Privacy Policy

Last updated May 20, 2026

Amy AI Inc. and its affiliates (“Remy”, “Us”, “We”) are deeply committed to protecting the privacy and security of our customers’ data. This Privacy Policy is intended to describe our practices regarding the personal information we may collect from you when you use or access our Services, the ways in which we may use such information, and the choices and rights available to you. This Privacy Policy supplements and shall be read in conjunction with our Terms of Use, and may be supplemented by additional privacy statements, terms or notices provided to you. Capitalized terms which are not defined herein, shall have the meaning ascribed to them in our Terms of Use.

1. YOUR CONSENT

PLEASE READ THIS PRIVACY POLICY BEFORE ACCESSING AND USING THE SERVICES. BY ACCESSING THE SERVICES, YOU AGREE TO THIS PRIVACY POLICY, INCLUDING TO THE COLLECTION AND PROCESSING OF YOUR PERSONAL INFORMATION (AS DEFINED BELOW). IF YOU DISAGREE TO ANY TERM PROVIDED HEREIN, WE WILL NOT BE ABLE TO SUPPLY THE SERVICES, AND YOU MAY NOT ACCESS OR USE THE SERVICES.

PLEASE NOTE: YOU HEREBY ACKNOWLEDGE AND AGREE THAT YOU ARE PROVIDING US WITH PERSONAL INFORMATION AT YOUR OWN FREE WILL AND THAT WE MAY COLLECT AND USE SUCH PERSONAL INFORMATION PURSUANT TO THIS PRIVACY POLICY AND ANY APPLICABLE LAWS AND REGULATIONS.

TO THE EXTENT THAT DURING THE ACCESS TO OUR SERVICES, ANY PERSONAL INFORMATION RELATED TO ANY OTHER PERSON OR THIRD PARTY WHICH IS NOT PROVIDED BY YOU, YOU ARE SOLELY RESPONSIBLE TO RECEIVE THE CONSENT, AUTHORITY, PERMISSION AND APPROVAL OF SUCH PERSONS AND TO PROVIDE THEM WITH SUFFICIENT DISCLOSURES, TO ALLOW US TO ACCESS, STORE, COLLECT, ANALYZE AND PROCESS SUCH PERSONAL INFORMATION AS DETAILED HEREIN. BY ACCESSING THE SERVICES, YOU REPRESENT THAT YOU HAVE RECEIVED SUCH CONSENT, AUTHORITY, PERMISSION OR APPROVAL, AND THAT YOU SHALL MAINTAIN SUCH CONSENT, AUTHORITY, PERMISSION OR APPROVAL AT ALL TIMES YOU USE THE SERVICES.

2. WHAT TYPES OF PERSONAL INFORMATION DO WE COLLECT?

“Personal Information” is information about an individual that includes identifying information, or may with reasonable efforts or together with additional information we have access to, enable the identification of an individual. Identification of an individual also includes the association of such an individual with a persistent identifier such as a name, an identification number, a persistent cookie identifier, etc. Personal Information does not include information that has been anonymized or aggregated and can no longer be used to identify a specific natural person.

Personal Information that is collected by us consists of the following types of information:

o Account & Authentication Information. We collect your phone number for authentication via one-time passcode (OTP) and to send you notifications. We also collect a display name, username handle, and optional user bio that you provide when setting up your profile.

o Photos and Content. To provide the Services, the App requires access to your device's camera roll. The App will only access photos taken after you grant such permission ("go-forward" basis) and will automatically upload eligible photos from your gallery. We collect the photo image data and associated metadata (including creation date, camera make and model, and lens information), as well as content derived from it, such as AI-generated captions and content moderation classifications. Uploaded photos that pass content review are stored and displayed to your network. Photos identified as violating our content policies are not retained by us, and we will have no access to such photos following their classification as prohibited content.[H-F & Co.1]

o Location Information. Where photos contain GPS coordinates in their metadata, we collect and store that location data and convert it to a human-readable place name (city and country) for display on posts and for caption generation.[H-F & Co.2]

o Social Activity Data. We collect and store your social activity data within the App, including posts, comments, likes, friendship connections, and related engagement data.

o Technical and Usage Data. We collect standard usage and technical data such as your IP address, device type, session information, and activity logs for operational and security purposes.

o Information From Cookies. Information that we collect using “cookie” technology. Cookies are small packets of data that a website stores on your computer’s or mobile device’s hard drive so that your computer will “remember” information about your visit. We use both first- and third-party session cookies and persistent cookies, as further detailed in section 9 below. For more information, please refer to our Cookie Policy [Link].

o Biometric Data. Where you have provided your explicit opt-in consent, we may process facial geometry data extracted from photos solely to enable features such as face detection and friend-tagging. This processing is optional, and you may withdraw your consent at any time. Biometric data is retained only as long as necessary to provide these features and is deleted upon withdrawal of consent or account deletion.

We do not collect any Personal Information from you or related to you without your approval, which is obtained, inter alia, through your acceptance of this Privacy Policy.

3. HOW DO WE COLLECT PERSONAL INFORMATION FROM YOU?

● We collect information through your use of the Service. In other words, you are aware that through your usage of the Service we may gather, collect and record the personal information relating to such usage, including by using “cookies” and other tracking technologies, as further detailed below.

● We collect information which you provide us voluntarily when you use or interact with our Services. For example, we collect Personal Information that you provide when you register for an account or interact on the App.

● We collect information from other sources you approve. For example, when you log-in to the Services via Gmail or Apple, we may have access to Personal Information from your accounts, only if and to the extent you provided your permission for such collection.[H-F & Co.3]

4. WHY DO WE COLLECT AND PROCESS YOUR INFORMATION?

● To provide, operate and improve our Services and related offers and to manage our business.
● Photos from your gallery will be processed solely to provide and improve our services (including, caption generation, content moderation, display to your network, and personalizing the user experience), as well as for limited debugging and quality assurance purposes.
● To contact users to provide them with technical assistance, and support, handle requests and complaints, and collect feedback in connection with the Services;
● To handle reports of harmful or offensive content. Users may report content they believe violates our policies. Upon receipt of a report, we will review the reported content and, where we determine it to be in violation of our policies, we will act to remove it as soon as reasonably practicable. Photos that are determined to be prohibited content will not be retained by us and we will not have access to such photos following their removal.[H-F & Co.4]
● To send you updates, notices, notifications, and additional information related to the Services, including related offers.
● To create cumulative statistical data and other non-personal information, which we and/or our business partners might make use of to operate and improve our services and internal research and development of our services.
● To monitor against, prevent, and handle fraud, illegal behavior on the Services, or other misuse of our Services, including inter-alia detecting, preventing, or otherwise addressing fraud or abuse.
● To comply with any applicable rule or regulation and/or respond or defend against legal proceedings versus us or our affiliates.
● To contact you about legal requests.

5. WHAT ARE OUR LEGAL GROUNDS FOR COLLECTING YOUR PERSONAL INFORMATION?

● With your informed consent: We ask for your consent to collect and process your information for the specific purposes stated in this Privacy Policy; you have the right to withdraw your consent at any time.

● Performance of the contract with you: We collect and process your Personal Information in order to provide you with the Services, following your acceptance of this Privacy Policy and pursuant to the Terms of Use.

● Legitimate interests: We process your information to protect our legitimate interests while applying appropriate safeguards that protect your privacy. This means that we process your information for purposes like detecting, preventing or otherwise addressing fraud, abuse, security, usability, functionality or technical issues with our Service; protecting against harm to the rights, property or safety of our properties, our users or the public as required or permitted by law; enforcing legal claims, including investigation of potential violations of this Privacy Policy; and in order to comply and/or fulfill our obligations under applicable laws, legal process, subpoena or governmental request.

6. WHO DO WE SHARE YOUR INFORMATION WITH AND WHY?

We share your information with our processors, after ensuring that their use is limited to the supply of the Services.

● Third Parties & Business Partners – We may share your information with selected service providers required to operate our Services, including cloud infrastructure (AWS), AI processing (OpenAI), SMS delivery, and image processing services. Our service providers act as sub-processors and may only process your information according to our instructions. [5]

● Protecting Our Rights and Safety – We may share your information to enforce this Privacy Policy and/or the Terms of Use, including investigation of potential violations thereof; to detect, prevent, or otherwise address fraud, security or technical issues; or otherwise if we believe in good faith that this will help protect the rights, property or personal safety of any of our users, or any member of the general public.

● Law Enforcement – We may share personal information in order to comply with government or law enforcement legal requests. We may disclose any information to government or law enforcement officials as we believe necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), to protect our or a third party’s property and legal rights, to protect the safety of the public or any person, or to prevent or stop any activity we may consider to be, or to pose a risk of being, illegal, unethical, inappropriate or legally actionable.

● Potential transfer of ownership - Should Remy undergo any change in control, including by means of merger, acquisition or purchase of substantially all of its assets, your information may be shared with the parties involved under strict security conditions and in accordance with this Privacy Policy. If we believe that such change might materially affect your Personal Information, we will notify you through prominent notice on our Services.

Please note that there are few places throughout the Services where You may click on a link to access other websites or services that do not operate under this Privacy Policy and are not related to Us, including, but not only, links leading to third-party websites. These links may inter alia independently solicit and collect information, including Personal Information, from You and, in some instances, provide Us with information about Your activities on those links. Every third party such as referred to above may have its own privacy policy describing its use of Personal Information, and such policy will regulate the use, handling, and disclosure of such Personal Information of its user. Should You require additional information regarding any privacy policy of third parties, we recommend that You visit these third-party websites and read their privacy policies. It is clarified that such third parties, unless explicitly mentioned otherwise, are neither controlled nor owned by Remy[H-F & Co.6] .

For avoidance of doubt, we will NOT sell (as “sell” is traditionally defined) your personal data. That is, we will not provide your name and email or other personally identifiable information to third parties in exchange for money. We may share anonymized or de-identified information with any other third party, at our sole discretion. However, under California law, certain cases of sharing information, such as for advertising purposes, may be considered a “sale” of personal information. However, to the extent applicable, including if a supervisory authority determines that our practices include the selling and/or sharing of your personal information (as such terms are defined under applicable US State Privacy Laws including the CCPA), and you would like to opt out of the “sale” or “sharing” of your personal information, please contact us at [team@amy.company[7] ]. To the extent required by applicable law, users between the ages of 13 and 18 will be required to provide active opt-in consent prior to any sale or sharing of their personal information.

7. WHERE DO WE TRANSFER OR STORE YOUR PERSONAL INFORMATION?

Your information may be transferred to, maintained, processed and stored by us and our service providers in Israel and outside of it, including the United States and EU. Your information is primarily stored on servers in the EU (Frankfurt, Germany via AWS). For AI-powered features, photos and related data are transferred to the United States (OpenAI).

Where required by applicable law, we ensure appropriate safeguards are in place for international transfers of your personal information from your home country to the U.S. and/or other countries, including through Standard Contractual Clauses where applicable.

GDPR (EEA Users): This section applies only to natural persons residing in the European Union, EFTA States, or the United Kingdom (for the purpose of this section only, "you" or "your'' shall be limited accordingly). It is the Company's policy to comply with the EEA's General Data Protection Regulation (“GDPR”) and the UK GDPR. In accordance with the GDPR, we may transfer your Personal Information from your home country to the U.S. and/or other countries, provided that the transferee has provided appropriate safeguards, and on condition that enforceable data subject rights and effective legal remedies for data subjects are available. Specifically, we may cause such transfer if we ensured that at least one of the following applies:

⮚ The country to which Personal Information has been transferred, has been determined by the EU Commission to be a country providing adequate protection to the privacy rights of EU residents.
⮚ Application of Standard Contractual Clauses where appropriate.

8. WHAT ARE YOUR RIGHTS?

Under certain laws, including Israeli laws, the EU, UK General Data Protection Regulation (GDPR) or US-state data protection laws individuals have rights regarding their personal data. You can exercise your rights at any time via the Services or by contacting us at team@amy.company. Those rights may include, but are not limited to, the following:

⮚ Right of access. You may have a right to know what information we hold about you and, in some cases, to have the information communicated to you. We reserve the right to ask for reasonable evidence to verify your identity before we provide you with any information.
⮚ Right to correct Personal Information. We endeavor to keep the information that we hold about you accurate and up to date. Should you realize that any of the information that we hold about you is incorrect, please let us know and we will correct it as soon as we can. The setting for a particular forum may also allow you to close your account, on the setting page for your account.
⮚ Data deletion. In some circumstances, you have a right to request that some portions of the Personal Information that we hold about you be deleted or otherwise anonymized.
⮚ Data portability. In some circumstances, you may have the right to request that we will provide you with the Personal Information you have made available to us, so you can transfer it to another party.
⮚ Restriction of processing. Under EU, UK General Data Protection Regulation (GDPR), in some cases, you may have the right to request restriction of the processing of your Personal Information, such as when you are disputing the accuracy of your information held by us.

Remy may decline requests to exercise data subject rights if there is a legitimate reason, such as if we cannot authenticate your identity, if the request could violate the rights of a third party or applicable law, or prevent us from delivering a service you requested.

9. COOKIES OR SIMILAR TRACKING TECHNOLOGIES

We use certain monitoring and tracking technologies, including ones offered by third party service providers. These technologies are used in order to maintain, provide and improve our Services on an ongoing basis, and in order to provide a better experience to our users. For example, these technologies enable us to: (i) keep track of our users’ preferences and authenticated sessions, (ii) secure our Services by detecting abnormal behaviors, (iii) identify technical issues and improve the overall performance of our Services, and (iv) create and monitor analytics.

It is important to note that some of these tracking technologies are provided to us by our Services Providers who collect and process personal information in the scope of the services that they provide us.

Learn more about your choices and how to opt-out of tracking technologies:
In order to delete or block any tracking technologies, please refer to the “Help” area on your internet browser for further instructions, or You may also opt out of third party tracking technologies by following the instructions provided by each third party service provider or visiting www.youronlinechoices.eu or http://www.aboutads.info/choices/ . Please note, however, that deleting any of our tracking technologies or disabling future tracking technologies may prevent you from accessing certain areas or features of our Websites, or may otherwise adversely affect your user experience. Please also note that we do not respond to the ‘Do Not Track’ setting on your browser as the protocol and form for such setting has not yet been generally accepted.‍
‍
10. HOW DO WE KEEP YOUR INFORMATION SECURE?[8]

We have implemented administrative, technical, and physical safeguards to help prevent unauthorized access, use, or disclosure of your Personal Information. We limit access of your information only to those employees, third party service providers or partners on a “need to know” basis, and strictly in order to enable us to perform the agreement between you and us.
User data is stored in a highly-secure facility operated by Amazon Web Services in the EU (Frankfurt), protected by a range of security measures including encryption in transit and at rest, access controls, and security monitoring

Despite these measures, Remy cannot guarantee absolute information security, and security incidents may occur. If you have any questions about security, please contact us at team@amy.company.

11. HOW LONG WILL WE RETAIN YOUR INFORMATION?

We retain your Personal Information for as long as your account is active and as needed to provide our Services. Different data categories have different retention periods as detailed in our retention policy. [9] If you withdraw your consent to our processing your Personal Information, we will delete your Personal Information from our systems (except to the extent retaining such data in whole or in part is necessary to comply with any applicable rule or regulation and/or to respond to or defend against legal proceedings brought against us or our affiliates).

12. UPDATES TO THIS PRIVACY POLICY

This Privacy Policy is subject to changes from time to time at our sole discretion. The most current version will always be posted on our Services. You are advised to check for updates regularly. By continuing to access and use our Services after any updates become effective, you accept and agree to be bound by the updated Privacy Policy.

13. DIRECT MARKETING[10]

You hereby agree that we may use your contact details provided during registration for the purpose of informing you regarding updates and offers related to our Services that may interest you and other related marketing materials. You may withdraw your consent via sending a written notice to Us by email to the following address: team@amy.company or by clicking the “Unsubscribe” button displayed in the email you received. In addition, we may use your phone number in order to send you recurring marketing messages and promotions. You are able to opt-out from such recurring text messages at any time by replying to the text message we sent you, clicking the link in the text message, or otherwise, whichever is available to you. Once you opt out, you may receive one SMS confirming you have successfully opted out. After that you will receive no further messages unless you opt-in again.

14. GENERAL INFORMATION

This Privacy Policy, its interpretation, and any claims and disputes related hereto, shall be governed by the laws of the State of Delaware, USA without respect to its conflict of law principles. Any and all such claims and disputes shall be brought in, and you hereby consent to them being litigated in and decided exclusively by a court of competent jurisdiction located in Delaware, U.S.

15. Our Audience

Our Services are directed to individuals 13 years and older. Our Services are not directed to children under the age of 13, and you must confirm that you are 13 years or older in order to create an account and use our Services. If we have actual knowledge that you are under the age of 13 (or the minimum age at which a person may use the Services in your state, province, or country without parental consent, if greater), we will stop providing Services to you and delete your account and data.

16. HOW CAN I CONTACT YOU?

If you wish to exercise any of the aforementioned rights or receive more information, please email us at team@amy.company.

Remy may provide you with notices concerning this Privacy Policy via the phone number you provided upon registration.