Privacy Policy

1. Information we handle

The information Recall handles depends on the features you use. It may include:

2. How we use information

We use information to:

• Create, secure, and maintain your Recall account.
• Save, organize, search, and speak back your memories.
• Provide family sharing, resident profiles, caregiver access, and private invitations.
• Process subscriptions, maintain plan limits, and restore purchases.
• Protect the Services, prevent abuse, investigate errors, and keep security and support-access records.
• Respond to questions, support requests, privacy requests, and senior-living pilot inquiries.
• Improve accessibility, reliability, and the usefulness of Recall’s features.
• Comply with legal obligations and enforce our agreements.

Recall does not sell personal information and does not use personal information for cross-context behavioral advertising.

3. Voice and microphone privacy

Recall asks for microphone and speech-recognition permission only when a voice feature needs it. Recall uses recognized text to save or find a structured memory. Recall may retain the requested action, speech provider, and whether the action succeeded, but does not retain a separate verbatim voice transcript in its operational voice log. Recall does not store raw microphone audio.

Your device, operating system, browser, Apple, Google, or another speech-recognition provider may temporarily process audio to convert speech to text under that provider’s own privacy terms. You can avoid voice processing by using manual entry and search.

4. Sharing and service providers

Recall may disclose information in these limited situations:

• People you authorize. Memories in a Recall Circle can be visible to invited family members or trusted helpers. Provider workspace information can be visible to authorized caregivers or staff with access to the relevant resident.
• Service providers. We use vendors that support hosting, databases, private file storage, security, speech recognition, app distribution, subscriptions, payment processing, and technical operations. These may include Cloudflare, Apple, Google, and Stripe, depending on the device and payment method you use.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, respond to lawful process, protect a person’s safety, prevent fraud or abuse, or protect Recall’s rights.
• Business changes. Information may be transferred as part of a merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality and notice requirements.

We require service providers to use information only to perform services for Recall and to protect it appropriately.

5. Your choices and controls

• Review, update, or delete individual memories inside Recall.
• Choose whether to upload a profile or resident photo and change it later.
• Manage microphone, speech-recognition, and photo permissions in your device or browser settings.
• Family owners can remove members; family members can leave a Recall Circle.
• Account owners control temporary support access and may revoke it at any time.
• Manage or cancel an Apple or Google subscription through the applicable app-store account. Web subscriptions can be managed through the Recall billing portal when available.

Depending on where you live, you may also have rights to request access, correction, deletion, restriction, or a copy of personal information, or to object to certain processing. To make a request, email privacy@recallmemoryapp.com. We may need to verify your identity before completing a request. Authorized agents may be asked to provide proof of authority.

6. Retention and deletion

We keep account information and saved content while your account is active and as needed to provide the Services. Invitation links expire after seven days, and regular sign-in sessions generally expire after 30 days. Healthcare workspace grants are short-lived and are revoked when the workspace is backgrounded. An individual memory moved to Recently Deleted can be restored for 30 days and is then removed automatically. Raw microphone audio has a Recall retention period of zero because Recall does not store it.

When an account is permanently deleted, Recall is designed to remove its credentials, active sessions, family relationships, memories, residents, photos, and voice logs. We may keep limited redacted audit, security, transaction, or legal records where reasonably necessary to prevent fraud, document compliance, resolve disputes, or meet legal obligations. Backup copies may remain for a limited period until overwritten.

To request account deletion, contact privacy@recallmemoryapp.com from the email address associated with your account.

7. Security

Recall uses safeguards intended to protect information, including encrypted network connections, salted password derivation, hashed session and recovery tokens, private photo storage, server-side account checks, expiring invitations, and owner-controlled support access. Healthcare features also use short-lived workspace grants, patient-level authorization, auditable emergency access, and optional on-property checks. No online service can guarantee absolute security, so use a unique password and avoid saving information that is not needed for Recall’s purpose.

8. Healthcare and senior-living use

Recall is a memory-support tool, not an emergency service, medical device, or medical-record system. Do not rely on Recall for emergencies, diagnosis, treatment decisions, medication instructions, or other clinical records.

Healthcare and senior-living organizations are responsible for determining whether their use of Recall is permitted by applicable privacy and health-information laws, providing required notices, and obtaining appropriate permissions. Recall should not be used to store protected health information unless a separate written agreement expressly authorizes that use. A location restriction is an additional safeguard; it does not by itself establish compliance with HIPAA or any other law.

9. Children’s privacy

Recall is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 without legally valid authorization. If you believe a child has provided information improperly, contact us so we can review and delete it as appropriate.

10. International processing

Recall is operated from the United States. Information may be processed in the United States and other locations where our service providers operate. Those locations may have data protection rules that differ from the rules where you live.

11. Changes to this policy

We may update this Privacy Policy as Recall changes. We will post the updated policy here and revise the effective date. If a change materially affects how we handle personal information, we will provide additional notice when appropriate.