Privacy Policy

1. Overview

This Privacy Policy explains how Recall (“we,” “us,” or “our”) collects, uses, stores, and shares information when you use our website, web application, AI-assisted card and deck features, file uploads, study tools, downloads, and related services (together, the “Service”).

By creating an account or using Recall, you acknowledge this Policy. If you do not agree, do not use the Service. Our Terms of Service also apply and work together with this Policy.

Related: Terms of Service.

2. Information we collect

We collect information in the following categories:

• Account information — email address, password (stored as a secure hash by our auth provider), display name, and optional profile details such as avatar images you upload.
• Study content — deck titles and descriptions, flashcards (front/back and related fields), tags, favorites, study and quiz progress, completion history, and similar learning data you create or generate in the Service.
• Uploads — files you submit for conversion into cards (for example notes or documents), plus derived text extracted for processing.
• AI and usage data — prompts you send to generation features, model/provider selections where applicable, token and usage meters, plan limits, and technical logs needed to run and bill AI features.
• Subscription and billing data — plan type, subscription status, renewal and cancelation timing, and payment-related identifiers handled by our payment processor (we do not store full card numbers on Recall servers).
• Technical data — IP address, device/browser type, approximate location derived from network data, cookies or similar session identifiers, and diagnostic logs for security and reliability.
• Communications — messages you send us about support, abuse, or account issues.

3. How we use information

We use information to:

• Provide, operate, and improve the Service (accounts, decks, study modes, quiz, Discover, downloads, and settings).
• Authenticate you, protect accounts, and prevent fraud, abuse, and unauthorized plan access.
• Process subscriptions, show plan usage, and communicate about billing status.
• Run AI card generation, file conversion, and related grading or assistive features you request.
• Show public profile information and public decks to other users when you choose those settings.
• Send service-related notices (security, important product changes, or account emails).
• Comply with law, enforce our Terms, and protect the rights and safety of users and Recall.

4. AI processing and file uploads

When you use Pro or Premium AI features, content you provide (such as notes, prompts, uploaded file text, or card drafts) may be sent to third-party AI providers to generate or refine flashcards or related outputs.

Do not upload or paste sensitive personal information, other people’s private data, passwords, or prohibited content into AI prompts, card fields, or uploads. You are responsible for reviewing AI output before relying on it.

We may retain usage counts and limited technical metadata for billing, rate limits, abuse prevention, and quality. AI providers process data under their own terms and privacy practices as our processors or independent services, depending on the integration.

5. When information is shared

We do not sell your personal information. We share information only as needed to run the Service or as required by law:

• Service providers — infrastructure and tools such as authentication/database hosting, file storage, payment processing, email delivery, analytics or error monitoring (if enabled), and AI model providers.
• Other users — if you make a profile or deck public, or share a link/feature that exposes content, that information can be seen by people with access.
• Legal and safety — when we believe disclosure is reasonably necessary to comply with law, respond to lawful requests, or protect users, the Service, or the public from harm or abuse.
• Business transfers — if Recall is involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction subject to appropriate safeguards.

6. Public vs private content

Private decks and private profile settings are intended to be accessible only to you and systems needed to operate your account, subject to our access controls and this Policy.

Public decks and public profile fields may appear in Discover, profiles, or shared views for other signed-in users. Choose public visibility only for content you are comfortable sharing.

Downloaded or exported files may include a small Recall indicator or logo. Exports you create and share outside Recall are under your control; treat them carefully if they contain personal study notes.

7. Cookies and sessions

We use cookies and similar technologies that are necessary to keep you signed in, protect sessions, and remember basic preferences required for the Service to function.

We do not use these technologies to sell advertising profiles. You can block cookies in your browser, but parts of the Service (especially login) may not work without them.

8. Retention and account deletion

We keep account and study data while your account is active and as needed to provide the Service. Usage and billing records may be kept longer where required for accounting, dispute resolution, or legal compliance.

You may delete your account through in-app settings where available. After deletion, we remove or anonymize personal data that is no longer needed, except for limited records we must retain for security, legal, or billing reasons.

Backups and logs may persist for a short period before full removal from our systems.

9. Security

We use reasonable administrative, technical, and organizational measures to protect information, including encrypted connections (HTTPS) and access controls via our hosting and auth providers.

No method of transmission or storage is completely secure. You can help by choosing a strong password, keeping credentials private, and avoiding sensitive personal data in cards or uploads.

10. Children’s privacy

Recall is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children below that age. If you believe a child has provided us information, contact us so we can take appropriate steps.

11. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export certain personal information, or to object to or restrict certain processing. You can often manage profile details and visibility in Settings.

You may cancel a paid subscription at any time; cancelation and refunds are governed by the Terms of Service. Canceling does not automatically delete your account or study data unless you also request deletion.

To exercise privacy rights, use in-app controls where available or contact us through the channels listed below. We may need to verify your identity before fulfilling a request.

12. International processing

Recall and our providers may process information in the United States and other countries. Those locations may have different data-protection laws than your home country. Where required, we rely on appropriate transfer mechanisms offered by our providers.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be highlighted in the Service or by email when appropriate. Continued use after an update means you accept the revised Policy.

14. Contact

Questions about privacy, data requests, or this Policy can be sent through your account settings contact options when available, or by reaching out to the email associated with your Recall project/support channel.

For product rules (acceptable use, subscriptions, downloads), see the Terms of Service.

Terms of Service