases, resolve transaction disputes or meet legal recordkeeping obligations may be retained for those purposes after other data is deleted.
To request deletion of data we control, email info@remione.ltd with the app name and enough information to locate your records, such as the address used for support or a relevant purchase reference. We may ask for proportionate verification or help locate an installation identifier; do not send your Apple password or payment-card details. We will address records held by our processors where applicable and explain any lawful retention exception. Backup copies may remain until their protected expiry; irreversibly anonymized statistics may be retained.
7. Your privacy rights
Depending on your location and the circumstances, you may request access to and a copy of your data, correction, erasure, restriction, portability, or object to processing, and withdraw consent without affecting processing lawfully undertaken before withdrawal. Under GDPR, we respond without undue delay and normally within one month; if a lawful extension is needed, we explain it within that month. Other applicable statutory deadlines and appeal rights are respected.
You may complain to your local data-protection authority or the Cyprus Commissioner for Personal Data Protection. You do not need to contact us before exercising that right.
8. International processing and security
Remione LTD is based in Cyprus. Our AI backend runs on Google Cloud infrastructure in the United States, and our providers may process data in other countries. Where data is transferred outside the EEA or UK, the applicable adequacy decision or appropriate safeguards, such as standard contractual clauses and supplementary measures where required, must support the transfer. Contact us for information about the safeguards relevant to your data and how to obtain a copy.
We use measures appropriate to the data and risks, including HTTPS for the AI service and access controls for service administration. Your device's security and the settings of external services also matter. No system is entirely secure; this policy does not promise absolute security or end-to-end encryption of AI requests, which must be processed by the backend and provider.
9. Children and age requirements
The service is intended for people planning and creating social-media content and is not directed to children under 13. If a higher age or parental authorization is required in your jurisdiction, those requirements apply. The app does not ask for a date of birth, so we cannot assume every user is an adult. An App Store age rating describes content suitability and is not consent to analytics, tracking or AI processing.
If you believe a child has provided data in circumstances requiring parental consent or other protection, contact us. We will assess the information, applicable requirements and necessary steps, including deletion or restriction where appropriate.
10. These pages and changes to this policy
Opening this page sends normal connection information, including your IP address, to our web-hosting provider. The Planner Privacy and Terms pages do not load the website's analytics script or require an account to read them. Other Remione website pages and third-party links may use their own analytics or cookies. App tracking permission does not itself give website-cookie consent.
We may update this policy to reflect changes to the service or applicable requirements. The date above identifies this revision. We will give appropriate notice of material changes and obtain fresh consent where required; posting an updated policy alone does not authorize incompatible new processing. See the Planner Terms & Conditions for service and subscription conditions.