Trust Center

What Recall can see, what it stores, and what never leaves your Mac.

A plain-language register of Recall's security controls, the third parties we use, and where we stand on formal compliance. No badge on this page claims more than we can prove.

Vendors that receive your work content: none.

Because Recall's AI runs on your Mac, there is no cloud AI vendor in this table — no screenshots, transcriptions, or work descriptions flow to any third party. The vendors below handle account plumbing: payments, email, hosting, crash reports. The single conditional row is diagnostics storage, which only ever holds what you explicitly chose to send us, redacted on your device first.

VendorPurposeData receivedWork content?
PaddlePayments, billing, and licence management (merchant of record)Name, email address, payment details, purchase historyNo
CloudflareWebsite hosting, account records, and licence infrastructureEmail address, licence and referral records, standard web logsNo
ResendTransactional email (licence keys, invites, product notices)Email address, email contents we send youNo
SentryCrash reportingCrash stack traces, macOS version, hardware model, a random install IDNo
ScalewayEU object storage for opt-in diagnostics bundlesBug-report bundles with on-device redaction applied — only if you enable diagnostics sharingOnly with your opt-in, redacted
AppSumoLicence-code sales for AppSumo customersTheir own customer and purchase records (AppSumo purchases only)No
AppleApp notarization and macOS distribution requirementsThe app binary for notarization scanning — no user dataNo

This list is complete as of August 2026. If we add a vendor, it appears here before it processes anything.