Privacy Policy

• Your notes are yours. We process them only to build your study content.
• We don't use your notes, recordings, or tutor conversations for advertising.
• The website uses Meta Pixel to measure page visits and advertising performance.
• The iOS app uses Meta to measure app installs and app activity. Advertising identifier collection requires your permission through Apple's tracking prompt.
• AI processing is done through a third-party AI provider under terms that do not allow them to train models on your content via our API usage.
• Payments are handled by Stripe or Apple — your card details never touch our servers.
• You can delete your documents, study sets, or whole account at any time.

• Account information — name, email, and (for password accounts) a hashed password. We never store passwords in plain text.
• Your study materials — the documents, images, and text you upload, and the concepts, questions, flashcards, and maps derived from them.
• Study activity — answers, confidence ratings, mastery scores, streaks, session results, and tutor conversations. This is the data that powers your progress tracking.
• Billing information — your plan, subscription status, and AI-credit usage. Card details are collected and stored by Stripe or Apple, not by us.
• Technical basics — logs such as IP address and request metadata, used for security (for example, rate limiting) and debugging.

We do not collect precise location or your contacts.

Our website uses Meta Pixel to send page-view events to Meta, including page URLs, referral information, browser and device information, IP address, and cookie identifiers. Meta may use cookies to recognize your browser and associate visits with ads. We do not enable automatic form-field matching or automatic event detection, and we do not include study materials or tutor conversations in these events.

Starting with iOS app version 1.0.2, Meta's Facebook SDK collects app install, app launch, and purchase events, device and app information, and SDK diagnostics. If you allow tracking through Apple's App Tracking Transparency prompt, the app also enables collection of your device's advertising identifier (IDFA). We do not send your study materials or tutor conversations to Meta.

We use website page-view events to measure ad performance and understand which ads bring visitors to Recallet. Meta may associate these events with information from its services to support advertising measurement and targeting.

To run the Service: extracting study content from your uploads, grading answers, tracking mastery, generating tutor responses, metering AI credits, processing subscriptions, keeping the Service secure, and responding to support requests. We do not use your study content for advertising.

We use Meta app events to understand which ads lead to installs and app activity, measure campaign performance, and improve our advertising. When you permit tracking, Meta may link identifiers and events with information from its services and other apps for advertising measurement and targeting. Without permission, advertising identifier collection remains disabled; limited app events and diagnostics may still be sent, subject to iOS tracking restrictions.

When your materials are processed, relevant text (and images, for handwriting transcription) is sent to our AI provider (currently OpenAI) to generate your study content, and tutor questions include excerpts of your materials as context. We use API terms under which the provider does not use this data to train its models. AI output can be inaccurate — see the Terms of Service for what that means for you.

We use a small set of infrastructure providers to run the Service, each processing data only to provide their service to us: hosting, serverless compute, and website usage analytics (Vercel), a managed Postgres database and authentication (Neon), file storage for uploads (Vercel Blob, stored under unguessable keys), AI processing (OpenAI), and payments (Stripe and Apple).

We also share the website page views, app events, and technical data described above with Meta for analytics and advertising measurement. Meta's use of that information is described in its Privacy Policy. We may disclose information when required by law or to protect the Service and its users.

Data is encrypted in transit (TLS) and at rest with our providers. Passwords are hashed with bcrypt. Every query is scoped to your account, uploads are stored under opaque keys, session cookies are signed, and the Service enforces rate limiting and other abuse protections. No system is perfectly secure, but if we learn of a breach affecting your data we will notify you as required by law.

Your content stays in your account until you delete it. Deleting a document or study set removes it and its derived content; deleting your account removes your personal data, uploads, and study history from our production systems, with residual copies in encrypted backups expiring on a rolling basis. Billing records are kept as long as accounting and tax law requires. To delete your account, use the account page or contact us at contact@recallet.app.

You can use your browser's cookie and tracking controls to limit Meta Pixel, and Meta's privacy and ad settings to manage how Meta uses information about your activity. These website controls are separate from Apple's tracking permission for the iOS app.

You can decline Apple's tracking prompt and continue using Recallet. To change your choice, open iOS Settings → Privacy & Security → Tracking and update Recallet's permission. The app refreshes that permission when you return to it. Disabling tracking stops advertising identifier collection but does not delete information already collected. Contact us below for privacy or deletion requests; Meta also provides controls through its Privacy Policy.

You can access and edit your profile in Settings, export or delete your materials, and cancel your subscription anytime. Depending on where you live (for example, GDPR in the EU/UK or CCPA in California) you may have additional rights — access, correction, deletion, portability, and objection. Email us and we'll honor them.

The Service is not directed to children under 13 (or the applicable minimum age of digital consent), and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

If we make material changes to this policy we will give notice in the app or by email before they take effect.

Privacy questions or requests may be directed to DB VENTURE HOLDING LLC at: contact@recallet.app.