Infinite Memory provides Rewind Desktop and rewind.app. This policy explains what information we process, why we process it, and the choices you have. For privacy questions or requests, contact padmanabhan@infinitememory.io.
Your screen history
Rewind records your screen after you grant macOS screen-recording permission. Recordings, extracted text, and the search index are stored on your Mac by default. Screen history can contain sensitive information from the apps and websites you use. You control recording and can remove history through the app. Protect access to your Mac and record only information you are authorized to capture.
If you enable optional cloud archiving, Rewind encrypts older recordings and recovery backups on your Mac before uploading them to your own Amazon S3 bucket. Recovery backups can include extracted text and history metadata. Text search runs locally; archived video is downloaded when needed. Cloud storage is optional and is governed by your AWS account settings and terms. Recovery requires either an enabled account recovery backup or a separately saved recovery key. Recordings that were never uploaded are not included in cloud recovery.
In versions with guided AWS connection, the app sends a Rewind authentication token directly to AWS to obtain temporary access to the archive role you authorize. That token contains account identity claims. AWS uses it to verify that your Rewind account can access that role. The archive encryption key is stored in macOS Keychain. You may also enable account recovery or export an independent recovery key.
Versions with account-linked archives store the bucket name, region, archive folder, authorized AWS role when present, and an encrypted key-verification marker with your Rewind account in Supabase. This lets another Mac find the same archive after sign-in. If you enable account recovery, we separately store an encrypted recovery package in Supabase Vault containing your archive encryption key. Older manual AWS connections also include the permanent AWS credentials needed to access that archive. Our authenticated recovery service can decrypt this package and return it to the signed-in archive owner, so a replacement Mac can regain access without the original Mac or a key file. On a replacement Mac, the app automatically restores available searchable history while connected to power and an unmetered network. You can pause or start this restore in Settings. Archived recordings are downloaded when you browse them. This means Rewind can recover the archive key; this option does not provide encryption that excludes Rewind from key access. Recovery packages are not included in analytics. Archives created before account recovery was enabled still require their saved recovery key and, for manual connections, AWS credentials. Deleting your account deletes its active recovery package; provider backups may retain encrypted copies through their normal retention cycle.
Google sign-in and your account
We use Google sign-in through Supabase to authenticate you. Google provides basic account information, such as your name, email address, profile image, and account identifier. Supabase stores authentication records and issues session tokens so you can sign in to the website and app. We do not receive your Google password. This sign-in does not request access to your Gmail, Google Drive files, contacts, or calendar.
We use Google account information to create and secure your Rewind account, connect it to your subscription and devices, and provide account support. We do not sell Google user data, use it for advertising, or use it to train AI models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Subscriptions, devices, and support
- Billing: Stripe processes payments. We store your email, Stripe customer and subscription identifiers, subscription status, and billing-period information. Payment-card details are handled by Stripe rather than stored in Rewind's account database.
- Device and security records: We process account and device identifiers, device names, app versions, sign-in and subscription-validation times, results, and IP addresses to manage access, diagnose problems, and protect the service.
- Support: We process messages and files you choose to send us to answer your request. Avoid sending recordings, recovery keys, passwords, or other sensitive content unless it is necessary and you intend to share it.
Website and app analytics
The website uses Vercel hosting and Web Analytics to understand page visits and performance. Requests to our website and service providers expose ordinary connection information, such as IP address and browser information. Authentication cookies keep you signed in. The website also loads fonts from Google Fonts.
Versions of Rewind that include usage analytics send feature-use and performance events to Amplitude after showing an analytics notice. Usage sharing is enabled by default in those versions and can be turned off in Settings → General → Privacy. Events can include a random installation identifier, your Rewind account identifier when signed in, app version, feature actions, counts, and timings. Analytics does not include your recordings, screen images, extracted text, search text, browsing URLs, or session replays.
Turning off app usage analytics stops new collection and clears unsent events. It does not automatically remove events already received by Amplitude; contact us for a deletion request.
When information is shared
We use service providers to operate Rewind, including Supabase for authentication and account data, Stripe for payments, Vercel for the website, and Amplitude for app usage analytics where enabled. Optional archives are stored in your own AWS account. Providers receive information needed for their service. Information may be processed in countries other than where you live.
We may also disclose information when required by law, to respond to valid legal process, to protect people or the service from abuse, or as part of a business transfer subject to appropriate protections. We do not sell your personal information or share it for cross-context behavioral advertising.
Retention and your choices
Local history remains under your control. Removing the app alone may leave local history or cloud archives behind. Disabling archiving stops new uploads but does not by itself delete existing objects in your AWS bucket.
We retain account, billing, security, and support information for as long as needed to provide the service and meet legal, accounting, dispute-resolution, and security obligations. You can request access, correction, a copy, or deletion of personal information by emailing padmanabhan@infinitememory.io. We may need to verify your identity. Some records may need to be retained for the obligations above, and deletion from backups may occur through their normal retention cycle.
You can revoke Rewind's Google access in your Google Account connections. Revoking access does not automatically cancel a subscription or delete existing Rewind account records. Manage subscription cancellation from the account dashboard. Depending on where you live, you may have additional privacy rights and the right to complain to your local data-protection authority.
Security, children, and changes
We use access controls and encrypted connections to protect service data. Optional cloud archives are encrypted on your Mac before upload. No system can guarantee absolute security. Rewind is not directed to children under 13; contact us if you believe a child has supplied personal information.
We will update this page and its effective date when this policy changes. For material changes, we will provide additional notice through the website, app, or account contact information as appropriate.