REM is operated by Teranga AI, a senegalese deep-tech company. We build tools that help individuals pursue ambitious goals through structured AI coaching. References to "REM", "we", "us", or "our" in this policy refer to Teranga AI and its products.

We collect the information you provide directly: your email address (for authentication), your goals and projects ("Dreams"), daily check-in data, journal entries, and responses to onboarding questions. We also collect technical metadata such as session timestamps, feature interaction logs, and anonymised usage patterns to improve the product. If you choose Google sign-in, we receive basic account details needed to authenticate you, such as your email address, name, and profile image when Google provides them. We do not collect payment information directly; billing is handled by third-party providers under their own privacy policies.

Your data is used exclusively to provide and improve your REM experience: generating coaching insights, tracking goal progress, and personalising interactions. We do not sell your data to any third party. We do not use your personal data to train general-purpose AI models. Aggregated, anonymised analytics may be used to understand product usage at a population level. The legal basis for processing is performance of a contract (providing the service you signed up for) and, where applicable, consent or our legitimate interest in improving the product.

REM uses third-party AI providers to generate coaching responses. When you interact with the AI, portions of your conversation may be transmitted to these providers acting as data processors on our behalf. Each provider is bound by a Data Processing Agreement (DPA) and may not use your data for their own training or commercial purposes beyond inference. We pass only the minimum context necessary for each request and do not transmit your name, email, or account identity to AI providers.

Your data is stored on encrypted infrastructure hosted in the European Union. We apply industry-standard security practices including encryption at rest and in transit, access controls, and regular security reviews. In the event of a personal data breach that poses a risk to your rights, we will notify you within 72 hours of becoming aware of it, in accordance with GDPR Article 33. No system is impenetrable, but we take our obligation to protect your data seriously.

Under applicable law (including GDPR where relevant), you have the right to: access your data, correct inaccuracies, export a copy, restrict processing, object to processing, and request deletion. You also have the right to lodge a complaint with your local data protection authority. REM serves users across West Africa and globally; where local laws apply, including Senegal's Loi n°2008-12 sur la Protection des Données Personnelles, we respect those rights equally. Exercise any right from Settings to Account or by contacting us at privacy@teranga.ai. We respond within 30 days.

We retain your data for as long as your account is active, or as long as necessary to provide the service. If you delete your account, all personal data is removed within 30 days. Anonymised, aggregated data may be retained for analytical purposes with no ability to identify you.

REM uses only functional cookies necessary for authentication and session management. We do not use advertising trackers, third-party analytics pixels, or behavioural profiling cookies. There are no ads in REM, and there never will be.

REM is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the app before the changes take effect. The date at the top of this document reflects the most recent revision.

For privacy-related questions or to exercise your rights, contact us at privacy@teranga.ai. Where Google Sign-In is used, REM's handling of Google user data follows the Google API Services User Data Policy. We aim to respond within 72 hours.