Privacy Policy

Last updated: 21 August 2026

The short version

Recall stores your memories so you don't lose them — that's the whole job. Your data is yours: we hold it for you, we don't use it. Private by default, never sold, never used for advertising, never used to train AI models, never read by anyone at Recall. You can download a complete copy at any time, and you can delete any of it — or your entire account and profile — yourself, at any time.

What we collect

• Account details from your sign-in provider (Google, Facebook or Apple): your name, email address and provider account id. We do not receive your password.
• Content you capture: memories, notes, photos, and the people, places and relationships Recall extracts from them.
• Operational basics: timestamps, error reports (Sentry) and privacy-respecting product analytics (PostHog) — feature usage counts tied to an anonymous account id. We never record your screen or session, never capture what you type, and your memories are never sent to analytics. "Do Not Track" is respected.

How your content is processed

To understand what you capture (extracting people, places, dates), your text is processed by an AI provider (currently OpenAI) with retention disabled on those requests. Your content is not used to train models. Emails (for example when you share a memory) are delivered via Resend.

What we never do

• Read, browse or review your content. Your memories are stored for you, not for us — no person at Recall looks at them. Operational access to the database is restricted and used only to keep the service running or to resolve a problem you report to us.
• Sell or rent your data.
• Share your memories with anyone — unless you explicitly share a specific memory with a specific person.
• Use your content for advertising, profiling, or anything other than showing it back to you.

Storage & security

Data is stored in a managed PostgreSQL database with per-user isolation enforced at the database layer (row-level security), encrypted in transit and at rest by our hosting providers (Fly.io, Neon, Cloudflare).

Your rights & controls

• Export: download a complete, structured copy of everything — memories, people, places, relationships and photos — from the Data page, anytime, no questions asked.
• Delete: remove individual memories, or wipe all your data from the app. Deletion is immediate and permanent; short-lived encrypted database backups (kept only for disaster recovery) expire automatically within days.
• Account removal: delete your entire account and profile yourself in the app (Profile → Delete account), effective immediately, or see how to request deletion if you can't sign in.

Data deletion (including via Facebook)

You can delete your data at any time inside the app (Admin → Delete my data). If you signed in with Facebook, you can also request deletion through Facebook's settings ("Apps and Websites" → Recall → Remove); we honour those requests automatically: the data associated with your Facebook login is deleted, and if it was your only sign-in method your entire account is removed. This page serves as confirmation of that process.

Cookies

The app uses local storage for your session token and preferences. No advertising or cross-site tracking cookies. A short-lived cookie is used only during the sign-in redirect.

Contact

Questions or requests: [email protected].