Privacy Policy

This Privacy Policy explains what information Recall collects, why, how it is handled, and the choices you have. Recall (“Recall”, “we”, “us”) is a desktop application currently operated by an independent individual developer (a sole trader) based in the Republic of Moldova. We are forming a registered company, and we will update this page to name it once it exists.

For a plain-English overview of how Recall watches the shape of your work and the limits we hold to, see our Trust Center. This page is the formal policy. Where the two differ, this page governs.

Recall is built so that your work stays with you. Capture and grouping run on your own machine, and the local store is encrypted at rest on your device. Your work content is not sent to us and is not stored on our servers, unless you choose to share diagnostics, described below.

This policy is therefore mostly about the small amount of account, payment, and support information we need to run the business around the app, not about the content of your work.

We collect only what we need:

• Account and license data. Your name, email address, country, and the status of your subscription, so we can give you access and provide support. Most of this comes to us from Paddle after a purchase.
• Payment data, held by Paddle. When you buy a subscription, payment details such as your card information are collected and processed by Paddle, our Merchant of Record. We do not receive or store your full card details.
• Waitlist and download sign-ups. If you join the waitlist or request a download, we store the email address you give us so we can contact you about access.
• Support messages. If you email us, we keep your message and contact details so we can help and keep a record of the conversation.
• Feedback conversations. When you send feedback from the Recall app, the message you write (and the app and macOS version) is stored on our servers as a conversation, so we can answer you inside the app. The app checks for our replies with a random key kept on your Mac. We email ourselves a copy of each new message so we see it quickly. Nothing from your screen is attached unless you choose to include it. “Delete my analytics data” in the app deletes your conversations too.
• Optional diagnostics. Diagnostics sharing is off by default. If you turn it on and send a bug report, it may include technical details about your device and the error, recent analysis traces, screenshots, and any text you add. Screenshots are redacted on your device before they are sent, so emails, keys, and credentials are masked. We use diagnostics to fix the problem you reported and to improve Recall Core, our own on-device model. They are stored in the EU and deleted after 30 days.
• Website visits. When you visit joinrecall.com, Google Analytics receives your page views along with technical data such as your IP address, browser, and device. We also keep a record, under a first-party cookie called recall_acq, of how you arrived: the campaign tags on the link you followed (source, medium, campaign, content), an advertising click ID if the link carried one (from Google, or from Reddit while advertising is allowed), Reddit’s cookie ID while advertising is allowed, the page you landed on, the website you came from (never its query string), your country, and the Google Analytics identifiers for your visit. In the EU, EEA, UK and Switzerland none of this happens until you accept. Whatever you choose, a click on Download is counted together with the website the click came from (its domain only, never the page or its address) and any campaign tag on the download link; that count carries no identifier and no cookie.
• Download clicks. When you click Download we count the click, note whether it came from a Mac browser, another computer, a phone or an automated tool (read from the description your browser sends, which we do not keep), and link it to that record if analytics is allowed for you.
• App usage events. Unless you turn it off in Settings → Privacy, the Recall app sends pseudonymous usage events: which screens and features you use, tied to a random install ID together with the app version, macOS version, and chip type. We do not use them to identify you, and they never contain anything from your screen: no window titles, file names, URLs, project or task names, notes, or message text. A few milestones (for example, setup completed, the trial started, or a subscription purchase with its amount, currency and Paddle transaction number) are also sent to Google Analytics under a hashed form of the install ID, never your email address. If you turn the switch off, usage events and crash reports stop and we receive one note that you did, but anonymous setup counts still go out: which setup step was reached, whether a permission was missing, whether the model download finished or failed and a broad reason, whether setup finished, and that a first capture happened. They carry no install ID, only a random ID that lasts for one launch.
• The link between an install and a website visit. When you click Start free trial in Recall, it opens a page on our site that confirms your trial and, while usage analytics is on, passes the random install ID. If your browser still holds the recall_acq cookie and analytics is allowed for you, we connect the install to your earlier visit, so we can tell which channels lead to installs. If you register or activate a license, your install ID is also linked to that registration and account. Once an install is linked to a visit, its milestones go to Google under that visit’s Google Analytics client ID, so Google can join them to your earlier browsing on our site.

The following never leave your machine and are never sent to us:

• microphone audio, calls, camera, or video of any kind;
• keystrokes, passwords, or clipboard contents;
• the content of password, payment, or two-factor fields;
• the bodies of your private messages, emails, or documents, except in a bug report you choose to send with diagnostics sharing on, which can include screenshots and any text you add;
• anything captured while Recall is paused.

We do not sell your personal information. The one advertiser we tell anything is Reddit, and only what Advertising measurement (Reddit) below describes. Website visit data is processed for us by Google (analytics), Reddit (advertising measurement) and, outside the EU, EEA, UK and Switzerland, RB2B (company identification), as described below. We do not use your work to train models, with one opt-in exception: diagnostics you choose to share help us improve Recall Core, our own model. They are never used for anyone else’s model, and sharing is off by default.

We use the information above to:

• create and maintain your account and license;
• process payments, renewals, and refunds through Paddle;
• provide support and respond to your messages;
• send service messages about your account, security, or important changes;
• keep Recall working, secure, and reliable, and to fix problems;
• improve Recall Core, our own on-device model, using only diagnostics you choose to share;
• understand how people find Recall and which channels lead to downloads, installs, trials and purchases, including by sending conversion milestones such as a download, a completed setup or a purchase to Google;
• measure which Reddit ads lead to downloads, sign-ups, trials and purchases, while you allow advertising;
• understand which parts of Recall are used and where people get stuck, from pseudonymous app usage events;
• recognise which companies visit our website, outside the EU, EEA, UK and Switzerland;
• meet our legal and tax obligations.

We send product or marketing email only where you have asked to hear from us, such as by joining the waitlist, and you can opt out at any time.

Where the GDPR or UK GDPR applies, we rely on these legal bases: performance of our contract with you, to provide the app and your subscription; our legitimate interests, to keep Recall secure, to improve it, and to understand how it is used through pseudonymous app usage events and, outside the EU, EEA, UK and Switzerland, website analytics and advertising measurement, which you can object to or opt out of at any time (Settings → Privacy in the app, Cookie settings on the website); your consent, for optional things like marketing email or diagnostics and, for visitors in the EU, EEA, UK and Switzerland, analytics cookies, website analytics and advertising measurement, which you can withdraw at any time; and compliance with legal obligations, such as tax and accounting.

We do not sell your data. We share the limited information above only with the service providers we need to run Recall, under agreements that require them to protect it:

• Paddle, our Merchant of Record, for checkout, billing, payment processing, invoicing, tax, and billing support. See Paddle’s Privacy Notice.
• Hosting and infrastructure providers that run our website and the systems behind accounts and licenses, and the EU object storage that holds diagnostics you choose to share.
• Email providers that deliver account, support, and waitlist messages.
• Google, for website analytics (Google Analytics) and, from the app, a few milestones such as setup completed or a purchase (its amount and currency), sent through Google’s Measurement Protocol under a hashed install ID and, when the install is linked to a website visit, that visit’s Google Analytics client ID. Google receives page views, campaign data, and technical data such as IP address and device. See Google’s Privacy Policy.
• RB2B, outside the EU, EEA, UK and Switzerland only, to recognise which companies visit our website. RB2B identifies companies and, for some US visitors, individuals. It is never loaded for visitors in those regions, and not after you opt out under Cookie settings.
• Reddit, for advertising measurement while advertising is allowed for you: its pixel on our website (page visits, with technical data such as IP address and browser) and, when you arrived from a Reddit ad, a message from our servers when that visit led to a download, a sign-up, a trial or a first purchase (its amount and currency), identified by Reddit’s own click ID and cookie ID, plus one-way hashed reference numbers (of your install, the download or the payment) used only so a conversion is not counted twice. See Reddit’s Privacy Policy.
• Sentry, for crash reports: a stack trace, the macOS version, the hardware model, and the random install ID, with no work content. The switch in Settings → Privacy turns these off.

Apart from diagnostics you choose to share, none of these providers receive the content of your work. We may also disclose information if the law requires it, or to protect our rights, safety, or property.

Recall’s AI runs on your Mac with Recall Core, our own on-device model. If an optional feature ever lets you use your own key with a model provider, your request goes to that provider under their terms, not ours.

We and our providers may process information in countries other than yours. Where personal data moves out of the EU, UK, or other regions with data-transfer rules, we rely on appropriate safeguards, such as standard contractual clauses, to keep it protected.

We keep account and support information for as long as your account is active and for a reasonable period afterward, then delete or anonymize it. We keep billing and tax records for as long as the law requires. Diagnostics you choose to share are deleted after 30 days.

Raw app usage events are deleted after about 90 days. Per-install summaries (which days a Mac was active, and setup milestones) are kept until you delete your analytics data. Website visit records that are never linked to an install are deleted after 13 months. The recall_acq cookie lasts 90 days and the recall_consent cookie one year. Google Analytics keeps its data for the retention period set in our Google Analytics account, which Google limits to 14 months.

The content of your work lives in the encrypted local store on your machine. You control it: you can pause capture at any time, and removing Recall from Settings → Data deletes the local store entirely.

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to export it, to object to or restrict certain processing, and to withdraw consent. Residents of the EU and UK have these rights under the GDPR. California residents have similar rights under the CCPA, including the right to know and to delete, and we do not sell personal information. Telling Reddit which ad visits led to a download, a sign-up, a trial or a purchase can count as “sharing” under the CCPA; Do not share my data, in the website footer, opts you out of it.

Analytics choices. In the Recall app, Settings → Privacy → Usage analytics & crash reports turns off usage events and crash reports, and Delete my analytics data erases what we hold for your install ID, including the website visit linked to it. That erases Recall’s copy. It does not reach data Google Analytics has already received, which Google keeps for the retention period set in our account (at most 14 months). On the website, Cookie settings in the footer lets you withdraw consent or opt out at any time; rejecting also erases the Google and advertising identifiers on your visit record. Do not share my data, also in the footer, turns advertising off on its own: it erases the Reddit IDs on your visit record and removes Reddit’s cookie.

To exercise any of these rights, email hello@joinrecall.com. We will respond within the time the law allows. You also have the right to complain to your local data-protection authority.

We protect information with measures appropriate to its sensitivity, including encryption of the local store at rest, encrypted connections in transit, and access controls on the limited account data we hold. No method of storage or transmission is perfectly secure, but keeping your work on your own device is the strongest protection we can offer, and it is the default.

Our website uses Google Analytics to understand how people find Recall, and stores a first-party cookie (recall_acq, 90 days) recording how you arrived (campaign, referrer), and a second one (recall_consent, one year) remembering your choices for analytics and advertising. Visitors in the EU, EEA, UK and Switzerland are asked first: Google’s tag is not even loaded until they accept. Everyone else can opt out under Cookie settings, after which Google’s tag is not loaded either. While advertising is allowed, Reddit’s pixel sets its own cookie (_rdt_uuid); see Advertising measurement (Reddit). Outside those regions we also use RB2B to see which companies, and for some US visitors which individuals, visit. The Recall app sends pseudonymous usage events (which screens and features you use, never anything from your screen) linked to a random install ID, which we do not use to identify you; you can turn this off in Settings → Privacy, except anonymous setup counts, which carry no install ID. The Recall application does not track you across other apps or websites. Checkout pages provided by Paddle may use cookies necessary to process your payment, governed by Paddle’s policy.

We advertise Recall on Reddit. While advertising is allowed for you, Reddit’s pixel loads on our website and tells Reddit which pages you visit, with the technical data any web request carries, such as your IP address and browser. It does not run on account, sign-in, download, redemption or setup pages. If you arrived from a Reddit ad, we also tell Reddit, from our servers, when that visit led to a download, a sign-up, a trial or a first purchase (with its amount and currency). Those messages identify the visit by Reddit’s own click ID and cookie ID (the pixel’s _rdt_uuid cookie), plus one-way hashed reference numbers (of your install, the download or the payment) used only so a conversion is not counted twice. They never carry anything from your Mac or your work, your email address, your IP address, or any of those reference numbers in readable form.

In the EU, EEA, UK and Switzerland advertising is off until you allow it. Elsewhere it is on until you turn it off. Cookie settings in the footer has an Advertising switch, and Do not share my data, next to it in every region, turns advertising off in one click. Reject all turns analytics and advertising both off. Turning analytics off alone stops any conversion from your visit being reported to Reddit, but Reddit’s pixel keeps seeing your visits for as long as Advertising stays on. Turning advertising off erases the Reddit IDs on your visit record, drops any message to Reddit not yet sent, and removes Reddit’s cookie. Under California law, telling Reddit about these steps can count as “sharing” personal information for cross-context behavioral advertising; Do not share my data opts you out of that sharing. If your browser sends a Global Privacy Control signal, we treat it as an opt-out of this sharing, unless you turn Advertising on yourself.

Recall is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy as the product and our company evolve, including when we move from an individual operator to a registered company. We will update the date at the top of this page, and for material changes we will let you know by email or in the app.

For any privacy question, or to exercise your rights, write to us at hello@joinrecall.com. For questions about payment data, you can also contact Paddle using the details on your receipt.