Privacy Policy

Recall is a flashcard application developed and operated by Recall Labs (“we”, “us”, “our”). This policy explains what data we collect when you use Recall, how we use it, and the choices you have.

We collect the minimum data necessary to run the service:

• Email address: required to create an account. Used for authentication only.
• Name: the first name you optionally provide in-app. Stored locally and in your Supabase profile.
• Subscription status: whether your account has an active Recall AI subscription. Stored in your Supabase profile. We never see or store your card details.
• AI usage count: how many Recall AI generations you have used in the current month. Stored in your Supabase profile to enforce the monthly limit.

That is the complete list of data we hold on our servers. Nothing else.

All flashcard and study data is stored locally on your device and never uploaded to our servers:

• Decks and cards: stored at %APPDATA%\Recall\recall-data.json on Windows (equivalent paths on Mac).
• Study history, XP, streaks, and settings: stored in the same local file.
• Profile picture:stored in your browser's localStorage as a base64-encoded image. Never uploaded.

Your flashcard data is yours. We cannot see it, access it, or recover it if you delete it.

Recall uses Supabase for account authentication. When you sign in, Supabase handles your credentials. We store only your email, name, subscription status, and AI usage count in your Supabase profile. We do not use Supabase for syncing flashcard data.

When you use Recall AI, the notes or PDF you submit are sent to our backend and processed using Recall AI for the sole purpose of generating your flashcards.

We do not store your notes or documents on our servers - they are processed transiently and discarded after the cards are generated. The generated cards are saved locally on your device, like all of your flashcard data.

Payments are processed by Stripe. When you subscribe to Recall AI, you enter your payment details directly on Stripe's secure checkout page. We never see, receive, or store your card number, expiry date, or any other payment details. Stripe may retain payment records in accordance with their own privacy policy.

After a successful payment, Stripe notifies our backend, which updates the subscription status on your profile. That is the only record we keep.

Recall uses Sentry to collect anonymous error and crash reports. When the app encounters an unexpected error, a report is sent to Sentry containing technical details such as the error message, stack trace, and app version. This helps us identify and fix stability issues. No personal data (email address, name, or flashcard content) is intentionally included in these reports. For more information on how Sentry handles this data, see sentry.io/privacy.

We do not run advertising. We do not sell your data. We do not share your data with third parties for any marketing or profiling purpose. We do not use any third-party analytics or tracking services. The business model is selling software, not selling users.

• To authenticate you when you sign in.
• To determine whether your account has an active Recall AI subscription, and how many AI generations you have used this month.
• To send you a single launch notification if you joined the waitlist (one email only).
• To respond to support requests you send us.

Your account data (email, name, subscription status, AI usage count) is retained for as long as your account is active. If you delete your account from within the app, your Supabase profile is deleted within 30 days. Your local data is deleted when you uninstall the app or manually remove the data file.

• Access: your local data is always accessible directly on your device.
• Deletion: you can delete your account from the Profile screen in the app. This removes your Supabase profile. Your local data remains until you remove it yourself.
• Correction: you can update your name from the Profile screen at any time.

If you are in the European Economic Area, you have additional rights under the GDPR. To exercise any of these rights, email support@recalllabs.net.

The Recall desktop app does not use cookies. The Recall website uses only essential cookies required for the site to function. No tracking cookies, analytics cookies, or advertising cookies are used.

Recall is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will update the date at the top of this page. Material changes will be communicated to active users by email.

Questions about this policy? Email support@recalllabs.net. We'll respond within two business days.