Privacy Policy

Last updated: 01/07/2026

We believe your data should always be secure, private, and fully under your control. This Privacy Policy outlines how we safeguard your information when you use our Service.

Information Collection and Use: You Own Your Data

Recall operates the https://www.recall.it/ website, which provides a personal knowledge management service (the “Service”).

We design Recall to help you retain, expand, and interact with your own knowledge, not to extract value from your data. We do not use your data for advertising, profiling, training any AI models or any purpose beyond serving you.

We may collect personally identifiable information such as your email address to provide access to your account and communicate important updates.

Log Data

When you use the Service, we may collect standard diagnostic information your browser sends to us—called Log Data. This can include details like your IP address, browser type and version.

Importantly, features like Augmented Browsing are local-first: all processing happens on your device, and no browsing data leaves your computer. We do not track your browsing activity across websites, and we do not store any browsing history on our servers.

Cookies

Cookies are small data files sent to your browser from websites you visit.

• Keep you logged in
• Remember your preferences
• Understand how the in-app product is used

You can disable cookies through your browser settings, though it may affect how the app works.

Service Providers

We use trusted third-party services to support our operations:

• Google Analytics – usage analytics – Google Analytics Website
• Sentry – error and bug tracking – Sentry Website
• Google Firebase – cloud storage and database services – Firebase Website
• PostHog – website analytics – PostHog Website
• OpenAI – recipient of knowledge base content when you connect ChatGPT via our MCP connector (see the AI Assistant Connections section below) – OpenAI Privacy Policy

AI Assistant Connections (MCP, e.g. ChatGPT)

Recall offers an optional connector that lets third-party AI assistants such as ChatGPT access your knowledge base through the Model Context Protocol (MCP). The connection uses OAuth and is read-only by default. This section explains what data is involved when you choose to enable it.

Data we receive

• Request inputs from the assistant: your search text, an optional focus query, and filters such as date range, tags, source URL, or a specific card.
• Connection data: the OAuth client registration, short-lived authorization codes, and access and refresh tokens (stored hashed), linked to your account identifier.

Data we send to the assistant

The connector only reads your content; it never modifies it. In response to a request, we return content from your own knowledge base:

• Card titles and excerpts of your saved content
• Source URLs and image links
• Tags and creation dates
• Aggregate statistics (card counts, tags, and source domains)

Once this content reaches the assistant provider (for example, OpenAI), it is processed under that provider's own privacy policy and terms.

Purpose and recipients

We use this data only to authenticate the connection and answer your request against your own content. We never use it for advertising, profiling, or training AI models. The AI assistant provider you choose to connect (for example, OpenAI) receives the responses described above. The service providers listed above—and the providers that embed and rank your query to fulfil a search—also process this data on our behalf.

Retention

• Authorization codes: 5 minutes
• Authorization sessions: 10 minutes
• Access tokens: 1 hour
• Refresh tokens: up to 30 days
• Client registrations: up to 1 year
• Your saved content is retained until you choose to delete it.

Your controls

• You review and approve the requested permissions before any access is granted.
• The connector has read-only access to your content.
• You can disconnect the assistant at any time from within that assistant's settings; access then stops once existing tokens expire.
• You can create, view, and delete programmatic API keys at any time in Recall under Settings → Integrations.
• You can email us at support@recall.it to revoke access immediately or to export or delete your data.

Security

We take data security seriously. We use industry-standard security practices to protect your Personal Information. However, no system is 100% secure, so we encourage users to also take steps to safeguard their credentials.

Data Ownership & Portability

Data Ownership

You own your data. Full stop. You can access, export, or delete it at any time. We do not access or use your content for any reason other than delivering the features of the Service.

Data Portability

Your data should move with you. We support exporting your saved content and summaries so you always retain control—whether you stay with Recall or move on.

Your Rights (GDPR, CCPA, and similar laws)

Depending on your location, you may have rights under applicable data protection laws, such as:

• Right to access – You can request a copy of the personal data we hold about you.
• Right to rectification – You can ask us to correct inaccurate or incomplete data.
• Right to erasure (“Right to be forgotten”) – You can request that we delete your data.
• Right to data portability – You can export your data in a machine-readable format.
• Right to object– You can object to certain types of processing, like marketing or profiling. (we don't do this anyway).
• Right not to be subject to automated decision-making(we don't do this anyway).
• Right to opt-out of the sale of personal data(for California residents — we don't sell data).

To exercise any of these rights, email us at support@recall.it. We'll respond within 30 days.

Links to Other Sites

Our Service may contain links to external sites. We do not control and are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies if you visit them.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify users of any significant changes by posting the new policy on this page. Changes are effective immediately once published.

Contact Us

If you have any questions, concerns, or requests related to your data or this Privacy Policy, please contact us at support@recall.it.